$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d913b83-0485-3023-9cfe-938790194e5a.roa File: 3d913b83-0485-3023-9cfe-938790194e5a.roa (raw, json) Hash identifier: bifUfvKpMQv06uI+lRBD6VTgLXZ4x5izaxNbb4SMaWU= Subject key identifier: D3:98:D6:F0:27:42:74:BD:3B:11:16:3B:F4:C9:CA:E1:BA:66:72:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183C6D0A91BB25BCC541800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d913b83-0485-3023-9cfe-938790194e5a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397209 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:c6:d0:a9:1b:b2:5b:cc:54:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=5c8d1270-f6e9-4ecb-a5b2-9f92722b9fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:01:1e:53:b2:18:80:f7:2a:ec:78:f7:90:31: b9:0c:b0:8c:22:af:7b:59:9d:86:86:1b:ab:7d:89: 44:56:d8:95:e5:7c:55:9f:6e:5c:c3:e1:64:e9:00: a7:64:6f:74:9e:cc:aa:9b:30:b8:21:6a:db:11:ab: c6:bd:34:d2:2e:22:f9:87:d9:da:eb:bf:77:07:27: ef:e0:96:73:2e:24:8b:e1:69:86:fd:16:bc:70:e6: 3d:31:66:8e:5a:80:b7:fc:fc:a6:6a:b8:a0:a5:bd: 40:ea:34:04:d5:9d:68:b4:87:c0:12:50:d5:7e:20: cb:26:46:2d:70:8d:4d:db:c1:c5:5b:c9:f0:a7:ce: 71:b9:0e:98:e5:5c:c1:8b:4b:ba:46:b1:ac:12:f9: 02:24:4c:a9:a0:87:c3:cf:b7:b8:33:8d:87:8f:95: df:11:63:1d:ef:00:e0:27:dd:b1:3a:e0:79:24:de: aa:dd:ac:ef:44:aa:a2:fc:9f:a0:8b:7a:c9:ba:b0: 10:78:2d:33:2f:bb:06:9c:33:69:18:9f:3a:5d:7c: 8f:aa:9e:25:89:ef:5b:3a:75:08:34:f5:a7:d5:ad: 9b:d9:ff:b4:75:5f:a8:c3:fe:06:63:fc:90:4d:1f: 95:20:76:13:d7:72:e9:1e:df:23:75:4d:e5:ae:dd: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:98:D6:F0:27:42:74:BD:3B:11:16:3B:F4:C9:CA:E1:BA:66:72:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d913b83-0485-3023-9cfe-938790194e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:bd:86:44:7f:c1:23:0c:9c:24:40:3c:86:98:29:4a:38:4a: 7a:04:7d:b2:b3:32:28:df:22:72:c3:71:be:2b:5e:14:71:4b: 53:d0:58:f6:66:9a:29:72:61:ee:0f:23:64:ab:bd:fe:93:c7: a8:aa:52:a6:69:fa:f7:dc:7a:6a:d1:86:d5:6f:c0:38:0c:a6: 4f:ae:2e:18:d6:bf:ba:9c:33:e0:42:c8:0c:37:33:f8:5b:a2: be:f7:10:41:27:86:c9:53:2f:39:68:61:48:e2:5e:9a:33:4a: 6c:e2:bb:eb:cd:3a:91:c3:7c:a1:c2:32:dd:b7:90:9f:13:da: ec:23:d4:c8:f9:eb:f2:d0:7b:42:9b:35:d2:cd:e7:70:0e:35: 78:7f:35:0e:e7:cf:7e:a9:44:a5:12:77:c1:45:e7:22:35:fb: 9f:48:a9:1b:0b:f9:4e:cd:27:75:9c:7e:5e:8c:71:7c:0a:2e: 12:25:cd:e4:a3:c8:80:62:ee:70:50:57:cd:1b:45:91:45:4f: 4f:81:ac:a4:43:75:61:09:cb:e5:e6:db:f9:e4:63:ee:ad:2d: 6c:08:ff:ce:e6:ec:a7:b9:cd:30:32:fa:b7:fd:73:f1:6e:06: da:3c:01:44:1c:b3:90:d2:9f:c9:6e:17:22:56:98:56:f8:d2: 03:a8:e3:bf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg8bQqRuyW8xUGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NWM4ZDEyNzAtZjZlOS00ZWNiLWE1YjItOWY5MjcyMmI5ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgEeU7IYgPcq7Hj3kDG5DLCMIq97WZ2Ghhur fYlEVtiV5XxVn25cw+Fk6QCnZG90nsyqmzC4IWrbEavGvTTSLiL5h9na6793Byfv 4JZzLiSL4WmG/Ra8cOY9MWaOWoC3/Pymarigpb1A6jQE1Z1otIfAElDVfiDLJkYt cI1N28HFW8nwp85xuQ6Y5VzBi0u6RrGsEvkCJEypoIfDz7e4M42Hj5XfEWMd7wDg J92xOuB5JN6q3azvRKqi/J+gi3rJurAQeC0zL7sGnDNpGJ86XXyPqp4lie9bOnUI NPWn1a2b2f+0dV+ow/4GY/yQTR+VIHYT13LpHt8jdU3lrt0mjQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNOY1vAnQnS9OxEWO/TJyuG6ZnIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Q5MTNiODMtMDQ4NS0z MDIzLTljZmUtOTM4NzkwMTk0ZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlvYZEf8EjDJwkQDyGmClKOEp6BH2yszIo3yJy w3G+K14UcUtT0Fj2ZpopcmHuDyNkq73+k8eoqlKmafr33Hpq0YbVb8A4DKZPri4Y 1r+6nDPgQsgMNzP4W6K+9xBBJ4bJUy85aGFI4l6aM0ps4rvrzTqRw3yhwjLdt5Cf E9rsI9TI+evy0HtCmzXSzedwDjV4fzUO589+qUSlEnfBReciNfufSKkbC/lOzSd1 nH5ejHF8Ci4SJc3ko8iAYu5wUFfNG0WRRU9PgaykQ3VhCcvl5tv55GPurS1sCP/O 5uynuc0wMvq3/XPxbgbaPAFEHLOQ0p/JbhciVphW+NIDqOO/ -----END CERTIFICATE-----Generated at Sat Apr 12 00:05:27 2025 by rpki-client