$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5f9d97c-e48d-3dd4-95be-e8196e7b46c6.roa File: c5f9d97c-e48d-3dd4-95be-e8196e7b46c6.roa (raw, json) Hash identifier: wvgTr4xMtj46PVPtWXpNX9oJNKZ1yttJvJiMxPwQI50= Subject key identifier: 33:90:2D:66:A7:3E:8B:C1:B9:FD:8D:CB:4F:7E:B6:B5:29:B0:14:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849403986CDD25B35E9F5232080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5f9d97c-e48d-3dd4-95be-e8196e7b46c6.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 396570 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:86:cd:d2:5b:35:e9:f5:23:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=12d110f1-19fa-413c-98ba-aa138ff93bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:81:d4:4a:9a:14:c2:15:07:b5:96:6c:a0: 2b:a0:ed:cf:81:00:e3:98:85:c0:f9:7a:77:93:5a: b9:0d:34:f0:1f:20:29:04:58:bc:59:ad:93:aa:75: 67:a2:22:30:24:20:0b:11:4e:b7:3f:5e:f7:a0:5c: 0d:c5:f3:4b:94:ba:d8:b6:8e:3f:44:21:66:82:de: 41:f7:3a:56:5d:65:7f:f9:09:00:19:d5:26:a7:3a: 3a:cf:3a:ca:f3:75:80:7b:06:c7:46:b4:a3:ca:22: ab:8f:65:7d:27:51:7e:c3:78:d0:bd:07:8d:bc:9a: c8:d7:63:87:e2:ad:1e:37:4e:8e:24:ac:a3:32:b5: 95:30:70:33:89:7e:95:5c:c7:69:87:7c:06:e0:47: 85:d0:7d:02:9d:b4:5b:bf:4f:bc:45:00:ee:9b:f1: 2c:6c:04:9e:b8:b9:09:7d:68:18:b8:19:4f:9b:83: 03:0e:7f:3f:6b:b4:dc:ff:a9:6c:a3:80:ff:d5:46: 49:8d:1d:31:7e:ca:9b:77:32:85:5b:21:68:1c:7d: d6:2c:47:da:05:7d:fc:2d:c6:aa:18:77:6d:c5:0f: 64:10:03:61:66:dc:5c:ab:7d:78:bc:8d:2a:1f:ed: 07:e4:d6:ee:12:9b:7b:e3:8f:cb:aa:6c:07:e1:4f: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:90:2D:66:A7:3E:8B:C1:B9:FD:8D:CB:4F:7E:B6:B5:29:B0:14:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5f9d97c-e48d-3dd4-95be-e8196e7b46c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:23:08:76:88:7a:f7:0d:85:80:b8:af:3d:1e:53:cb:8b:e3: d3:cd:b1:1e:3d:df:43:85:d2:9a:9b:76:e7:7c:65:3e:07:98: 36:5b:cf:9b:e6:a4:6f:ea:f8:dd:2f:50:bb:42:80:9f:e4:b9: 76:93:98:ef:a4:c4:dd:cd:d5:57:cb:bd:e3:d7:58:48:ef:f2: 06:fc:14:da:4e:f3:48:75:c5:23:94:a9:c0:b4:cf:66:8e:3c: 41:5d:fb:ee:fb:b2:67:9c:2a:c2:6a:2f:55:41:e6:4c:6c:2e: 93:82:b3:da:31:93:30:8d:a1:54:ce:17:6c:11:22:6e:98:4c: 40:3d:78:3c:e0:bd:5d:f7:07:5e:ec:02:19:cd:03:e4:9d:c3: 6b:ee:f3:b3:a6:c5:1c:45:e5:12:28:12:95:93:7b:16:be:3d: 21:a2:03:1d:c2:26:07:30:9e:d0:bc:79:c4:f9:c5:5b:67:d1: 50:2c:64:81:b4:4b:26:f1:3c:ad:4d:f0:1a:53:a2:37:5d:db: 1f:ed:49:b3:12:5b:9e:f9:60:06:79:1b:ab:8f:16:f8:64:d1: 8a:be:f8:c6:9b:10:62:73:86:a5:34:01:75:d1:9b:23:4f:73: 9c:98:02:d8:b8:3a:7e:ad:60:5b:41:6e:1c:c2:68:fe:ad:c5: 67:f3:db:fe -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYbN0ls16fUjIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk MTJkMTEwZjEtMTlmYS00MTNjLTk4YmEtYWExMzhmZjkzYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheOB1EqaFMIVB7WWbKAroO3PgQDjmIXA+Xp3 k1q5DTTwHyApBFi8Wa2TqnVnoiIwJCALEU63P173oFwNxfNLlLrYto4/RCFmgt5B 9zpWXWV/+QkAGdUmpzo6zzrK83WAewbHRrSjyiKrj2V9J1F+w3jQvQeNvJrI12OH 4q0eN06OJKyjMrWVMHAziX6VXMdph3wG4EeF0H0CnbRbv0+8RQDum/EsbASeuLkJ fWgYuBlPm4MDDn8/a7Tc/6lso4D/1UZJjR0xfsqbdzKFWyFoHH3WLEfaBX38Lcaq GHdtxQ9kEANhZtxcq314vI0qH+0H5NbuEpt744/LqmwH4U/JzwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDOQLWanPovBuf2Ny09+trUpsBRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzVmOWQ5N2MtZTQ4ZC0z ZGQ0LTk1YmUtZTgxOTZlN2I0NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCxIwh2iHr3DYWAuK89HlPLi+PTzbEePd9DhdKa m3bnfGU+B5g2W8+b5qRv6vjdL1C7QoCf5Ll2k5jvpMTdzdVXy73j11hI7/IG/BTa TvNIdcUjlKnAtM9mjjxBXfvu+7JnnCrCai9VQeZMbC6TgrPaMZMwjaFUzhdsESJu mExAPXg84L1d9wde7AIZzQPkncNr7vOzpsUcReUSKBKVk3sWvj0hogMdwiYHMJ7Q vHnE+cVbZ9FQLGSBtEsm8TytTfAaU6I3Xdsf7UmzElue+WAGeRurjxb4ZNGKvvjG mxBic4alNAF10ZsjT3OcmALYuDp+rWBbQW4cwmj+rcVn89v+ -----END CERTIFICATE-----Generated at Sat Apr 12 01:58:06 2025 by rpki-client