$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58683c3-cfdf-35b6-a395-75b53b3ee675.roa File: a58683c3-cfdf-35b6-a395-75b53b3ee675.roa (raw, json) Hash identifier: qDFOV2GCmaUPupb6VI2EyWWgpGv4qWc++XO5vNzmVBU= Subject key identifier: 26:45:7E:F8:8D:59:27:BE:65:86:46:FF:4F:3E:78:73:06:9B:B5:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584917DC17E71C0866D71FC0EE40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58683c3-cfdf-35b6-a395-75b53b3ee675.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 396581 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:17:e7:1c:08:66:d7:1f:c0:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=a5bbbd81-f0cd-4477-9008-2c3c156ed0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0d:06:e0:3a:8f:62:14:a3:19:3a:c3:84:07: db:57:28:2a:48:95:6b:3e:de:8f:2a:12:1b:97:c2: 71:d3:e0:bc:43:52:3b:e3:a2:c7:be:43:91:8c:80: e0:8d:83:25:5b:0d:69:0a:30:5e:b3:bf:fc:fb:6d: f9:8a:54:80:64:2e:03:e4:e3:f2:e2:c4:d8:c2:04: d6:e6:d0:8c:2b:04:f0:39:c5:da:26:89:d4:e2:35: 64:60:ff:a5:57:b2:d4:5e:af:4b:88:8c:82:b7:57: ab:76:3b:5b:07:8c:5a:ce:8a:5e:62:ba:0f:02:b8: 3c:29:07:52:52:99:99:b0:bd:75:3d:77:e0:58:02: d5:84:4d:97:51:ce:ba:4d:41:12:9b:56:51:4f:87: f7:1a:98:8e:d8:3a:df:5f:88:0e:4d:67:5b:5c:d1: 7b:49:e2:65:97:48:d6:73:8b:81:0f:84:71:01:6c: 8f:68:1d:64:4e:7a:35:34:4b:6b:23:37:c3:f7:9d: fb:9b:48:2c:6f:15:61:c9:d5:46:86:d5:b5:dd:a3: c0:db:95:77:f2:18:c2:63:83:d1:c9:84:14:2b:8d: 48:0a:63:2b:8e:9d:8d:e8:3a:87:58:7b:0b:09:da: ee:87:d6:26:cc:85:ad:0f:f0:fd:53:c5:d5:5b:f8: 4e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:45:7E:F8:8D:59:27:BE:65:86:46:FF:4F:3E:78:73:06:9B:B5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a58683c3-cfdf-35b6-a395-75b53b3ee675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:85:84:76:fa:b4:1d:e2:78:2f:e4:ef:74:e6:db:e7:e6:34: d9:96:4e:34:41:62:01:56:df:72:50:e3:6d:1b:74:3c:b4:9b: d2:c8:96:a3:f3:cf:71:1f:68:75:83:5e:d0:c0:2c:8c:62:78: 61:48:ee:af:79:be:4e:ab:32:96:a1:e3:18:f4:d8:41:af:b3: 71:a3:7e:0e:4d:81:99:6e:fd:a8:66:4d:78:0b:ad:ec:06:04: d8:39:70:7b:37:fc:62:76:e4:98:7b:ef:37:24:0e:85:ec:df: dc:33:5c:06:25:e8:40:1a:40:0c:cd:03:03:82:18:c3:18:80: a2:fc:2d:47:d4:ba:34:b0:ad:6f:8f:10:b9:00:d2:29:ef:3f: e6:f5:74:56:23:69:9b:0d:e9:21:9a:47:29:61:6f:96:7b:5d: 90:79:98:8c:e1:9a:1e:80:ee:82:68:a0:5d:f8:8a:97:90:77: 1b:0f:d7:a0:da:a6:51:b6:7e:2f:04:5c:84:9f:63:30:0d:aa: 65:b8:2d:4e:8a:86:7f:d6:39:85:6a:ba:d7:b9:b6:d6:13:cf: ef:c4:17:04:dd:c0:0a:84:d3:1f:80:88:62:39:e6:82:d8:a6: 94:30:e1:f1:a4:4a:c7:79:51:fa:10:b4:b8:19:a0:29:ba:22: 9f:cf:b2:14 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BfnHAhm1x/A7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YTViYmJkODEtZjBjZC00NDc3LTkwMDgtMmMzYzE1NmVkMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw0G4DqPYhSjGTrDhAfbVygqSJVrPt6PKhIb l8Jx0+C8Q1I746LHvkORjIDgjYMlWw1pCjBes7/8+235ilSAZC4D5OPy4sTYwgTW 5tCMKwTwOcXaJonU4jVkYP+lV7LUXq9LiIyCt1erdjtbB4xazopeYroPArg8KQdS UpmZsL11PXfgWALVhE2XUc66TUESm1ZRT4f3GpiO2DrfX4gOTWdbXNF7SeJll0jW c4uBD4RxAWyPaB1kTno1NEtrIzfD9537m0gsbxVhydVGhtW13aPA25V38hjCY4PR yYQUK41ICmMrjp2N6DqHWHsLCdruh9YmzIWtD/D9U8XVW/hOLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCZFfviNWSe+ZYZG/08+eHMGm7U0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTU4NjgzYzMtY2ZkZi0z NWI2LWEzOTUtNzViNTNiM2VlNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCfhYR2+rQd4ngv5O905tvn5jTZlk40QWIBVt9y UONtG3Q8tJvSyJaj889xH2h1g17QwCyMYnhhSO6veb5OqzKWoeMY9NhBr7Nxo34O TYGZbv2oZk14C63sBgTYOXB7N/xiduSYe+83JA6F7N/cM1wGJehAGkAMzQMDghjD GICi/C1H1Lo0sK1vjxC5ANIp7z/m9XRWI2mbDekhmkcpYW+We12QeZiM4ZoegO6C aKBd+IqXkHcbD9eg2qZRtn4vBFyEn2MwDapluC1OioZ/1jmFarrXubbWE8/vxBcE 3cAKhNMfgIhiOeaC2KaUMOHxpErHeVH6ELS4GaApuiKfz7IU -----END CERTIFICATE-----Generated at Sat Apr 12 00:07:44 2025 by rpki-client