$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a43cb50-d95f-34a6-833c-6baaf83b5f47.roa File: 4a43cb50-d95f-34a6-833c-6baaf83b5f47.roa (raw, json) Hash identifier: 28ipwNRgwuDyGBsnv0r0l4C6szTRKvIZnWFHD5EsHM8= Subject key identifier: C1:F1:E6:CD:1C:16:46:40:5D:5B:9B:1D:24:04:79:0D:45:4D:3C:C1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183CD75C154B41DE9AF7EC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a43cb50-d95f-34a6-833c-6baaf83b5f47.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396611 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:cd:75:c1:54:b4:1d:e9:af:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=6fe23269-d4bc-40e0-86fa-b2951cc84a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:ec:07:81:cd:76:75:62:d2:62:7d:4a:ae: 3e:9c:d0:60:64:53:d5:03:44:db:04:4d:ba:85:93: a0:f3:a6:24:14:43:10:79:77:b2:e5:9e:36:51:17: 1d:35:32:71:f1:2c:4d:e0:47:45:cc:7a:bf:cf:44: af:f4:bc:48:bd:6e:fe:9c:83:ad:9a:41:61:1f:ae: 56:36:e6:4a:01:47:4f:2d:de:8e:59:90:73:a9:90: 11:c3:e6:2d:be:df:9e:00:1a:00:e7:bc:83:a9:44: 32:23:f7:c2:1e:33:bd:3c:12:ae:fd:20:0e:ac:24: a4:f0:b5:55:44:19:11:a9:75:47:2c:a4:4a:13:84: 12:cc:e5:0e:c9:04:85:94:5b:b2:4a:50:0a:5c:8a: 4e:4d:78:ca:61:c0:66:89:9f:d4:78:2d:27:5d:21: 31:d2:f9:3c:e6:17:45:4d:34:23:cd:ac:20:7f:30: c9:17:36:74:16:bd:39:5b:5a:91:7a:57:a1:8f:90: 8d:12:ad:57:73:6f:8f:bf:3c:5b:e2:e0:cb:3a:a7: a8:98:50:55:83:b4:4d:e6:11:da:92:9d:d3:74:7d: c1:9d:52:9f:df:26:6b:bf:79:36:54:6f:78:51:fb: 7c:f4:b9:bb:1b:26:4d:24:6a:82:a0:02:4d:fc:6d: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F1:E6:CD:1C:16:46:40:5D:5B:9B:1D:24:04:79:0D:45:4D:3C:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a43cb50-d95f-34a6-833c-6baaf83b5f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:3d:e9:f4:96:81:3c:33:7b:2c:c5:d5:05:f4:24:05:24:88: 4e:2d:d2:9d:dc:9f:6d:05:10:c4:d2:f9:8e:fb:c6:fc:29:73: e1:2c:87:b5:2d:96:a9:48:69:9a:43:38:b2:de:df:3e:69:de: 8d:5c:71:0c:93:5c:e8:3c:2e:6f:cb:1e:1f:fb:56:91:76:9d: 3a:2e:27:24:71:a5:02:9b:20:d4:cf:9f:8e:04:34:80:16:51: 8b:ab:a1:a6:1b:1a:76:bb:cd:59:bb:76:39:ee:d3:57:b5:80: 9f:9b:a1:4e:d3:a5:86:31:63:88:1d:9f:4d:66:5c:20:59:b9: bb:65:06:de:3d:f2:62:6e:99:c6:8a:70:4c:ad:8f:98:33:66: 54:42:38:f4:49:9b:11:71:eb:af:ab:a4:00:c4:04:09:7e:c0: b1:39:5d:9f:90:89:e5:94:5a:29:55:f4:6b:ca:6f:ee:dd:48: 45:18:e4:0a:7c:2c:ae:ef:59:1c:dc:90:6e:cf:62:d2:09:45: 23:ea:db:8c:0e:ff:8e:53:8f:83:17:b2:8e:5c:56:cd:3d:80: 24:1c:40:d4:e4:33:b7:39:0d:53:8f:6e:58:16:04:20:08:28: 4c:75:df:82:8e:ad:21:9d:cf:ec:53:ab:46:be:a1:a8:85:4c: f2:44:4d:da -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg811wVS0HemvfsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NmZlMjMyNjktZDRiYy00MGUwLTg2ZmEtYjI5NTFjYzg0YTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg77sB4HNdnVi0mJ9Sq4+nNBgZFPVA0TbBE26 hZOg86YkFEMQeXey5Z42URcdNTJx8SxN4EdFzHq/z0Sv9LxIvW7+nIOtmkFhH65W NuZKAUdPLd6OWZBzqZARw+Ytvt+eABoA57yDqUQyI/fCHjO9PBKu/SAOrCSk8LVV RBkRqXVHLKRKE4QSzOUOyQSFlFuySlAKXIpOTXjKYcBmiZ/UeC0nXSEx0vk85hdF TTQjzawgfzDJFzZ0Fr05W1qRelehj5CNEq1Xc2+Pvzxb4uDLOqeomFBVg7RN5hHa kp3TdH3BnVKf3yZrv3k2VG94Uft89Lm7GyZNJGqCoAJN/G3X3QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMHx5s0cFkZAXVubHSQEeQ1FTTzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGE0M2NiNTAtZDk1Zi0z NGE2LTgzM2MtNmJhYWY4M2I1ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAfPen0loE8M3ssxdUF9CQFJIhOLdKd3J9tBRDE 0vmO+8b8KXPhLIe1LZapSGmaQziy3t8+ad6NXHEMk1zoPC5vyx4f+1aRdp06Lick caUCmyDUz5+OBDSAFlGLq6GmGxp2u81Zu3Y57tNXtYCfm6FO06WGMWOIHZ9NZlwg Wbm7ZQbePfJibpnGinBMrY+YM2ZUQjj0SZsRceuvq6QAxAQJfsCxOV2fkInllFop VfRrym/u3UhFGOQKfCyu71kc3JBuz2LSCUUj6tuMDv+OU4+DF7KOXFbNPYAkHEDU 5DO3OQ1Tj25YFgQgCChMdd+Cjq0hnc/sU6tGvqGohUzyRE3a -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:49 2025 by rpki-client