$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa File: 48124153-c8f1-322d-b6d8-f2f4a132d540.roa (raw, json) Hash identifier: QaP0kr3zGN3hEnTG0/MdfT+irti7kWWEWw08EXf3qg8= Subject key identifier: 01:8D:2E:1E:DC:FE:60:45:64:E9:2F:8A:1E:9B:C7:32:7C:F3:B8:5E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D5803E1EA892B6BA7000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 36623 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d5:80:3e:1e:a8:92:b6:ba:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=37b5d4ed-ef4d-4139-9567-5cf724ea5cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:ca:05:19:38:0d:86:8f:a9:a5:c7:7f:37: bc:73:00:e8:45:b5:fb:cd:0f:92:62:11:e2:bd:36: b5:20:d9:48:42:de:3f:2f:8a:1e:ae:a5:9d:aa:8e: b9:2a:12:b4:43:b7:28:f7:e8:6f:e6:2d:4f:76:e3: 94:fe:95:74:b1:a8:d8:73:c3:71:3c:48:5f:07:22: b0:99:65:cc:7f:ab:08:47:37:0b:58:53:49:17:64: 34:ee:ad:ba:8b:e3:f7:ab:42:08:56:d2:84:0d:1a: cd:1f:8b:eb:d1:36:25:e4:7b:49:3e:38:e9:96:d6: 70:3f:b3:68:69:96:36:dd:37:6a:a6:b4:e1:82:c7: 8b:fb:be:a0:19:c1:71:af:cd:c8:54:40:5d:33:c9: 34:7a:25:87:43:36:f6:ab:7c:91:7f:33:42:f8:f3: 02:77:d8:52:5f:46:e9:56:e2:5d:97:73:40:9e:23: 23:32:fc:80:5b:b7:dc:90:32:4c:05:8e:80:39:98: 97:8e:72:e7:4e:3e:41:e3:d9:e3:fb:9c:e3:11:b0: 4b:2d:e2:1c:a7:8b:49:34:a8:e8:06:fa:3f:90:98: 3a:f8:84:53:bb:f1:86:77:b0:66:51:a2:7f:bc:63: 8f:25:9c:43:15:a7:af:43:9f:d4:67:02:e0:f2:a0: 26:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8D:2E:1E:DC:FE:60:45:64:E9:2F:8A:1E:9B:C7:32:7C:F3:B8:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48124153-c8f1-322d-b6d8-f2f4a132d540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:da:bc:7a:2c:0d:2f:b5:fc:3c:a9:1e:20:1b:05:ed:eb:ef: 75:95:b2:21:87:81:f8:4c:58:95:80:a6:3a:f2:d4:18:6d:d3: 87:84:53:c1:ba:64:2c:5d:c8:a5:d0:4a:ae:13:00:93:52:af: b2:be:8e:36:15:ab:44:23:72:84:86:93:87:b4:01:de:0d:f5: 39:83:c8:63:38:d1:f9:97:ff:47:ab:66:8b:40:ac:9c:b2:17: 9a:7c:4b:52:9f:aa:50:e3:8a:16:0a:5f:34:b6:93:7a:a2:0e: e2:9f:1d:ae:c0:13:31:7d:ad:6a:f8:41:67:08:03:f3:73:f1: db:57:13:82:d2:bb:3c:4d:fa:13:79:30:6d:08:f1:54:3e:6a: 20:28:fe:db:1b:72:e2:8e:eb:18:1c:50:c1:63:4a:09:f1:8b: 19:07:ba:c2:3c:00:51:4e:39:88:48:eb:c0:6c:6b:44:2a:35: 96:24:74:ff:58:05:de:b8:8c:0e:46:82:b9:9b:09:1c:d6:71: fc:15:17:0f:97:44:13:b7:5e:d1:7a:bc:55:64:14:15:78:8a: 8e:5a:b7:fe:3f:3e:38:76:9a:c0:52:48:16:f9:ab:e0:0e:6a: ec:6d:2e:f7:48:93:3c:4c:c3:13:b6:51:b1:8c:ea:ae:2c:e4: 42:fa:f5:cb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49WAPh6okra6cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk MzdiNWQ0ZWQtZWY0ZC00MTM5LTk1NjctNWNmNzI0ZWE1Y2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0F3KBRk4DYaPqaXHfze8cwDoRbX7zQ+SYhHi vTa1INlIQt4/L4oerqWdqo65KhK0Q7co9+hv5i1PduOU/pV0sajYc8NxPEhfByKw mWXMf6sIRzcLWFNJF2Q07q26i+P3q0IIVtKEDRrNH4vr0TYl5HtJPjjpltZwP7No aZY23TdqprThgseL+76gGcFxr83IVEBdM8k0eiWHQzb2q3yRfzNC+PMCd9hSX0bp VuJdl3NAniMjMvyAW7fckDJMBY6AOZiXjnLnTj5B49nj+5zjEbBLLeIcp4tJNKjo Bvo/kJg6+IRTu/GGd7BmUaJ/vGOPJZxDFaevQ5/UZwLg8qAmVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAGNLh7c/mBFZOkvih6bxzJ887heMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDgxMjQxNTMtYzhmMS0z MjJkLWI2ZDgtZjJmNGExMzJkNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAy2rx6LA0vtfw8qR4gGwXt6+91lbIhh4H4TFiV gKY68tQYbdOHhFPBumQsXcil0EquEwCTUq+yvo42FatEI3KEhpOHtAHeDfU5g8hj ONH5l/9Hq2aLQKycsheafEtSn6pQ44oWCl80tpN6og7inx2uwBMxfa1q+EFnCAPz c/HbVxOC0rs8TfoTeTBtCPFUPmogKP7bG3LijusYHFDBY0oJ8YsZB7rCPABRTjmI SOvAbGtEKjWWJHT/WAXeuIwORoK5mwkc1nH8FRcPl0QTt17RerxVZBQVeIqOWrf+ Pz44dprAUkgW+avgDmrsbS73SJM8TMMTtlGxjOquLORC+vXL -----END CERTIFICATE-----Generated at Wed Apr 16 23:22:20 2025 by rpki-client