$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b22c953b-8eca-38f9-b5a3-aeb8da01ae4d.roa File: b22c953b-8eca-38f9-b5a3-aeb8da01ae4d.roa (raw, json) Hash identifier: D57mlSnWf8QVeKcZOhx85C6haa/XP6c6uL+OvjJGv7g= Subject key identifier: 50:EA:CF:2D:6D:34:8C:F0:21:87:18:F1:CB:47:5A:08:61:FB:14:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E96EE97D0A7784C3D5840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b22c953b-8eca-38f9-b5a3-aeb8da01ae4d.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396589 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:96:ee:97:d0:a7:78:4c:3d:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=ff9c21bb-6457-4f23-afe7-f4d3f0fbb6c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2c:1f:30:85:1f:cc:37:b9:e7:55:f7:93:8a: d2:9f:c8:5d:3a:e0:4d:f6:3d:f2:5a:ab:3b:66:e1: e0:18:93:8f:ed:f9:c9:e2:4a:51:dc:c8:33:25:6d: 4e:ff:41:e2:ce:ae:07:64:b9:2b:09:c7:51:d3:f3: 65:58:b5:3d:56:44:10:45:50:4f:c2:d7:d9:f1:36: f5:76:79:81:ad:97:d4:ac:c6:7a:97:bd:c9:17:65: 60:ff:1c:4a:5d:a5:e4:3c:12:d9:af:19:f1:2e:b1: de:a5:5d:c8:83:af:1d:f1:f3:a1:15:44:65:73:f8: da:97:56:03:6b:3d:ae:32:96:73:14:6e:33:7a:ac: 58:3c:f0:c0:bb:46:7d:db:3f:7d:01:06:b5:4a:70: 72:1e:f2:48:e4:f5:9c:54:a1:cc:a3:0e:50:0b:12: ff:72:65:28:ca:c7:d3:24:92:3d:4f:7e:49:d6:82: 91:fd:23:e9:0d:d9:03:18:9d:f5:56:82:98:81:eb: e6:b0:b5:52:c9:73:fb:dc:2c:56:96:17:14:25:e9: 95:ed:1b:f6:49:30:34:3e:1a:77:0d:91:a7:f1:92: ed:4c:69:1e:79:b2:d3:4d:f9:dd:b1:26:63:40:08: 5d:de:fd:19:a3:ec:10:67:23:86:47:45:40:b3:8d: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EA:CF:2D:6D:34:8C:F0:21:87:18:F1:CB:47:5A:08:61:FB:14:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b22c953b-8eca-38f9-b5a3-aeb8da01ae4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:da:1c:2a:90:42:3f:9a:a9:4a:44:6e:67:82:d7:a7:7d:b3: 5e:f5:c2:b2:4d:14:d2:55:ac:d2:6e:7f:19:a2:06:7b:b2:c4: e0:56:1d:ed:d9:0a:53:63:6c:ca:a9:a6:49:7e:7c:7d:c5:58: 98:d4:aa:9a:75:b7:dd:99:59:d3:88:fb:d6:47:8c:9a:73:71: 6e:ec:e4:32:a9:26:3a:44:d6:a8:c7:2e:a1:44:7b:fd:ad:63: b5:73:33:6e:f8:0e:b5:57:53:a7:40:e0:76:6b:2a:9c:32:61: e8:61:94:76:d7:6c:68:35:56:d5:77:f5:14:0c:42:5a:60:35: c4:95:f6:d5:6f:21:90:9a:51:55:9d:3a:99:f1:d2:11:6c:0a: 3c:79:d3:3f:02:af:d4:1a:39:02:fd:ac:f1:bc:b4:32:32:02: 64:21:31:39:60:07:99:84:9d:20:6a:2d:14:f8:35:aa:8e:a0: 7a:91:16:77:56:4c:a2:f9:0b:3c:5c:fc:f6:e4:a9:ad:2b:a5: 58:e8:06:19:08:bb:90:62:c9:94:f0:29:e6:14:a9:dc:41:75: d7:30:25:50:4f:e1:32:64:b3:d4:d5:95:f9:84:b6:cc:27:72: 33:22:89:d1:a1:fc:8b:c3:89:b6:5c:ee:72:f6:1b:6b:3e:cd: 02:b5:d0:c8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpbul9CneEw9WEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZmY5YzIxYmItNjQ1Ny00ZjIzLWFmZTctZjRkM2YwZmJiNmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSwfMIUfzDe551X3k4rSn8hdOuBN9j3yWqs7 ZuHgGJOP7fnJ4kpR3MgzJW1O/0Hizq4HZLkrCcdR0/NlWLU9VkQQRVBPwtfZ8Tb1 dnmBrZfUrMZ6l73JF2Vg/xxKXaXkPBLZrxnxLrHepV3Ig68d8fOhFURlc/jal1YD az2uMpZzFG4zeqxYPPDAu0Z92z99AQa1SnByHvJI5PWcVKHMow5QCxL/cmUoysfT JJI9T35J1oKR/SPpDdkDGJ31VoKYgevmsLVSyXP73CxWlhcUJemV7Rv2STA0Php3 DZGn8ZLtTGkeebLTTfndsSZjQAhd3v0Zo+wQZyOGR0VAs43ZvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFDqzy1tNIzwIYcY8ctHWghh+xQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIyYzk1M2ItOGVjYS0z OGY5LWI1YTMtYWViOGRhMDFhZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB72hwqkEI/mqlKRG5ngtenfbNe9cKyTRTSVazS bn8ZogZ7ssTgVh3t2QpTY2zKqaZJfnx9xViY1KqadbfdmVnTiPvWR4yac3Fu7OQy qSY6RNaoxy6hRHv9rWO1czNu+A61V1OnQOB2ayqcMmHoYZR212xoNVbVd/UUDEJa YDXElfbVbyGQmlFVnTqZ8dIRbAo8edM/Aq/UGjkC/azxvLQyMgJkITE5YAeZhJ0g ai0U+DWqjqB6kRZ3Vkyi+Qs8XPz25KmtK6VY6AYZCLuQYsmU8CnmFKncQXXXMCVQ T+EyZLPU1ZX5hLbMJ3IzIonRofyLw4m2XO5y9htrPs0CtdDI -----END CERTIFICATE-----Generated at Fri Apr 11 22:02:08 2025 by rpki-client