$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af521838-7b0f-3a67-b336-2c12435d4138.roa File: af521838-7b0f-3a67-b336-2c12435d4138.roa (raw, json) Hash identifier: Rm8sw1eHCIvQxHHHCwDY2JTgH1e7/RjPqwt4+GGLnXg= Subject key identifier: B2:05:2D:3D:17:CE:5E:D6:8B:32:C7:B6:C0:03:AD:C2:52:83:24:CA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E94C37775818405F04CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af521838-7b0f-3a67-b336-2c12435d4138.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396575 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:94:c3:77:75:81:84:05:f0:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=b82437de-049f-44b9-8cd9-842b7681906c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:1c:e6:36:be:e6:b9:f7:d5:8d:df:69:12: 02:17:66:3d:b9:c6:e1:72:d3:a4:b3:6a:d8:4c:1e: 01:08:f5:48:24:32:ec:25:28:2f:90:51:b6:1f:f6: 8b:17:59:a5:db:a9:26:da:3f:14:d4:c7:0d:9e:74: 47:c3:5e:94:b5:f8:ee:38:37:f4:99:f6:8b:73:b4: 79:05:24:2e:8d:a4:1f:23:c0:e6:52:d2:f1:ce:d8: 7c:6a:5b:3f:cb:63:71:61:f0:4e:0e:60:6a:03:3a: 07:29:4e:7a:41:4e:ed:b9:cd:8f:c5:d2:f5:7a:40: 01:96:78:cf:33:1b:1d:0f:d6:4f:49:e6:29:47:01: ae:d1:2a:ff:f3:43:ca:3a:f8:1c:4e:23:c9:2d:b9: f6:7c:75:65:8b:e5:ae:11:b9:bb:71:8f:73:42:9c: 28:03:7c:29:48:5e:c0:56:91:dc:8c:b3:99:71:71: 68:da:dc:a4:b5:51:c7:e9:41:e8:ff:3b:b2:5b:d1: 5e:c5:46:81:a6:b7:7e:f2:7d:d9:72:09:51:dc:ce: 1a:4f:2d:f5:a3:e6:2f:5e:e5:5b:fc:f7:9e:b1:f6: e4:9a:45:10:c3:4d:c4:b0:4f:30:1e:98:ea:45:5a: 7f:a7:de:20:b9:b7:83:f9:af:34:43:88:0f:93:f0: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:05:2D:3D:17:CE:5E:D6:8B:32:C7:B6:C0:03:AD:C2:52:83:24:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af521838-7b0f-3a67-b336-2c12435d4138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:82:b1:51:03:76:d8:09:d9:e0:a2:1a:06:e5:91:e8:c2:58: 0f:25:75:3d:0f:a4:ae:aa:51:a8:9e:ff:61:98:8d:24:2d:0d: dd:7b:5d:17:e9:5e:f4:1e:c6:61:6b:10:1d:30:c7:0f:3e:06: 31:c7:b2:88:21:94:d8:4f:b3:c6:ba:64:2c:a7:d2:91:14:97: b5:ac:d9:ae:96:bb:57:16:a7:8a:54:2d:b9:9b:bb:92:9c:57: 8f:d4:56:8d:a4:56:13:79:e3:b3:7c:a0:51:d5:82:29:9a:14: ed:aa:90:0a:91:e5:ff:81:87:3a:d3:a4:9b:77:4c:d0:41:5d: 2b:dd:8c:e2:68:50:9e:10:a6:f3:b9:9c:84:cf:8a:30:6d:79: 54:c6:35:4d:2f:b5:3e:d2:cc:d1:a6:e8:bf:35:a7:3d:f9:7b: 9b:d1:ec:c6:a9:a0:8c:fd:fe:1b:16:56:e7:6d:eb:f0:07:0b: 90:1d:f6:0f:2f:02:89:47:37:6e:4a:47:b3:9e:5c:84:54:c6: 69:a2:bd:c6:c4:62:3c:24:1a:85:ab:87:c2:e5:ed:e0:67:e1: bf:af:fe:38:1b:f8:52:c0:d2:42:31:4b:78:ac:d8:18:90:bd: 60:9f:41:91:ed:01:45:ba:b7:7c:5a:43:87:7e:1c:6f:3c:47: ac:b5:4b:f3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpTDd3WBhAXwTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YjgyNDM3ZGUtMDQ5Zi00NGI5LThjZDktODQyYjc2ODE5MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6Ac5ja+5rn31Y3faRICF2Y9ucbhctOks2rY TB4BCPVIJDLsJSgvkFG2H/aLF1ml26km2j8U1McNnnRHw16UtfjuODf0mfaLc7R5 BSQujaQfI8DmUtLxzth8als/y2NxYfBODmBqAzoHKU56QU7tuc2PxdL1ekABlnjP MxsdD9ZPSeYpRwGu0Sr/80PKOvgcTiPJLbn2fHVli+WuEbm7cY9zQpwoA3wpSF7A VpHcjLOZcXFo2tyktVHH6UHo/zuyW9FexUaBprd+8n3ZcglR3M4aTy31o+YvXuVb /PeesfbkmkUQw03EsE8wHpjqRVp/p94gubeD+a80Q4gPk/B2CQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLIFLT0Xzl7WizLHtsADrcJSgyTKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWY1MjE4MzgtN2IwZi0z YTY3LWIzMzYtMmMxMjQzNWQ0MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLgrFRA3bYCdngohoG5ZHowlgPJXU9D6SuqlGo nv9hmI0kLQ3de10X6V70HsZhaxAdMMcPPgYxx7KIIZTYT7PGumQsp9KRFJe1rNmu lrtXFqeKVC25m7uSnFeP1FaNpFYTeeOzfKBR1YIpmhTtqpAKkeX/gYc606Sbd0zQ QV0r3YziaFCeEKbzuZyEz4owbXlUxjVNL7U+0szRpui/Nac9+Xub0ezGqaCM/f4b FlbnbevwBwuQHfYPLwKJRzduSkeznlyEVMZpor3GxGI8JBqFq4fC5e3gZ+G/r/44 G/hSwNJCMUt4rNgYkL1gn0GR7QFFurd8WkOHfhxvPEestUvz -----END CERTIFICATE-----Generated at Sat Apr 12 00:26:30 2025 by rpki-client