$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56e422a-4345-38f3-8b36-6078ac2d148b.roa File: d56e422a-4345-38f3-8b36-6078ac2d148b.roa (raw, json) Hash identifier: 85rNqlmCEHx+20QPhgrX+yaQZq2McZ4vw7QpqUph5BU= Subject key identifier: 61:C2:8A:EE:4D:69:64:75:5B:77:4A:7A:33:94:6F:1D:DD:30:5C:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584917DC190D7D0E431402D1B300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56e422a-4345-38f3-8b36-6078ac2d148b.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 396593 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:19:0d:7d:0e:43:14:02:d1:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=fe4fe6f1-e718-4039-b5e0-d9918be7e019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:8e:fd:c9:77:a0:f7:c5:00:54:20:c8:40: 32:12:3b:00:e6:88:b7:b7:7d:ef:e6:5e:1b:5d:93: 08:b7:d3:bc:68:02:52:8d:d4:10:17:ce:68:20:bd: bf:40:44:1a:45:14:4c:3b:22:fa:5b:f6:3c:9e:cb: dc:dd:e0:80:2a:e0:bd:bb:69:b2:f1:10:40:eb:60: 9a:8a:1d:ba:1a:15:ad:9f:b9:5f:d6:ee:24:81:e8: f2:ef:69:fd:2c:98:42:4b:87:d1:71:15:35:90:76: f3:97:d3:dc:8e:ce:2b:cc:47:fe:08:c0:f2:73:8f: 92:c1:12:1e:a9:c8:ca:5f:ba:79:49:ae:8c:0b:e3: db:26:c7:9b:ab:6e:9d:14:16:ea:54:d6:8a:23:d5: 55:41:92:aa:16:db:3b:d8:7e:96:d5:11:89:4c:84: 8c:42:85:65:ae:a9:1b:9d:be:b8:5b:cd:31:34:e5: 8b:a2:d2:1d:a7:00:b7:d1:95:e8:2f:fa:25:94:e8: 79:9e:9b:4f:55:55:d9:c5:67:e5:54:81:a0:70:5b: 69:b3:fe:fd:e5:fa:b8:24:57:5f:c5:66:88:9b:ee: dd:b8:2b:0f:c5:bb:c5:08:d9:16:3d:5b:22:b7:83: d0:f2:89:e3:12:62:37:6c:2f:a6:1b:f0:49:48:aa: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C2:8A:EE:4D:69:64:75:5B:77:4A:7A:33:94:6F:1D:DD:30:5C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56e422a-4345-38f3-8b36-6078ac2d148b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:e9:f6:a2:f9:04:bd:6a:ef:4d:8d:4d:1f:b3:21:42:fa:0c: 99:75:f9:cb:b0:ae:81:96:15:6c:5d:e0:11:c6:c6:9d:01:0d: 65:d3:37:10:ab:5f:82:b3:82:b6:19:c4:68:03:63:a3:f8:0a: 28:26:01:38:6e:7f:55:be:4b:d8:d0:4f:c5:f2:02:ba:42:82: d2:7a:c9:0d:b5:45:fa:68:ee:2e:ab:a7:4f:40:d9:12:8e:5d: e7:aa:2d:9d:1b:67:78:1e:2e:2e:d1:91:99:d2:3a:5b:f0:55: 52:70:19:13:9d:6d:52:95:72:00:7a:3c:a7:dd:a3:1c:0d:e9: 6f:cc:eb:f6:21:d2:53:79:68:98:e5:8c:e8:a2:0a:1c:77:a1: 69:a6:6f:86:31:70:a3:a0:cc:4c:95:d9:a8:82:4a:96:22:96: 1f:e7:e7:97:b2:e0:cf:ad:62:5e:11:d4:ea:4b:b0:0a:03:05: c8:21:30:95:7a:eb:01:93:0a:72:49:23:f7:0b:cf:53:89:c1: de:b2:41:f5:f1:87:45:20:c7:63:d6:81:77:41:48:b8:dc:92: 97:fc:dc:31:a9:2b:4f:cf:af:8d:76:53:7e:87:22:a1:71:34: 0e:d3:77:22:2d:87:4d:92:c7:fc:99:e0:be:86:31:28:c4:bb: d5:61:ab:a3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BkNfQ5DFALRswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZmU0ZmU2ZjEtZTcxOC00MDM5LWI1ZTAtZDk5MThiZTdlMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPKO/cl3oPfFAFQgyEAyEjsA5oi3t33v5l4b XZMIt9O8aAJSjdQQF85oIL2/QEQaRRRMOyL6W/Y8nsvc3eCAKuC9u2my8RBA62Ca ih26GhWtn7lf1u4kgejy72n9LJhCS4fRcRU1kHbzl9Pcjs4rzEf+CMDyc4+SwRIe qcjKX7p5Sa6MC+PbJsebq26dFBbqVNaKI9VVQZKqFts72H6W1RGJTISMQoVlrqkb nb64W80xNOWLotIdpwC30ZXoL/ollOh5nptPVVXZxWflVIGgcFtps/795fq4JFdf xWaIm+7duCsPxbvFCNkWPVsit4PQ8onjEmI3bC+mG/BJSKrGtQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGHCiu5NaWR1W3dKejOUbx3dMFxfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDU2ZTQyMmEtNDM0NS0z OGYzLThiMzYtNjA3OGFjMmQxNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC66fai+QS9au9NjU0fsyFC+gyZdfnLsK6BlhVs XeARxsadAQ1l0zcQq1+Cs4K2GcRoA2Oj+AooJgE4bn9VvkvY0E/F8gK6QoLSeskN tUX6aO4uq6dPQNkSjl3nqi2dG2d4Hi4u0ZGZ0jpb8FVScBkTnW1SlXIAejyn3aMc DelvzOv2IdJTeWiY5Yzoogocd6Fppm+GMXCjoMxMldmogkqWIpYf5+eXsuDPrWJe EdTqS7AKAwXIITCVeusBkwpySSP3C89TicHeskH18YdFIMdj1oF3QUi43JKX/Nwx qStPz6+NdlN+hyKhcTQO03ciLYdNksf8meC+hjEoxLvVYauj -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:27 2025 by rpki-client