$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99dcbb30-f819-332a-9a23-66b88a3f91e4.roa File: 99dcbb30-f819-332a-9a23-66b88a3f91e4.roa (raw, json) Hash identifier: 0uwcPC0vCLbxbD774U9sIKDW3ip4D3rUP8hFqPkDwF0= Subject key identifier: A0:F6:59:5D:95:E9:87:8A:42:DA:D8:13:8E:53:81:FE:30:D8:9C:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E98C492D2F045B7BEF7D0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99dcbb30-f819-332a-9a23-66b88a3f91e4.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396540 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:98:c4:92:d2:f0:45:b7:be:f7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=992d5974-d553-405c-aee3-1c6bf107d27b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:12:69:5c:db:30:f8:83:9c:30:33:f3:91: e7:da:26:d4:a2:01:70:00:11:89:e5:a6:27:cc:3e: 5a:06:3e:d4:54:3e:00:21:61:74:99:b7:63:d7:de: 77:7e:ba:f8:e4:5f:48:b9:9d:d4:f6:15:be:57:e1: ba:c3:ec:0f:16:48:82:9f:14:74:8a:f7:5d:a3:75: f2:0d:c1:28:0d:ee:a5:36:be:46:e9:d9:e0:1e:cb: db:7d:0c:e2:49:9a:38:55:33:28:d0:c0:d8:d1:d0: 04:76:3d:91:b0:ae:90:cf:ef:90:b2:5b:9e:77:f6: 77:6c:ad:31:79:c1:94:5b:97:9b:29:a1:ac:d4:26: fb:32:08:85:fa:ee:b2:e5:05:34:28:22:98:da:4f: 03:7b:15:d2:01:e4:94:9a:1f:91:8b:4b:0a:f9:b7: 48:b9:13:e5:c3:b1:e8:96:94:f8:35:04:1e:b8:c7: 80:7b:e1:ff:d7:a5:ae:fa:e0:13:f8:d4:75:d3:66: 4c:a6:20:d0:d6:f6:55:21:97:69:7f:57:9c:93:81: 3f:f8:da:af:39:15:a8:1c:00:64:82:59:8a:15:53: 44:8e:7e:02:c2:42:63:7a:fe:a0:ce:f1:c0:99:3f: 83:85:95:dd:1c:bd:b1:1d:ad:d6:fd:d2:b0:d5:a1: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F6:59:5D:95:E9:87:8A:42:DA:D8:13:8E:53:81:FE:30:D8:9C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99dcbb30-f819-332a-9a23-66b88a3f91e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:92:b0:44:2d:09:3d:2d:0c:a1:0a:2e:c7:1d:87:f8:e7:0d: ed:2e:f7:16:c6:e4:da:a1:1c:48:6b:3c:7d:0b:de:11:7c:6e: 57:49:c6:dc:52:39:e1:4a:86:98:e7:05:ce:bf:c9:05:2e:df: 95:d9:37:92:b1:b9:a9:27:b8:2d:5d:b6:eb:7a:4c:7a:c1:08: 82:e7:33:86:27:a3:57:a5:ad:d8:dd:7f:6d:9c:2e:f4:bc:72: 36:3b:9e:41:d4:87:e3:e6:35:90:75:5d:bb:e5:b9:77:16:0d: 3a:6a:e5:f6:58:4b:2f:cb:0a:23:26:39:a7:f1:dd:5d:2e:f7: 29:ee:b1:9a:be:dc:f8:61:e5:41:4a:27:9b:02:0b:c9:d4:a2: e3:71:82:2b:bc:8a:0c:fe:d3:2e:07:eb:27:0d:2a:cb:89:e1: b3:12:42:33:d4:08:39:7b:d9:a6:01:28:1c:96:c5:a5:36:2e: a1:81:be:8f:4c:10:5e:90:f5:1f:08:b5:0f:c8:f6:33:e3:cc: ef:7d:ae:d6:f9:3f:16:c1:0b:53:e9:e7:f5:2b:88:d1:b2:31: b4:cb:9a:f3:77:70:7c:92:d9:74:72:7c:83:75:79:89:9e:00: 99:d7:21:1d:13:5c:29:ed:3d:3e:18:9a:86:fb:75:dd:36:46: fd:d3:38:2b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpjEktLwRbe+99AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk OTkyZDU5NzQtZDU1My00MDVjLWFlZTMtMWM2YmYxMDdkMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihsSaVzbMPiDnDAz85Hn2ibUogFwABGJ5aYn zD5aBj7UVD4AIWF0mbdj1953frr45F9IuZ3U9hW+V+G6w+wPFkiCnxR0ivddo3Xy DcEoDe6lNr5G6dngHsvbfQziSZo4VTMo0MDY0dAEdj2RsK6Qz++Qslued/Z3bK0x ecGUW5ebKaGs1Cb7MgiF+u6y5QU0KCKY2k8DexXSAeSUmh+Ri0sK+bdIuRPlw7Ho lpT4NQQeuMeAe+H/16Wu+uAT+NR102ZMpiDQ1vZVIZdpf1eck4E/+NqvORWoHABk glmKFVNEjn4CwkJjev6gzvHAmT+DhZXdHL2xHa3W/dKw1aEafQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKD2WV2V6YeKQtrYE45Tgf4w2JysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTlkY2JiMzAtZjgxOS0z MzJhLTlhMjMtNjZiODhhM2Y5MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCxkrBELQk9LQyhCi7HHYf45w3tLvcWxuTaoRxI azx9C94RfG5XScbcUjnhSoaY5wXOv8kFLt+V2TeSsbmpJ7gtXbbrekx6wQiC5zOG J6NXpa3Y3X9tnC70vHI2O55B1Ifj5jWQdV275bl3Fg06auX2WEsvywojJjmn8d1d Lvcp7rGavtz4YeVBSiebAgvJ1KLjcYIrvIoM/tMuB+snDSrLieGzEkIz1Ag5e9mm ASgclsWlNi6hgb6PTBBekPUfCLUPyPYz48zvfa7W+T8WwQtT6ef1K4jRsjG0y5rz d3B8ktl0cnyDdXmJngCZ1yEdE1wp7T0+GJqG+3XdNkb90zgr -----END CERTIFICATE-----Generated at Sat Apr 12 00:15:00 2025 by rpki-client