$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa File: d345e031-7e87-3977-9aa7-6b7e19f3795e.roa (raw, json) Hash identifier: 1S25nf8pJo9MtgI7/8Lgt5uKTi7wCHXSQh1Z4rMPj3A= Subject key identifier: 20:FD:05:0E:00:B3:92:92:66:71:60:A1:F1:96:03:E4:D5:43:CB:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849403982A8EAFBB0D79A9BEA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 396609 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:82:a8:ea:fb:b0:d7:9a:9b:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=434bed20-038e-4ecf-a4b8-58e5810c9b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:97:2d:8f:2a:91:0e:b3:23:c7:7f:d2:13: a3:1d:33:dc:30:e1:8b:7e:8f:00:96:a5:e4:44:0a: b8:0e:14:64:52:ce:d9:f6:57:92:08:dc:15:82:6e: ae:fa:37:62:ce:16:69:07:35:27:a5:6b:2a:4b:53: 90:03:bb:47:ad:27:1c:7b:d3:83:d2:13:ad:cd:8d: a5:17:7b:d1:33:40:53:0d:6c:ac:8c:ec:61:7d:09: 9e:70:c4:e5:65:91:c5:af:3d:d4:22:74:bf:40:6b: a8:74:e5:92:49:7c:e7:58:e4:cd:65:09:fe:67:6c: f2:5b:29:b5:d7:5a:a0:ee:88:f2:2e:38:e8:a7:93: 97:1b:ae:cb:47:f0:a0:80:7a:99:8b:ad:08:21:26: d9:71:a4:a3:89:e6:6b:b9:85:37:0d:f5:b9:ec:1e: 72:00:db:51:99:8c:f1:d1:ca:c3:9b:c5:72:3d:91: a3:f4:3c:c3:bb:31:ea:a3:21:fd:f8:b6:3b:8f:1d: 4d:68:a7:3a:14:16:fd:b7:91:28:f7:3a:84:45:c4: 8c:ca:1b:c6:23:c7:47:8d:d7:2b:1c:fc:35:53:cc: 90:46:ee:59:ee:92:31:0c:6b:e3:f0:a3:87:21:42: b0:4f:bb:44:a6:9d:8b:b6:a7:37:e3:bd:04:16:72: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FD:05:0E:00:B3:92:92:66:71:60:A1:F1:96:03:E4:D5:43:CB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:04:d6:fc:b1:06:03:14:75:cf:2d:4d:fb:93:9b:98:0e:20: 42:84:de:3e:d9:f0:54:e8:a0:fb:8a:41:b4:92:9e:b8:6c:73: 95:48:75:b5:19:42:31:4c:17:32:5c:70:19:dc:6f:d9:6b:93: f4:1f:76:01:33:67:54:25:1d:fb:9b:2b:23:dd:27:d0:84:cc: 73:93:ed:d8:3b:ec:7e:89:02:7e:7f:48:fd:47:fb:82:3c:30: b7:ab:ea:ce:3e:88:49:75:90:75:15:fb:74:9a:86:3b:0f:c5: 40:a2:2f:17:7b:cd:69:d4:b7:e2:36:7b:99:db:a1:c7:b5:82: bb:cb:b7:a3:74:66:4d:2c:1f:ac:a9:f5:1c:1b:c8:eb:a5:3e: 60:10:b3:80:37:90:1c:12:d7:e7:eb:ff:27:43:3d:90:a6:f0: 7a:49:89:8a:68:d7:6a:9d:cc:e8:58:03:28:32:f9:60:dd:8f: 0e:f5:5f:1e:af:da:c3:67:f4:f5:ec:f0:c8:44:f4:5d:02:4f: 04:f6:33:06:f3:ee:ea:a0:bd:ba:2d:c9:cb:e8:c9:4e:7f:fe: 0d:73:a1:3a:14:63:07:e8:d2:17:81:dd:f2:a2:65:36:b7:b1: 91:4e:c0:c1:76:d1:19:31:7b:ee:2d:42:5d:8f:49:22:fb:ed: a0:7a:f6:9c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYKo6vuw15qb6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NDM0YmVkMjAtMDM4ZS00ZWNmLWE0YjgtNThlNTgxMGM5YjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnSXLY8qkQ6zI8d/0hOjHTPcMOGLfo8AlqXk RAq4DhRkUs7Z9leSCNwVgm6u+jdizhZpBzUnpWsqS1OQA7tHrScce9OD0hOtzY2l F3vRM0BTDWysjOxhfQmecMTlZZHFrz3UInS/QGuodOWSSXznWOTNZQn+Z2zyWym1 11qg7ojyLjjop5OXG67LR/CggHqZi60IISbZcaSjieZruYU3DfW57B5yANtRmYzx 0crDm8VyPZGj9DzDuzHqoyH9+LY7jx1NaKc6FBb9t5Eo9zqERcSMyhvGI8dHjdcr HPw1U8yQRu5Z7pIxDGvj8KOHIUKwT7tEpp2Ltqc3470EFnIPIQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCD9BQ4As5KSZnFgofGWA+TVQ8tpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM0NWUwMzEtN2U4Ny0z OTc3LTlhYTctNmI3ZTE5ZjM3OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBYBNb8sQYDFHXPLU37k5uYDiBChN4+2fBU6KD7 ikG0kp64bHOVSHW1GUIxTBcyXHAZ3G/Za5P0H3YBM2dUJR37mysj3SfQhMxzk+3Y O+x+iQJ+f0j9R/uCPDC3q+rOPohJdZB1Fft0moY7D8VAoi8Xe81p1LfiNnuZ26HH tYK7y7ejdGZNLB+sqfUcG8jrpT5gELOAN5AcEtfn6/8nQz2QpvB6SYmKaNdqnczo WAMoMvlg3Y8O9V8er9rDZ/T17PDIRPRdAk8E9jMG8+7qoL26LcnL6MlOf/4Nc6E6 FGMH6NIXgd3yomU2t7GRTsDBdtEZMXvuLUJdj0ki++2gevac -----END CERTIFICATE-----Generated at Fri Apr 11 22:30:20 2025 by rpki-client