$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/682c070e-13b5-3c61-b011-6a15ef570bab.roa File: 682c070e-13b5-3c61-b011-6a15ef570bab.roa (raw, json) Hash identifier: 92NXobPN2K2SzFeueMRYMwU1YcOX2gfrb+uDq4K/EBA= Subject key identifier: 9A:AF:2E:E2:27:5A:DD:9D:74:9A:58:24:4A:1E:6C:6C:14:78:BC:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848C573333A28EF6123289A9128 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/682c070e-13b5-3c61-b011-6a15ef570bab.roa Signing time: Tue 04 Feb 2025 13:33:15 +0000 ROA not before: Tue 04 Feb 2025 13:33:15 +0000 ROA not after: Mon 05 May 2025 12:33:15 +0000 asID: 32651 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:73:33:3a:28:ef:61:23:28:9a:91:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 4 13:33:15 2025 GMT Not After : May 5 12:33:15 2025 GMT Subject: CN=1e8aca53-b429-44a9-acd6-0ca146c06c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:28:27:9f:1b:55:fd:f9:44:30:1c:e2:3f: 9a:57:94:b3:da:2d:1d:1f:7d:ea:bf:3b:8b:74:2b: dc:1d:92:8d:c0:14:08:a0:d3:c1:9b:bc:38:26:4a: c6:fd:bb:31:83:be:69:3a:0b:f4:4b:66:c0:9d:74: 97:d0:6b:ec:9f:a7:f0:12:ff:71:3a:c1:1f:8a:d1: 33:05:72:1b:a7:e3:fb:39:ac:58:9f:1a:e7:e0:c9: 98:c8:24:ad:2c:a0:e8:79:1e:92:4b:cb:dc:b1:ef: 4b:72:13:bc:c3:5e:72:7e:da:7b:d5:5c:81:b7:85: cf:44:2f:96:1c:a4:d9:ac:2b:9f:df:a6:8a:7d:7b: 10:d2:42:ad:20:ab:45:68:9a:62:15:bb:ed:c5:64: de:fa:4a:de:3c:73:73:03:41:7d:f4:27:75:c2:c0: d9:bb:4a:8b:b7:e4:7a:b5:ec:2d:65:b5:dd:ba:4b: fb:9e:6e:eb:a8:4e:83:58:03:b9:c8:33:a9:76:fa: 1e:d1:eb:67:da:2d:75:88:f8:f1:7c:1c:99:d2:78: 88:31:a4:b6:30:d7:5a:5a:0b:96:9b:4a:f4:ce:95: e3:69:4f:91:a9:58:66:8d:69:df:b5:36:68:ad:bc: 59:88:9d:8b:58:ef:de:7e:84:e4:86:a0:d7:d9:b2: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AF:2E:E2:27:5A:DD:9D:74:9A:58:24:4A:1E:6C:6C:14:78:BC:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/682c070e-13b5-3c61-b011-6a15ef570bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:db:31:b9:8d:b7:a1:a4:65:31:d6:a5:f1:a2:e8:dd:fe:60: fa:19:7b:74:ad:90:ca:60:65:eb:53:13:7b:53:ee:6f:41:a1: a2:18:c0:c7:1f:38:7d:cc:67:e8:da:03:8e:2d:31:b7:f5:67: 67:ac:af:40:36:b0:05:29:6e:d5:6a:5c:61:6e:1d:fe:13:60: 2c:1f:ed:84:a3:5a:fb:bf:85:cb:0f:f1:5c:61:78:74:c5:6f: 69:56:b7:ab:43:cd:29:8c:5a:f8:6f:24:ca:0b:dc:5c:4c:d7: 0b:56:05:be:96:fd:19:93:6b:b6:ec:98:fd:ae:8e:e2:3d:75: 25:d2:27:98:0e:13:12:c2:d7:36:55:18:a7:f3:f1:1b:eb:ea: ea:84:cb:ed:db:88:bc:3b:65:17:2f:e6:96:45:ff:cb:a9:b8: 69:25:94:1e:03:b8:ac:de:4b:89:b9:2e:ab:78:34:bd:9e:93: dc:f4:a8:8d:5f:bb:01:ad:f1:82:25:41:f2:f0:64:95:aa:f8: 69:6d:1e:26:19:c0:03:47:2e:2a:49:c2:4a:ab:50:83:54:39: 22:88:01:20:1d:e0:b5:26:f0:e4:98:8d:0c:81:71:2f:c6:fa: f7:82:54:f7:4f:59:a4:bb:2a:3c:70:36:10:f4:f4:10:73:1b: 8e:1b:7f:b1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjFczM6KO9hIyiakSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIwNDEzMzMxNVoXDTI1MDUwNTEyMzMxNVowLzEtMCsGA1UEAxMk MWU4YWNhNTMtYjQyOS00NGE5LWFjZDYtMGNhMTQ2YzA2Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLcoJ58bVf35RDAc4j+aV5Sz2i0dH33qvzuL dCvcHZKNwBQIoNPBm7w4JkrG/bsxg75pOgv0S2bAnXSX0Gvsn6fwEv9xOsEfitEz BXIbp+P7OaxYnxrn4MmYyCStLKDoeR6SS8vcse9LchO8w15yftp71VyBt4XPRC+W HKTZrCuf36aKfXsQ0kKtIKtFaJpiFbvtxWTe+krePHNzA0F99Cd1wsDZu0qLt+R6 tewtZbXdukv7nm7rqE6DWAO5yDOpdvoe0etn2i11iPjxfByZ0niIMaS2MNdaWguW m0r0zpXjaU+RqVhmjWnftTZorbxZiJ2LWO/efoTkhqDX2bLNkwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJqvLuInWt2ddJpYJEoebGwUeLzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgyYzA3MGUtMTNiNS0z YzYxLWIwMTEtNmExNWVmNTcwYmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCU2zG5jbehpGUx1qXxoujd/mD6GXt0rZDKYGXr UxN7U+5vQaGiGMDHHzh9zGfo2gOOLTG39WdnrK9ANrAFKW7Valxhbh3+E2AsH+2E o1r7v4XLD/FcYXh0xW9pVrerQ80pjFr4byTKC9xcTNcLVgW+lv0Zk2u27Jj9ro7i PXUl0ieYDhMSwtc2VRin8/Eb6+rqhMvt24i8O2UXL+aWRf/LqbhpJZQeA7is3kuJ uS6reDS9npPc9KiNX7sBrfGCJUHy8GSVqvhpbR4mGcADRy4qScJKq1CDVDkiiAEg HeC1JvDkmI0MgXEvxvr3glT3T1mkuyo8cDYQ9PQQcxuOG3+x -----END CERTIFICATE-----Generated at Fri Apr 11 22:46:39 2025 by rpki-client