$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa File: 3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa (raw, json) Hash identifier: p7VdkJxgqiv87j0AeuxeUqSPj1JlQaqdXbCaX+B5h08= Subject key identifier: AE:24:32:5F:26:22:7C:B2:EF:DA:F2:FA:7D:7C:3F:CF:EC:2E:BC:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183E7D1DB5837F46AD4F080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397197 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:e7:d1:db:58:37:f4:6a:d4:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=647b39d8-f8bd-422f-9c15-656611c3b254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:ea:33:1d:cc:a3:81:05:71:e9:e6:c4:59: c2:1e:07:b2:63:a1:bb:ff:98:09:e6:2f:ee:c8:d2: 13:9d:13:1b:85:fc:4c:b0:4d:42:6d:0c:f9:7d:fc: fd:dd:ee:93:3a:a8:4d:7b:cc:77:b1:51:9b:94:e2: 17:c9:5b:26:15:98:f1:1c:43:ab:74:be:f8:a8:6b: f0:04:69:38:e4:9b:8d:8a:5f:44:23:12:86:37:5d: f3:ae:82:09:9f:a5:f8:ff:cd:8a:6e:17:6b:88:7d: f3:b7:60:69:3c:13:4a:80:91:90:bb:99:02:0a:cd: 02:18:21:b0:25:cf:de:88:48:1f:7b:dc:ed:95:bf: 1c:f5:6f:02:b2:ab:8f:00:8b:ee:e8:0e:66:a1:e9: ee:fb:35:7f:3d:82:32:7e:f7:b8:e5:03:1a:59:88: 99:dc:07:8a:20:fe:39:00:94:59:30:fc:1d:82:d3: 9f:f2:54:02:7a:a2:16:da:dd:57:45:a0:d4:0b:dc: 7e:68:02:4e:d5:5c:5a:c2:d9:bd:34:75:ba:48:40: 0f:bd:0d:bf:6f:02:80:27:de:94:60:21:a0:23:e4: 52:70:97:b2:56:93:52:6b:c7:77:89:4a:d8:7d:c3: a4:0c:37:a3:95:24:ce:bd:ce:96:b9:13:44:3d:3f: 87:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:24:32:5F:26:22:7C:B2:EF:DA:F2:FA:7D:7C:3F:CF:EC:2E:BC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bcbfac0-6c81-339c-b207-a27ae54bbbe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f7:f8:60:d8:14:05:ac:d8:04:07:d5:dd:6d:6f:08:a8:d8: a8:b2:f8:5d:c5:67:8f:a7:a2:a5:71:da:49:79:0d:04:3b:be: e4:51:f2:15:4c:7b:91:89:16:4c:45:c7:f1:38:d8:08:79:7f: b5:8c:ff:68:97:ba:54:02:cc:2c:f8:15:93:5f:22:4e:28:e7: 2e:be:fd:f5:af:92:3f:91:3e:9f:1d:aa:98:11:28:a3:f7:2d: 32:d7:02:bb:bd:58:04:63:86:89:4f:cd:1d:e1:f9:a0:dd:26: 17:23:8c:dc:53:ef:b5:5d:42:13:90:ab:e6:67:0b:c5:68:cf: a0:2e:16:f8:30:ea:cd:11:bb:b5:83:f1:ff:d3:00:91:c2:34: 6f:24:10:cf:f5:07:90:df:3b:e1:15:c6:07:37:a4:d8:81:08: 56:de:17:f6:50:af:c2:09:fa:a3:f5:f3:b2:ec:2c:d1:93:ee: ef:01:6e:ab:fd:38:69:15:cc:cd:40:61:3c:63:48:95:d2:63: 2e:38:4f:01:e9:94:c4:fc:9d:46:99:ce:53:fa:32:45:01:2d: 32:18:10:0c:0a:32:fa:ec:0d:39:09:c6:4e:dd:09:9b:7c:7c: 48:15:1b:4c:d5:d8:14:92:83:a7:72:d0:7f:53:0f:6e:94:9a: 4d:7d:e9:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg+fR21g39GrU8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NjQ3YjM5ZDgtZjhiZC00MjJmLTljMTUtNjU2NjExYzNiMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlbqMx3Mo4EFcenmxFnCHgeyY6G7/5gJ5i/u yNITnRMbhfxMsE1CbQz5ffz93e6TOqhNe8x3sVGblOIXyVsmFZjxHEOrdL74qGvw BGk45JuNil9EIxKGN13zroIJn6X4/82KbhdriH3zt2BpPBNKgJGQu5kCCs0CGCGw Jc/eiEgfe9ztlb8c9W8CsquPAIvu6A5moenu+zV/PYIyfve45QMaWYiZ3AeKIP45 AJRZMPwdgtOf8lQCeqIW2t1XRaDUC9x+aAJO1Vxawtm9NHW6SEAPvQ2/bwKAJ96U YCGgI+RScJeyVpNSa8d3iUrYfcOkDDejlSTOvc6WuRNEPT+HBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK4kMl8mInyy79ry+n18P8/sLrxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2JjYmZhYzAtNmM4MS0z MzljLWIyMDctYTI3YWU1NGJiYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAK9/hg2BQFrNgEB9XdbW8IqNiosvhdxWePp6Kl cdpJeQ0EO77kUfIVTHuRiRZMRcfxONgIeX+1jP9ol7pUAsws+BWTXyJOKOcuvv31 r5I/kT6fHaqYESij9y0y1wK7vVgEY4aJT80d4fmg3SYXI4zcU++1XUITkKvmZwvF aM+gLhb4MOrNEbu1g/H/0wCRwjRvJBDP9QeQ3zvhFcYHN6TYgQhW3hf2UK/CCfqj 9fOy7CzRk+7vAW6r/ThpFczNQGE8Y0iV0mMuOE8B6ZTE/J1Gmc5T+jJFAS0yGBAM CjL67A05CcZO3QmbfHxIFRtM1dgUkoOnctB/Uw9ulJpNfeks -----END CERTIFICATE-----Generated at Sat Apr 12 00:02:07 2025 by rpki-client