$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6570c7c8-fd31-36d9-899b-e54974b73a42.roa File: 6570c7c8-fd31-36d9-899b-e54974b73a42.roa (raw, json) Hash identifier: pKxQLpEF0oGfIiC54f5hj6lDaHxfA2eLht/8HKQCx58= Subject key identifier: E1:8C:6D:30:BE:8F:4C:45:B0:7D:D2:68:D8:CC:7B:D2:C3:BB:E3:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D48C4D6D6AE65DC722C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6570c7c8-fd31-36d9-899b-e54974b73a42.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 396544 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d4:8c:4d:6d:6a:e6:5d:c7:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=a77036d4-6bcb-4779-85ec-36199f1a651d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5b:2d:9d:dd:60:a3:05:d3:33:67:3a:08:2f: c3:8e:1e:d9:74:04:3a:b0:6b:9a:39:7a:11:04:6a: fc:65:b4:13:28:0e:34:41:39:95:af:03:27:89:07: 30:5e:5f:86:60:b5:6a:2e:7e:3d:bd:16:69:5d:25: 1e:a5:a4:44:9d:8b:8a:17:fa:96:01:d3:76:7c:52: 33:3a:ab:fd:17:05:7a:92:4b:97:bb:1a:d7:8a:d9: b4:c0:59:a9:38:ec:a5:9e:2b:19:01:58:76:9d:5d: 18:9f:74:9c:98:49:d5:9c:48:3f:c8:a2:f6:83:86: 15:a0:8b:f1:5a:66:9e:b2:be:05:ff:6a:d9:bb:5a: 9f:f0:88:32:7c:dc:5e:88:f6:1e:f4:5e:18:54:61: d7:ce:43:c7:6a:4f:ca:7f:b9:fa:b0:f0:fe:4a:ac: 57:8e:5f:80:ef:f4:55:b5:50:93:93:7f:ee:cd:20: 8f:6a:2d:51:21:50:a5:b3:40:ec:d5:74:0b:8f:49: 2c:da:31:80:49:99:e5:22:36:2a:2d:67:6d:44:c0: cd:b6:25:89:40:4b:22:15:f9:8a:83:40:8e:00:94: c2:ec:be:75:a4:53:65:7f:3d:ab:d3:06:81:9c:41: 23:ac:94:1f:66:e1:83:93:63:b8:ff:43:90:aa:28: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:6D:30:BE:8F:4C:45:B0:7D:D2:68:D8:CC:7B:D2:C3:BB:E3:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6570c7c8-fd31-36d9-899b-e54974b73a42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:4f:cb:11:3b:fc:6a:c0:db:a1:e3:11:8f:f3:82:53:7c:88: 34:0d:1f:88:12:02:65:07:16:0b:c1:d5:dd:ba:31:9a:44:66: da:c4:08:f8:37:40:dc:65:d5:b2:1c:46:85:af:47:af:d1:6b: 77:b1:64:af:c9:f5:d3:8d:56:a4:47:f8:b1:0f:7f:44:d8:c6: 3f:52:f3:8a:13:6b:8d:5e:5a:79:e2:ee:a2:34:8c:3c:17:22: e3:55:31:7c:da:61:e5:bc:cd:ed:26:29:46:19:1e:4e:f6:2b: c7:f2:48:b4:33:0d:d5:71:9f:72:e5:87:fd:13:08:c9:9c:38: af:35:54:c7:ec:fb:50:9d:5d:27:39:3b:96:fe:83:6c:43:d1: 94:5e:bf:70:db:48:63:9c:3b:cc:04:6e:d7:a5:44:b2:10:7f: 48:c1:05:f0:6d:f5:df:f4:f9:9d:48:71:ea:d2:ce:78:5c:e8: 71:6e:f2:7f:1d:b7:dc:24:8f:c3:04:66:7c:6b:23:5d:d7:bd: ee:f9:0c:5c:b4:a7:76:7b:c2:f1:48:61:c6:c8:41:34:73:a6: 90:70:2e:5a:26:44:e1:b9:0d:a8:70:80:2c:de:3a:d1:97:c9: d2:38:ae:63:b9:87:07:7a:19:82:99:b5:f9:ca:93:55:e4:15: db:a8:6d:ec -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49SMTW1q5l3HIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk YTc3MDM2ZDQtNmJjYi00Nzc5LTg1ZWMtMzYxOTlmMWE2NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlstnd1gowXTM2c6CC/Djh7ZdAQ6sGuaOXoR BGr8ZbQTKA40QTmVrwMniQcwXl+GYLVqLn49vRZpXSUepaREnYuKF/qWAdN2fFIz Oqv9FwV6kkuXuxrXitm0wFmpOOylnisZAVh2nV0Yn3ScmEnVnEg/yKL2g4YVoIvx Wmaesr4F/2rZu1qf8IgyfNxeiPYe9F4YVGHXzkPHak/Kf7n6sPD+SqxXjl+A7/RV tVCTk3/uzSCPai1RIVCls0Ds1XQLj0ks2jGASZnlIjYqLWdtRMDNtiWJQEsiFfmK g0COAJTC7L51pFNlfz2r0waBnEEjrJQfZuGDk2O4/0OQqihcXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOGMbTC+j0xFsH3SaNjMe9LDu+PsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjU3MGM3YzgtZmQzMS0z NmQ5LTg5OWItZTU0OTc0YjczYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC4T8sRO/xqwNuh4xGP84JTfIg0DR+IEgJlBxYL wdXdujGaRGbaxAj4N0DcZdWyHEaFr0ev0Wt3sWSvyfXTjVakR/ixD39E2MY/UvOK E2uNXlp54u6iNIw8FyLjVTF82mHlvM3tJilGGR5O9ivH8ki0Mw3VcZ9y5Yf9EwjJ nDivNVTH7PtQnV0nOTuW/oNsQ9GUXr9w20hjnDvMBG7XpUSyEH9IwQXwbfXf9Pmd SHHq0s54XOhxbvJ/HbfcJI/DBGZ8ayNd173u+QxctKd2e8LxSGHGyEE0c6aQcC5a JkThuQ2ocIAs3jrRl8nSOK5juYcHehmCmbX5ypNV5BXbqG3s -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:04 2025 by rpki-client