$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa File: a85b4313-c024-373f-95a0-524b5b2e756e.roa (raw, json) Hash identifier: 4RAiw+ERdhOLArxUtmj2FB9McCJ4fOrR0VzK1VADYGE= Subject key identifier: FC:6F:BA:67:D3:65:EE:72:02:44:0D:26:9D:29:29:30:6A:73:3E:C7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584917DC18EF20E8D39742EE7500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 397211 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:18:ef:20:e8:d3:97:42:ee:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=166ce0d7-fd9a-4449-b7d7-eeafa2a4eac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:ad:92:30:52:52:86:39:f4:b5:c7:c7:ac: 96:75:c2:cd:ba:a1:8c:46:3b:89:a5:57:63:b4:65: 4d:0c:c9:af:23:cc:be:f1:8a:13:52:05:db:3a:41: 41:4b:80:c6:5f:42:6c:5b:aa:56:c8:e7:5c:89:b7: 48:4f:68:02:46:45:b2:b3:98:af:d1:94:0e:4d:44: 0a:f9:8f:44:77:89:1b:e8:13:86:e4:61:c5:6c:bf: 8c:c9:94:2c:2d:76:89:53:38:a8:68:d5:30:20:8b: 17:c1:2f:2e:26:03:55:d5:b6:79:03:28:72:43:8a: 81:75:35:5b:67:3a:c1:95:df:3e:56:05:22:8b:6a: 03:c8:33:6e:5d:24:98:39:df:51:85:24:b4:cf:d6: d2:67:44:b8:8b:d3:3c:c3:ab:42:3c:fa:45:11:a0: a9:1c:dd:a5:68:62:72:d1:52:db:cb:4b:41:cd:71: 94:67:3f:f1:21:04:5b:03:0a:2d:3c:86:f8:15:dd: e5:fd:ff:ae:56:6f:fd:ab:9b:ee:b0:15:85:af:dd: be:23:40:b2:33:8a:6c:a3:f8:8d:db:c2:56:88:cc: 8c:5f:1c:96:c8:da:01:59:e6:dd:8d:ca:4e:1d:19: bd:4c:a7:9d:7e:e0:0f:ea:4b:2e:02:75:e0:71:1a: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6F:BA:67:D3:65:EE:72:02:44:0D:26:9D:29:29:30:6A:73:3E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a85b4313-c024-373f-95a0-524b5b2e756e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:7a:09:dd:c3:fd:46:e2:3f:e1:d8:96:c4:41:08:5e:b8:95: a1:88:3b:ab:54:64:f0:a1:05:3d:5b:50:76:75:fc:e0:a5:f6: d1:03:88:93:e9:42:a9:df:7d:9d:39:00:4c:6e:40:6b:cc:d3: 94:d6:ee:5a:9c:70:f8:1d:81:83:79:4d:5b:2d:cc:a3:5e:45: 89:43:d7:bf:d4:b2:9e:64:9e:ea:7c:9c:bc:51:3b:49:cb:67: 5d:f4:aa:11:36:38:8f:77:92:01:56:3d:6a:35:22:12:fe:16: a9:b9:f9:ee:9c:b4:e7:e5:38:37:6e:69:c8:de:73:03:ea:2b: 29:3d:17:4a:05:a6:54:f0:64:aa:4c:ce:d7:58:96:31:52:42: 60:3d:a1:21:94:ea:ac:40:39:c2:80:43:4b:c8:59:68:38:80: d2:17:ab:af:63:b1:a9:24:3b:d4:70:23:1f:91:97:11:35:4f: b4:8d:1b:01:c9:ac:7f:87:4e:b9:be:e8:13:35:25:25:fd:89: c1:bd:a9:f9:b3:0b:00:4f:c0:2c:50:19:68:c7:d1:3a:2c:6e: 6d:7b:19:cc:b7:96:5d:51:a6:25:5e:41:e9:0a:6c:20:7d:4c: b2:45:65:a8:87:3f:ca:9d:3e:b7:01:8a:ce:fa:96:c3:e7:46: 77:e7:40:b4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BjvIOjTl0LudQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MTY2Y2UwZDctZmQ5YS00NDQ5LWI3ZDctZWVhZmEyYTRlYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1ytkjBSUoY59LXHx6yWdcLNuqGMRjuJpVdj tGVNDMmvI8y+8YoTUgXbOkFBS4DGX0JsW6pWyOdcibdIT2gCRkWys5iv0ZQOTUQK +Y9Ed4kb6BOG5GHFbL+MyZQsLXaJUzioaNUwIIsXwS8uJgNV1bZ5AyhyQ4qBdTVb ZzrBld8+VgUii2oDyDNuXSSYOd9RhSS0z9bSZ0S4i9M8w6tCPPpFEaCpHN2laGJy 0VLby0tBzXGUZz/xIQRbAwotPIb4Fd3l/f+uVm/9q5vusBWFr92+I0CyM4pso/iN 28JWiMyMXxyWyNoBWebdjcpOHRm9TKedfuAP6ksuAnXgcRp9HwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPxvumfTZe5yAkQNJp0pKTBqcz7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg1YjQzMTMtYzAyNC0z NzNmLTk1YTAtNTI0YjViMmU3NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCVegndw/1G4j/h2JbEQQheuJWhiDurVGTwoQU9 W1B2dfzgpfbRA4iT6UKp332dOQBMbkBrzNOU1u5anHD4HYGDeU1bLcyjXkWJQ9e/ 1LKeZJ7qfJy8UTtJy2dd9KoRNjiPd5IBVj1qNSIS/hapufnunLTn5Tg3bmnI3nMD 6ispPRdKBaZU8GSqTM7XWJYxUkJgPaEhlOqsQDnCgENLyFloOIDSF6uvY7GpJDvU cCMfkZcRNU+0jRsByax/h065vugTNSUl/YnBvan5swsAT8AsUBlox9E6LG5texnM t5ZdUaYlXkHpCmwgfUyyRWWohz/KnT63AYrO+pbD50Z350C0 -----END CERTIFICATE-----Generated at Sat Apr 12 00:00:34 2025 by rpki-client