$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3204d3d-133b-3641-b16b-d99ceb080681.roa File: c3204d3d-133b-3641-b16b-d99ceb080681.roa (raw, json) Hash identifier: ZjPn37kzWj5gqHjyU2OkRIzwuER/EV5HQnDXiO+TWqM= Subject key identifier: CE:B7:4D:C2:0B:54:8D:90:5F:D4:4B:3D:D6:DD:0A:7E:66:95:40:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497AD9CB1D6A05FAEFFAD0B580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3204d3d-133b-3641-b16b-d99ceb080681.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 396551 IP address blocks: 2001:500:30ff::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:cb:1d:6a:05:fa:ef:fa:d0:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=673dbc3b-bd1d-45ae-acc9-3e7ceab78adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:71:ac:18:57:08:3c:fa:f3:c5:f0:e2:b0:12: 95:9c:31:58:31:f1:a8:39:50:cd:0b:81:49:4d:ff: 5c:b2:b9:b4:4b:16:f5:41:8f:23:d7:7b:53:bb:fb: 77:75:29:bf:f3:8d:da:cb:c7:6f:e0:74:e7:09:9c: 40:4b:e9:81:49:be:89:fb:30:68:46:8e:e6:b4:6a: a3:2c:f5:37:91:41:81:c0:c7:e1:ef:56:d7:2c:10: b9:62:14:fc:dc:bd:70:e4:b6:cf:29:cf:67:af:94: fe:4b:e6:52:db:de:2a:61:4c:de:f6:be:c0:05:bb: 65:05:b1:15:67:2a:83:f8:4a:12:98:90:b5:1a:08: 89:01:1d:a6:49:b1:63:ed:e9:2f:62:e0:28:fa:9f: 93:23:51:df:1b:c3:1f:db:59:7b:d4:0b:b3:1e:c3: 2c:d6:4e:6d:f2:93:75:07:9e:c9:9c:a9:1a:7e:9a: 1a:2f:86:c9:0c:9d:5a:b6:74:7e:c2:77:cb:b8:be: 3a:0b:7a:50:7a:7c:ec:e2:6d:e3:8c:2a:c6:89:13: 9a:96:fd:ac:61:44:77:5f:46:ed:29:bd:c4:4e:96: 96:3e:d6:1c:9e:f9:f8:83:8d:ed:3e:b4:49:56:35: cb:74:0b:1e:bd:11:30:ae:58:13:5b:f4:8b:ea:6d: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B7:4D:C2:0B:54:8D:90:5F:D4:4B:3D:D6:DD:0A:7E:66:95:40:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3204d3d-133b-3641-b16b-d99ceb080681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:48:c1:c9:88:60:a0:e8:85:69:17:70:fc:11:eb:e5:76:9f: 41:ca:cf:fa:1e:51:38:c2:56:e3:22:31:60:cd:91:13:86:ac: 71:e3:77:c6:4e:59:d2:9d:3a:3a:03:1a:2a:30:0d:c0:9e:84: c5:29:77:22:37:9a:80:66:31:13:da:5d:94:b5:a5:33:df:02: 0a:91:58:81:b5:7d:9c:55:0c:b3:43:65:96:a6:3b:db:85:15: 48:50:53:bc:a3:36:5d:b7:88:a5:f2:d1:7c:a7:a2:fd:76:d3: 50:b7:23:37:87:0c:12:04:8b:19:a5:f4:86:05:d8:cd:44:e2: 4d:23:ae:3a:6a:98:b1:8d:84:f5:cc:1f:54:ba:49:92:10:24: f5:f9:3e:07:db:ca:4a:e3:09:b4:4a:96:50:fa:8d:5f:1d:75: 32:c1:65:e0:3a:7d:f0:12:2c:58:e0:2d:c9:40:9e:5c:5a:99: 8d:a5:00:91:97:63:20:b4:31:22:d5:45:2c:a8:c3:b3:4d:92: c8:97:8b:e3:9f:18:51:c7:c9:ea:61:80:3a:30:7a:5e:52:37: 31:09:d9:46:f5:ec:d8:5d:c0:ed:1e:c0:0f:da:6f:3f:08:30: c1:f6:a0:6c:d2:8f:f2:06:fa:b3:db:41:35:e2:cd:60:b6:5c: ca:6e:9a:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl62csdagX67/rQtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk NjczZGJjM2ItYmQxZC00NWFlLWFjYzktM2U3Y2VhYjc4YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XGsGFcIPPrzxfDisBKVnDFYMfGoOVDNC4FJ Tf9csrm0Sxb1QY8j13tTu/t3dSm/843ay8dv4HTnCZxAS+mBSb6J+zBoRo7mtGqj LPU3kUGBwMfh71bXLBC5YhT83L1w5LbPKc9nr5T+S+ZS294qYUze9r7ABbtlBbEV ZyqD+EoSmJC1GgiJAR2mSbFj7ekvYuAo+p+TI1HfG8Mf21l71AuzHsMs1k5t8pN1 B57JnKkafpoaL4bJDJ1atnR+wnfLuL46C3pQenzs4m3jjCrGiROalv2sYUR3X0bt Kb3ETpaWPtYcnvn4g43tPrRJVjXLdAsevREwrlgTW/SL6m2CqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM63TcILVI2QX9RLPdbdCn5mlUBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzMyMDRkM2QtMTMzYi0z NjQxLWIxNmItZDk5Y2ViMDgwNjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCxSMHJiGCg6IVpF3D8Eevldp9Bys/6HlE4wlbj IjFgzZEThqxx43fGTlnSnTo6AxoqMA3AnoTFKXciN5qAZjET2l2UtaUz3wIKkViB tX2cVQyzQ2WWpjvbhRVIUFO8ozZdt4il8tF8p6L9dtNQtyM3hwwSBIsZpfSGBdjN ROJNI646apixjYT1zB9UukmSECT1+T4H28pK4wm0SpZQ+o1fHXUywWXgOn3wEixY 4C3JQJ5cWpmNpQCRl2MgtDEi1UUsqMOzTZLIl4vjnxhRx8nqYYA6MHpeUjcxCdlG 9ezYXcDtHsAP2m8/CDDB9qBs0o/yBvqz20E14s1gtlzKbpoE -----END CERTIFICATE-----Generated at Sat Apr 12 00:10:37 2025 by rpki-client