$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa File: d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa (raw, json) Hash identifier: iKOyxaMoN9D4OUz4KBw7IUq/b3SL8sgTv2AXJ8jb2d0= Subject key identifier: 30:08:CE:76:39:99:AD:4C:19:61:E8:74:45:AA:9B:95:C3:72:22:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858497DA464873CEAC67D901C21D0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 396551 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:64:87:3c:ea:c6:7d:90:1c:21:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=c081763d-7f22-401a-a028-1629f451e984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3e:b7:2f:c3:8f:24:e2:65:a0:da:cf:4d:c4: 13:d4:ce:2d:ae:1c:ab:cc:28:0b:d0:b1:4e:47:1d: 4e:4f:d9:ef:1a:ac:bf:0b:04:b7:56:ce:b4:98:57: d6:e1:42:d0:de:a0:c1:1e:e3:e2:56:aa:2a:4c:3b: 6e:52:43:a2:76:1e:42:a4:34:74:30:85:8b:70:6d: bc:fd:d1:42:ac:a4:f5:7e:ab:f7:e9:9a:24:53:b3: 1e:81:a4:d1:8a:bd:6e:a2:d6:4a:ff:18:a8:e8:53: 55:8e:b1:ab:a5:63:73:42:ba:4f:39:cc:0d:5f:71: c1:59:c9:c6:21:60:7c:0c:ce:66:6d:5e:5a:10:50: b9:6e:55:30:3b:dc:18:5d:1c:1c:a2:0a:dd:20:76: ba:00:99:7c:7c:60:d8:aa:bf:6c:b7:0a:2c:0e:83: 44:63:fb:ec:d1:be:1e:a0:4a:a5:0f:21:8d:d1:15: 6c:05:36:3d:ab:02:05:0d:91:24:49:f2:05:3d:c2: 2c:a9:03:fb:84:1a:36:4b:22:3f:a4:df:ac:e1:e6: 43:5b:76:28:57:b9:3a:d5:a5:b1:2a:91:1c:09:12: ca:7a:71:3c:57:48:83:9d:88:f2:cb:97:43:00:94: 11:ae:99:21:a0:ab:6c:fb:d0:c3:6a:48:11:30:b8: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:08:CE:76:39:99:AD:4C:19:61:E8:74:45:AA:9B:95:C3:72:22:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:9f:95:89:17:fd:19:43:23:0f:24:e4:49:bc:0b:39:8c:f9: 39:de:c4:c1:dc:c4:9e:ff:7b:9f:34:bb:c3:b0:84:76:1f:fd: 24:de:b8:8e:86:2e:2b:07:23:f0:37:54:b5:45:67:a8:2e:65: d4:90:aa:87:ae:c0:4f:cd:25:48:a4:98:33:a3:1d:a8:31:8f: 76:c3:02:10:33:d6:dd:a6:d9:6f:d5:c0:72:d6:5a:5e:d6:b1: 51:5e:f8:13:6f:44:2a:fc:a1:f6:61:09:ca:eb:cb:b1:ad:d1: 09:04:0d:c9:cf:46:2a:e8:4b:3e:94:23:33:86:9a:d5:d7:a9: 93:53:9c:86:7f:36:22:dd:a3:11:93:73:56:b8:ae:3c:26:34: 22:f2:85:4a:9f:ab:18:5f:41:9e:44:06:13:b8:7f:63:d0:dc: af:0e:ba:8c:ef:e2:9e:25:c5:30:ce:38:7f:17:eb:68:ad:b0: 40:ab:fa:7d:f3:d8:32:98:d1:32:63:08:41:63:ae:19:2d:ee: 7b:d5:6d:be:45:c9:55:65:ff:c7:c9:8f:0a:e3:e8:dc:7e:57: 6c:4e:1e:52:d0:75:ff:db:ae:03:43:4a:8c:e5:da:d0:76:fe: be:a0:aa:c0:c6:2a:19:da:42:5e:94:f1:a7:9e:e3:75:e8:b1: f5:20:25:37 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl9pGSHPOrGfZAcIdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk YzA4MTc2M2QtN2YyMi00MDFhLWEwMjgtMTYyOWY0NTFlOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z63L8OPJOJloNrPTcQT1M4trhyrzCgL0LFO Rx1OT9nvGqy/CwS3Vs60mFfW4ULQ3qDBHuPiVqoqTDtuUkOidh5CpDR0MIWLcG28 /dFCrKT1fqv36ZokU7MegaTRir1uotZK/xio6FNVjrGrpWNzQrpPOcwNX3HBWcnG IWB8DM5mbV5aEFC5blUwO9wYXRwcogrdIHa6AJl8fGDYqr9stwosDoNEY/vs0b4e oEqlDyGN0RVsBTY9qwIFDZEkSfIFPcIsqQP7hBo2SyI/pN+s4eZDW3YoV7k61aWx KpEcCRLKenE8V0iDnYjyy5dDAJQRrpkhoKts+9DDakgRMLh7YwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDAIznY5ma1MGWHodEWqm5XDciJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDVlMThlNWEtYzZkYS0z Mzc0LTgzZGUtY2VhN2M4Y2M4Y2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANn5WJF/0ZQyMPJORJvAs5jPk53sTB3MSe/3uf NLvDsIR2H/0k3riOhi4rByPwN1S1RWeoLmXUkKqHrsBPzSVIpJgzox2oMY92wwIQ M9bdptlv1cBy1lpe1rFRXvgTb0Qq/KH2YQnK68uxrdEJBA3Jz0Yq6Es+lCMzhprV 16mTU5yGfzYi3aMRk3NWuK48JjQi8oVKn6sYX0GeRAYTuH9j0NyvDrqM7+KeJcUw zjh/F+torbBAq/p989gymNEyYwhBY64ZLe571W2+RclVZf/HyY8K4+jcfldsTh5S 0HX/264DQ0qM5drQdv6+oKrAxioZ2kJelPGnnuN16LH1ICU3 -----END CERTIFICATE-----Generated at Sat Apr 12 00:07:14 2025 by rpki-client