$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e32b43b-8ec9-3882-a05d-26e4899d5f55.roa File: 6e32b43b-8ec9-3882-a05d-26e4899d5f55.roa (raw, json) Hash identifier: CG6NHi/gQa7+Kkfk50W4sefmvg0O+RA6L/9/t9Tk8yE= Subject key identifier: 08:F3:D9:48:0E:B7:E2:80:05:39:B5:78:F2:CC:B3:2B:61:95:28:E6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497AD9C3FCAE915983671CE700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e32b43b-8ec9-3882-a05d-26e4899d5f55.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 396587 IP address blocks: 2001:500:30ff::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:c3:fc:ae:91:59:83:67:1c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=0cc8cda1-13c8-443a-9bd5-69ab746f7b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:c0:40:1c:40:12:5d:9f:78:39:f6:d9:a9: dd:37:9d:60:f5:91:0f:7c:bd:e6:ea:2b:6a:59:8b: 92:29:80:76:56:36:61:6c:e3:61:e6:69:74:b2:f6: 67:db:f4:81:7c:0f:00:2a:79:37:95:47:cf:62:04: c9:6c:01:69:6c:73:a6:bf:2c:80:1f:da:79:db:88: e3:87:fe:a7:09:2e:d8:ec:91:10:97:1a:8c:b8:00: 89:96:ea:6f:1c:26:e2:42:41:c8:29:13:c4:12:c3: 65:3e:a9:5d:00:77:00:e6:c3:e6:0a:42:79:47:4b: 8e:f8:57:5f:c6:f9:02:b4:f1:0c:1e:f4:e8:46:f6: fa:b7:b2:ee:6e:52:bf:d6:9f:5f:49:ce:73:96:e5: 24:cb:3d:64:40:14:5f:5d:b3:90:eb:90:75:9f:05: 2a:c6:28:70:1b:40:03:85:1f:8f:01:a8:33:3a:5e: 6c:d9:12:92:32:0d:4c:54:23:b9:2f:00:07:0f:ce: 5f:70:4b:73:cb:e3:67:0e:47:89:3c:9a:9f:39:2c: 1b:4b:28:aa:b9:c2:8b:da:58:65:cc:ad:42:ee:97: cf:37:e0:c2:c7:4c:e3:42:ed:6b:06:13:13:1d:66: 88:1d:41:8d:7a:a3:94:fb:45:1e:ac:f0:57:f7:e7: 14:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F3:D9:48:0E:B7:E2:80:05:39:B5:78:F2:CC:B3:2B:61:95:28:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e32b43b-8ec9-3882-a05d-26e4899d5f55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ac:d0:ca:53:a9:47:0b:1c:63:da:ae:bc:d3:ff:2b:88:45: 49:14:b7:c9:87:96:dd:f5:03:83:01:07:78:7a:cf:5c:83:02: 38:35:b6:4f:2d:aa:b2:6f:5c:67:1c:5e:a9:d3:5a:0e:f8:f5: 5f:4a:b5:0a:da:b3:cb:67:50:3d:c4:18:fb:be:ed:6c:c2:34: 0c:03:43:d6:f7:86:d1:e5:53:c3:f7:60:e0:35:dc:3a:9b:bb: 20:f3:b2:f5:de:2c:07:e6:2e:a4:1a:e8:58:60:1d:38:4c:db: 35:42:51:2f:44:0f:0f:71:bd:05:40:5c:19:8b:c2:b4:85:0c: 74:7c:f5:95:d7:99:25:18:e2:36:41:c7:1e:c3:e6:f1:37:12: b5:34:b7:f4:be:09:24:e4:d0:e2:82:a6:4e:eb:f8:84:7d:98: 5d:a0:9f:5c:41:17:ba:90:46:04:a9:fa:01:85:aa:8a:73:a0: dc:46:09:ea:0c:67:58:ae:46:00:0a:39:92:4d:83:4c:e0:17: 72:a6:4f:5d:03:b6:af:26:d2:1a:ff:50:a0:eb:0f:b5:5c:97: 2c:20:68:f0:7f:ef:97:d1:31:b5:03:e1:71:41:cc:bb:96:a6: a1:f6:69:e2:4d:ba:ff:1c:13:35:0a:b1:ad:b1:7e:08:9f:20: eb:1e:8d:a0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl62cP8rpFZg2cc5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk MGNjOGNkYTEtMTNjOC00NDNhLTliZDUtNjlhYjc0NmY3YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FPAQBxAEl2feDn22andN51g9ZEPfL3m6itq WYuSKYB2VjZhbONh5ml0svZn2/SBfA8AKnk3lUfPYgTJbAFpbHOmvyyAH9p524jj h/6nCS7Y7JEQlxqMuACJlupvHCbiQkHIKRPEEsNlPqldAHcA5sPmCkJ5R0uO+Fdf xvkCtPEMHvToRvb6t7LublK/1p9fSc5zluUkyz1kQBRfXbOQ65B1nwUqxihwG0AD hR+PAagzOl5s2RKSMg1MVCO5LwAHD85fcEtzy+NnDkeJPJqfOSwbSyiqucKL2lhl zK1C7pfPN+DCx0zjQu1rBhMTHWaIHUGNeqOU+0UerPBX9+cUAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAjz2UgOt+KABTm1ePLMsythlSjmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmUzMmI0M2ItOGVjOS0z ODgyLWEwNWQtMjZlNDg5OWQ1ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAfrNDKU6lHCxxj2q680/8riEVJFLfJh5bd9QOD AQd4es9cgwI4NbZPLaqyb1xnHF6p01oO+PVfSrUK2rPLZ1A9xBj7vu1swjQMA0PW 94bR5VPD92DgNdw6m7sg87L13iwH5i6kGuhYYB04TNs1QlEvRA8Pcb0FQFwZi8K0 hQx0fPWV15klGOI2Qccew+bxNxK1NLf0vgkk5NDigqZO6/iEfZhdoJ9cQRe6kEYE qfoBhaqKc6DcRgnqDGdYrkYACjmSTYNM4Bdypk9dA7avJtIa/1Cg6w+1XJcsIGjw f++X0TG1A+FxQcy7lqah9mniTbr/HBM1CrGtsX4InyDrHo2g -----END CERTIFICATE-----Generated at Fri Apr 11 23:57:06 2025 by rpki-client