$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1e3fd6a-ec0e-39a0-b447-c1e26acef115.roa File: a1e3fd6a-ec0e-39a0-b447-c1e26acef115.roa (raw, json) Hash identifier: fZwo1JC7hT2P904VWCcoTbBxmzL2Bf+PD8CRgd32oFc= Subject key identifier: 1E:F4:21:82:21:21:D9:9B:66:A6:99:8D:60:C9:AB:DA:08:EF:A3:D9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584917DC1797F77F8C20C49F7000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1e3fd6a-ec0e-39a0-b447-c1e26acef115.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 396559 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:17:97:f7:7f:8c:20:c4:9f:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=066f581d-abe0-4af1-ab98-310123b7383f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:78:2e:6a:b2:b3:50:c1:3f:42:75:05:c9: 66:0d:68:39:f3:da:83:fc:eb:7d:d5:f6:72:2e:f6: 90:0e:a5:6e:ba:86:e2:ce:c0:4a:e5:fa:fb:e1:54: cf:5b:d6:7a:91:c3:1e:23:66:5a:56:3a:72:60:22: ff:77:40:cd:79:45:c8:71:4e:91:b5:9d:a4:01:58: 86:e7:69:33:03:40:32:79:7c:a3:73:52:88:a0:30: 7a:b4:0b:c7:22:2f:e9:37:88:1f:c8:32:ab:fb:b0: c8:ae:f2:89:6e:0a:8d:1f:8e:e7:96:fb:54:da:93: 26:97:d8:76:47:d3:fe:08:e6:6d:0e:ae:a7:7e:7b: cc:61:ac:1c:6b:78:67:91:b4:97:cf:97:27:9a:2a: 04:d2:7d:3e:bb:80:9c:be:af:30:4b:88:ff:45:9b: 4e:51:e4:68:b9:f2:dc:72:de:01:d5:53:11:ca:75: 87:c0:f8:46:7d:ed:68:82:6b:51:d5:90:34:d5:8f: 28:59:db:8d:30:05:29:64:1d:ea:14:84:5e:53:ac: 09:bd:5a:00:16:0b:40:ec:e7:c7:68:b6:4c:ae:4f: bf:c9:d6:08:4a:4b:05:5d:17:14:fb:f1:0b:ee:08: ac:1c:d9:9e:1f:2a:bc:e2:c4:e0:84:ab:0c:fe:1d: 15:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:21:82:21:21:D9:9B:66:A6:99:8D:60:C9:AB:DA:08:EF:A3:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1e3fd6a-ec0e-39a0-b447-c1e26acef115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cb:3a:1e:b1:64:55:f1:fa:f0:7d:61:24:ac:07:fb:f8:a1: 61:ef:e7:eb:c7:10:db:8c:96:34:24:1d:fe:76:46:c1:df:bb: e9:e4:db:38:66:3e:92:95:f1:6f:6a:5f:98:bd:23:c3:93:78: 15:cb:33:a5:48:b2:cf:fa:b8:1e:71:e6:63:f8:bb:ac:9a:12: 48:21:ec:e4:32:a3:6d:a1:a9:8e:1f:83:08:8f:c1:13:f2:ea: 0f:48:44:31:7b:e6:ee:8a:c5:e1:7a:dd:81:5f:5d:7f:d7:78: b9:09:25:59:2e:ff:09:40:b7:2c:b4:f6:92:24:e7:f2:e3:b9: 2c:af:f3:68:ad:b1:4e:af:4b:bb:1f:d9:97:a0:06:eb:21:5d: b7:b3:7b:b9:7d:42:d8:c7:1b:e1:02:c1:a1:42:40:6a:b2:e5: cc:48:98:d7:86:67:08:d8:a1:a9:99:29:ef:f4:db:2a:8b:8a: 51:c4:8f:a7:0f:45:c6:65:b9:65:80:26:54:a4:ba:0e:2e:33: bf:97:06:f5:7b:81:41:4d:55:3e:ee:61:d7:47:e3:da:34:dc: b7:5c:f7:71:b2:4b:b9:bc:49:a9:0d:24:3d:07:3c:80:92:c8: 3c:02:b8:bf:20:1c:53:0e:8d:b1:14:eb:10:1c:ce:de:3c:86: 6c:63:61:ce -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BeX93+MIMSfcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MDY2ZjU4MWQtYWJlMC00YWYxLWFiOTgtMzEwMTIzYjczODNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWV4Lmqys1DBP0J1BclmDWg589qD/Ot91fZy LvaQDqVuuobizsBK5fr74VTPW9Z6kcMeI2ZaVjpyYCL/d0DNeUXIcU6RtZ2kAViG 52kzA0AyeXyjc1KIoDB6tAvHIi/pN4gfyDKr+7DIrvKJbgqNH47nlvtU2pMml9h2 R9P+COZtDq6nfnvMYawca3hnkbSXz5cnmioE0n0+u4Ccvq8wS4j/RZtOUeRoufLc ct4B1VMRynWHwPhGfe1ogmtR1ZA01Y8oWduNMAUpZB3qFIReU6wJvVoAFgtA7OfH aLZMrk+/ydYISksFXRcU+/EL7gisHNmeHyq84sTghKsM/h0VowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB70IYIhIdmbZqaZjWDJq9oI76PZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFlM2ZkNmEtZWMwZS0z OWEwLWI0NDctYzFlMjZhY2VmMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBpyzoesWRV8frwfWEkrAf7+KFh7+frxxDbjJY0 JB3+dkbB37vp5Ns4Zj6SlfFval+YvSPDk3gVyzOlSLLP+rgeceZj+LusmhJIIezk MqNtoamOH4MIj8ET8uoPSEQxe+buisXhet2BX11/13i5CSVZLv8JQLcstPaSJOfy 47ksr/NorbFOr0u7H9mXoAbrIV23s3u5fULYxxvhAsGhQkBqsuXMSJjXhmcI2KGp mSnv9Nsqi4pRxI+nD0XGZbllgCZUpLoOLjO/lwb1e4FBTVU+7mHXR+PaNNy3XPdx sku5vEmpDSQ9BzyAksg8Ari/IBxTDo2xFOsQHM7ePIZsY2HO -----END CERTIFICATE-----Generated at Fri Apr 11 23:59:45 2025 by rpki-client