$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa File: 428457c7-ce61-3c36-8bbe-586d416386c9.roa (raw, json) Hash identifier: tiBZKpLSEQuCJCKwAyiV0SUIib366YnkdhsAfsRMD1A= Subject key identifier: 23:36:8C:CC:64:AA:CC:57:F0:3D:0B:86:5A:28:9F:E4:F0:4F:4A:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D6E1B81B5AD2143D2B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 27544 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d6:e1:b8:1b:5a:d2:14:3d:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=d26044c2-43e8-4e75-b7f9-ab427653252a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:13:5f:18:1c:12:b3:35:32:5c:0c:b3:11:c7: d6:27:bf:cf:cc:a4:ab:11:8a:22:e8:42:b8:e3:c7: d0:19:cf:43:ad:7a:bb:9a:0d:04:dd:d0:13:f4:8e: ea:83:c4:96:f8:a3:5d:6b:be:f3:dd:b6:d9:53:e0: c4:a5:54:82:67:d0:84:a2:29:4a:5a:4a:a0:d3:7a: ce:8f:78:ba:e8:33:77:88:a6:ca:fa:e3:24:49:7c: 96:8f:e0:15:93:b6:36:8d:a9:66:9b:00:45:cc:99: 75:af:a9:ed:62:b8:78:dc:7c:0e:3c:0f:cd:e0:f8: a1:c2:84:57:7b:d2:67:ba:ce:db:4a:63:b0:4e:40: e6:f1:a1:9a:4c:83:94:a2:24:5f:22:5c:01:19:cc: de:0d:b1:43:af:ce:fc:b5:22:54:8f:33:7a:aa:38: aa:20:06:46:43:cd:60:65:f3:c4:09:95:70:61:a8: a9:9c:48:7f:3d:1e:7e:b2:ad:fa:70:fc:50:ff:01: 9c:cc:fb:59:28:c0:49:b1:52:74:4f:d8:8a:ba:8e: 1e:26:ad:91:ee:83:3e:db:f8:b2:f0:44:65:1f:19: b0:a5:de:70:a3:94:c5:7b:c4:07:21:81:e3:bf:4a: 22:69:25:45:95:85:fe:7a:21:5d:66:05:1f:1b:aa: 4d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:36:8C:CC:64:AA:CC:57:F0:3D:0B:86:5A:28:9F:E4:F0:4F:4A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/428457c7-ce61-3c36-8bbe-586d416386c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:81:51:79:a3:ab:16:a0:0f:d1:b4:ee:c7:8a:04:cd:df:35: 5a:90:d8:ac:f2:f5:90:8a:86:10:05:07:4d:97:f6:c2:f2:5a: 59:19:8c:29:bf:47:c0:9a:db:5b:80:1d:04:52:45:42:75:8e: 11:32:c5:37:7c:c9:de:4b:11:04:ce:e9:fc:e9:d1:39:4b:df: b6:da:b4:e4:9b:4c:0d:86:3b:a1:8a:38:26:6c:50:0d:68:1e: 30:03:54:8d:6a:28:f1:10:0c:ee:c8:dd:b4:21:5c:22:cb:53: 01:bc:a6:78:c3:69:96:4d:fb:30:68:da:28:e2:b8:ed:10:37: 26:62:63:54:d3:3b:bf:14:37:05:26:07:cc:50:1e:ad:79:57: 96:69:39:54:b5:0d:65:73:15:1d:05:f8:87:1f:08:15:8f:dd: 9b:78:20:a2:d9:ed:ec:e4:43:69:f5:6b:8c:ff:1c:89:0d:88: d6:2c:fb:66:4c:b7:24:cb:71:1a:33:50:1f:fe:e3:e0:5c:e5: 42:cf:15:fb:26:04:e8:e0:92:b1:c3:9b:69:0a:9c:7c:48:42: de:54:7e:56:51:a9:37:c7:39:6c:a9:44:7d:bc:ae:e7:f7:22: e6:94:f9:3f:ee:b8:79:bc:10:d0:10:1a:8d:42:3b:89:02:ef: f7:0e:03:3d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49bhuBta0hQ9K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk ZDI2MDQ0YzItNDNlOC00ZTc1LWI3ZjktYWI0Mjc2NTMyNTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBNfGBwSszUyXAyzEcfWJ7/PzKSrEYoi6EK4 48fQGc9DrXq7mg0E3dAT9I7qg8SW+KNda77z3bbZU+DEpVSCZ9CEoilKWkqg03rO j3i66DN3iKbK+uMkSXyWj+AVk7Y2jalmmwBFzJl1r6ntYrh43HwOPA/N4PihwoRX e9Jnus7bSmOwTkDm8aGaTIOUoiRfIlwBGczeDbFDr878tSJUjzN6qjiqIAZGQ81g ZfPECZVwYaipnEh/PR5+sq36cPxQ/wGczPtZKMBJsVJ0T9iKuo4eJq2R7oM+2/iy 8ERlHxmwpd5wo5TFe8QHIYHjv0oiaSVFlYX+eiFdZgUfG6pNtwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCM2jMxkqsxX8D0Lhloon+TwT0qgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDI4NDU3YzctY2U2MS0z YzM2LThiYmUtNTg2ZDQxNjM4NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLgVF5o6sWoA/RtO7HigTN3zVakNis8vWQioYQ BQdNl/bC8lpZGYwpv0fAmttbgB0EUkVCdY4RMsU3fMneSxEEzun86dE5S9+22rTk m0wNhjuhijgmbFANaB4wA1SNaijxEAzuyN20IVwiy1MBvKZ4w2mWTfswaNoo4rjt EDcmYmNU0zu/FDcFJgfMUB6teVeWaTlUtQ1lcxUdBfiHHwgVj92beCCi2e3s5ENp 9WuM/xyJDYjWLPtmTLcky3EaM1Af/uPgXOVCzxX7JgTo4JKxw5tpCpx8SELeVH5W Uak3xzlsqUR9vK7n9yLmlPk/7rh5vBDQEBqNQjuJAu/3DgM9 -----END CERTIFICATE-----Generated at Fri Apr 11 23:33:19 2025 by rpki-client