$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2c7b803-296f-3fde-842e-52a95aeb1726.roa File: c2c7b803-296f-3fde-842e-52a95aeb1726.roa (raw, json) Hash identifier: EblUICF3BLAF46JSEvqvjugJ6zy2IZpJu4GpeS0GwDU= Subject key identifier: 44:FB:75:61:F5:8F:F0:1E:A7:41:46:39:EC:50:0D:1D:B4:A9:70:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E8E898ED7D0440546EF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2c7b803-296f-3fde-842e-52a95aeb1726.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 396611 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:8e:89:8e:d7:d0:44:05:46:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=d3513c5e-97a0-426f-936b-94189d87ef55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:0b:d0:1b:28:2f:c2:14:1f:d4:74:75:c8: 41:6a:0e:cc:03:b8:e1:4d:37:f8:41:7f:aa:5b:46: 76:37:cc:ad:06:8a:27:cd:5e:17:24:d1:b3:bc:eb: 77:1c:c0:48:33:3e:f2:f4:cc:d2:b9:d2:87:8e:b4: bc:81:52:0a:3b:83:7f:f1:2f:63:f2:2b:fe:8f:a2: f9:66:2b:d2:2f:08:7f:a9:9e:bf:46:35:0d:4b:e7: c2:ad:2e:de:5a:89:31:7b:1f:80:67:cf:b8:b8:95: b1:11:44:32:6c:9b:0c:dd:7f:75:d7:9b:a7:e2:d4: 52:f9:14:28:95:81:77:f8:fd:65:05:f7:d4:fb:46: e0:2d:2b:1c:26:26:1f:19:5b:23:81:dc:ef:e2:b7: 12:24:0c:f4:ae:72:09:f3:8f:e0:86:98:a2:7b:a1: 0b:19:20:31:8f:ac:41:fa:aa:73:72:70:5f:c8:68: 19:ca:6c:9a:f2:cc:ac:51:bc:80:f4:fd:a3:c3:7e: 4d:5d:23:fb:1d:49:89:2b:9c:d5:1d:ce:61:de:6b: 4e:8f:e5:c9:d1:1d:01:ea:40:22:c0:a0:70:06:17: 65:3b:fd:fe:ba:b2:99:8e:44:48:3d:59:d1:d0:09: d5:c4:90:e6:84:b8:cc:0c:74:11:97:21:ae:d4:01: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FB:75:61:F5:8F:F0:1E:A7:41:46:39:EC:50:0D:1D:B4:A9:70:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2c7b803-296f-3fde-842e-52a95aeb1726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:f6:01:1a:65:18:38:12:dd:e5:8b:da:88:76:c4:b9:54:8f: 0c:74:e7:fe:58:e0:87:3a:d7:59:30:17:27:24:74:ee:01:fd: 77:79:e9:88:51:54:e4:6e:c3:0c:46:78:f6:52:ba:ab:74:0a: 11:31:29:ee:f8:eb:ec:a2:50:9a:66:9b:9d:4e:42:80:b5:04: 2a:88:33:04:38:2c:ec:b6:b9:30:e9:e8:89:a7:04:e6:94:11: 1a:9a:38:24:05:d0:42:89:c7:4a:02:cf:2a:2e:4a:05:0a:20: 96:fd:26:6f:b5:cb:46:5c:73:34:ac:84:9a:a8:6f:83:19:95: 43:04:c8:2d:45:2f:c4:20:a9:69:41:1f:b0:2d:c7:91:70:26: 03:b5:c2:f1:ea:5e:f6:ef:30:24:db:60:cd:4f:9a:37:42:e1: 37:8c:25:17:41:f8:2d:91:9f:e3:52:37:5a:3d:9c:ba:a7:0b: 7d:99:06:ab:b7:60:ac:ab:45:f9:fd:52:b5:f2:37:a1:5d:70: 7a:9d:47:f0:09:44:67:5b:76:e8:8c:30:be:fe:c8:b9:d4:1d: 6a:71:ec:91:6d:79:d1:94:5d:29:49:81:c8:bf:a2:f6:0b:eb: bf:dc:35:39:64:eb:fa:4f:ef:9c:59:39:e1:f0:60:fb:b5:99: 46:71:c5:c5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5Po6JjtfQRAVG7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk ZDM1MTNjNWUtOTdhMC00MjZmLTkzNmItOTQxODlkODdlZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg60L0BsoL8IUH9R0dchBag7MA7jhTTf4QX+q W0Z2N8ytBoonzV4XJNGzvOt3HMBIMz7y9MzSudKHjrS8gVIKO4N/8S9j8iv+j6L5 ZivSLwh/qZ6/RjUNS+fCrS7eWokxex+AZ8+4uJWxEUQybJsM3X9115un4tRS+RQo lYF3+P1lBffU+0bgLSscJiYfGVsjgdzv4rcSJAz0rnIJ84/ghpiie6ELGSAxj6xB +qpzcnBfyGgZymya8sysUbyA9P2jw35NXSP7HUmJK5zVHc5h3mtOj+XJ0R0B6kAi wKBwBhdlO/3+urKZjkRIPVnR0AnVxJDmhLjMDHQRlyGu1AGQBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFET7dWH1j/Aep0FGOexQDR20qXD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJjN2I4MDMtMjk2Zi0z ZmRlLTg0MmUtNTJhOTVhZWIxNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC09gEaZRg4Et3li9qIdsS5VI8MdOf+WOCHOtdZ MBcnJHTuAf13eemIUVTkbsMMRnj2UrqrdAoRMSnu+OvsolCaZpudTkKAtQQqiDME OCzstrkw6eiJpwTmlBEamjgkBdBCicdKAs8qLkoFCiCW/SZvtctGXHM0rISaqG+D GZVDBMgtRS/EIKlpQR+wLceRcCYDtcLx6l727zAk22DNT5o3QuE3jCUXQfgtkZ/j UjdaPZy6pwt9mQart2Csq0X5/VK18jehXXB6nUfwCURnW3bojDC+/si51B1qceyR bXnRlF0pSYHIv6L2C+u/3DU5ZOv6T++cWTnh8GD7tZlGccXF -----END CERTIFICATE-----Generated at Fri Apr 11 23:01:21 2025 by rpki-client