$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33730f76-852b-395e-9a7a-3cb9f831682c.roa File: 33730f76-852b-395e-9a7a-3cb9f831682c.roa (raw, json) Hash identifier: zU43262vet2EdeQS91Wb/959E53L0CYp6AVTYN+888I= Subject key identifier: 74:7D:AF:A1:E2:7E:A8:B1:BC:CD:02:B7:18:BD:84:0E:45:A7:BF:33 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183BBF320965D283DA22A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33730f76-852b-395e-9a7a-3cb9f831682c.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397207 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:bb:f3:20:96:5d:28:3d:a2:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=6ca5934e-79a9-4e3f-9806-aa2fb30901ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:b4:d9:44:1f:e9:29:1c:48:89:de:bf:44: e3:83:54:7e:b4:2f:19:5d:e8:d1:4b:01:78:b7:43: 4d:12:e6:b2:21:f6:ad:eb:4f:a9:e5:fa:0c:84:32: 4c:96:db:cf:ea:02:18:87:14:34:8d:95:86:b4:36: a4:9f:9b:27:99:0f:46:90:4e:47:2a:94:5f:27:01: 06:67:9a:c0:da:78:b5:77:e6:d4:62:8f:38:a4:2c: 67:67:e6:13:be:0c:84:7e:d2:57:47:d8:38:68:aa: 40:d9:05:b7:e7:f4:bd:b2:48:bc:99:84:40:b9:7c: ef:9d:14:73:f8:cf:d1:e8:6b:da:d3:d6:e4:3c:cd: 43:56:21:08:f9:67:a4:41:24:da:14:cf:d9:08:da: ea:be:20:22:9c:8c:bc:59:98:5f:bf:2c:11:07:d8: 05:9a:1e:6b:7a:2c:bc:fa:31:14:06:9f:6e:b2:c2: c1:a4:26:bc:aa:5f:99:ea:b3:f7:66:21:a9:df:f8: 87:07:9e:02:a1:32:4c:53:34:56:a7:4d:7f:84:a3: cc:51:e1:44:5f:ab:ff:f9:22:34:56:d4:75:c6:cb: 86:be:ab:56:b8:a9:75:05:63:53:68:18:b6:1d:5c: fb:9c:d0:49:49:bd:59:50:cb:d2:0c:c9:d0:81:7c: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7D:AF:A1:E2:7E:A8:B1:BC:CD:02:B7:18:BD:84:0E:45:A7:BF:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33730f76-852b-395e-9a7a-3cb9f831682c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a4:02:41:d8:b6:76:0c:39:1f:8a:e8:2d:e1:c7:cd:ef:0e: e0:6f:86:b3:b6:bd:fe:80:70:7f:d7:32:23:7b:ba:cf:4b:6b: 0b:d1:bf:2f:26:d1:90:98:7f:d9:e8:18:01:2f:48:6b:c2:fc: 19:87:b4:84:54:89:41:08:4b:f4:fc:cf:ed:3d:4a:f4:9f:32: 02:54:3d:f9:c2:10:22:8e:ec:a3:9b:fc:4d:58:6d:6f:e0:ff: 39:1b:92:f1:f7:71:04:c1:29:1b:80:b0:69:ef:03:2d:67:c5: 24:16:21:7f:b8:b5:77:db:45:33:0b:e9:8b:29:7b:78:69:6d: 5b:8c:ec:d2:72:08:6a:ed:d1:62:b0:1a:33:ff:80:8b:39:8f: f7:1f:74:45:86:a9:c3:43:8b:16:e8:e0:03:a1:bc:c0:d1:cf: 6f:f5:53:c8:44:7c:3f:d1:d0:da:45:b7:f5:d9:0c:e3:8d:99: f1:e9:dc:ce:f1:07:eb:d0:d5:61:0e:e5:4a:99:d7:29:bd:45: f4:ef:a4:ce:83:e3:ca:48:38:88:80:4b:9f:4b:82:c6:29:a7: 5d:c3:a5:14:b1:9d:70:71:e9:2b:d3:da:e5:e5:71:81:db:40: 19:a3:ca:a6:3f:8b:8f:17:aa:50:a0:77:a4:46:aa:3c:50:c0: e7:57:ec:b0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg7vzIJZdKD2iKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NmNhNTkzNGUtNzlhOS00ZTNmLTk4MDYtYWEyZmIzMDkwMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Km02UQf6SkcSInev0Tjg1R+tC8ZXejRSwF4 t0NNEuayIfat60+p5foMhDJMltvP6gIYhxQ0jZWGtDakn5snmQ9GkE5HKpRfJwEG Z5rA2ni1d+bUYo84pCxnZ+YTvgyEftJXR9g4aKpA2QW35/S9ski8mYRAuXzvnRRz +M/R6Gva09bkPM1DViEI+WekQSTaFM/ZCNrqviAinIy8WZhfvywRB9gFmh5reiy8 +jEUBp9ussLBpCa8ql+Z6rP3ZiGp3/iHB54CoTJMUzRWp01/hKPMUeFEX6v/+SI0 VtR1xsuGvqtWuKl1BWNTaBi2HVz7nNBJSb1ZUMvSDMnQgXxEfwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHR9r6HifqixvM0Ctxi9hA5Fp78zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM3MzBmNzYtODUyYi0z OTVlLTlhN2EtM2NiOWY4MzE2ODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBEpAJB2LZ2DDkfiugt4cfN7w7gb4aztr3+gHB/ 1zIje7rPS2sL0b8vJtGQmH/Z6BgBL0hrwvwZh7SEVIlBCEv0/M/tPUr0nzICVD35 whAijuyjm/xNWG1v4P85G5Lx93EEwSkbgLBp7wMtZ8UkFiF/uLV320UzC+mLKXt4 aW1bjOzScghq7dFisBoz/4CLOY/3H3RFhqnDQ4sW6OADobzA0c9v9VPIRHw/0dDa Rbf12QzjjZnx6dzO8Qfr0NVhDuVKmdcpvUX076TOg+PKSDiIgEufS4LGKaddw6UU sZ1wcekr09rl5XGB20AZo8qmP4uPF6pQoHekRqo8UMDnV+yw -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:57 2025 by rpki-client