$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db25afb9-9676-3382-8f8d-d56f2762303d.roa File: db25afb9-9676-3382-8f8d-d56f2762303d.roa (raw, json) Hash identifier: CUIWR9DFNKVrbiKc85hWi4S2DRJbMis2+u0X5HhjN78= Subject key identifier: 3B:99:DF:AE:E1:A0:2F:40:19:30:E5:69:49:37:A9:36:68:3F:B1:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E986F79AEA3200B277580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db25afb9-9676-3382-8f8d-d56f2762303d.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396827 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:98:6f:79:ae:a3:20:0b:27:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=4d52f9ec-2c86-4641-b8d7-5c09002df8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:ac:9f:2f:72:45:20:55:4c:44:3d:6c:51: 0a:03:f3:b8:cf:ab:7b:eb:8d:d9:c0:f6:63:ff:5c: ce:9c:1e:44:10:b0:95:c6:ee:11:22:a8:7a:b0:3c: e3:04:82:74:29:9f:99:d2:5d:03:c9:93:d4:a0:9d: af:1c:95:3f:7e:31:f2:1c:4c:47:f9:8a:20:97:c6: 30:da:4a:6c:25:ec:8b:c7:31:cd:f2:4a:40:d5:21: 03:fc:0d:60:6c:bc:d0:7f:65:4e:a1:12:b8:0e:ad: 5e:49:51:1f:45:d9:70:c5:37:70:46:aa:f1:cb:68: 78:ad:85:6f:0f:a5:57:06:6f:d7:6a:8a:27:99:5d: d8:1f:fd:14:26:19:2b:70:ca:86:22:69:f8:c1:14: 88:68:7c:43:07:fa:3b:3a:32:3f:b9:29:b6:f9:09: 67:d7:fa:c8:64:87:c2:7c:12:fc:b3:16:94:03:4b: 7f:b8:ab:37:1b:87:98:42:b2:c5:3a:0c:e3:08:24: 5d:94:e0:cd:21:33:28:a5:0d:14:78:08:a6:58:aa: 8c:7f:95:c8:d6:e4:90:27:f7:be:dd:1f:66:cb:4f: e4:21:92:87:a8:40:b4:e0:9b:50:ee:91:f7:5c:6d: eb:ce:cd:5c:bd:c5:ec:b4:de:d0:02:40:f5:6b:b7: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:99:DF:AE:E1:A0:2F:40:19:30:E5:69:49:37:A9:36:68:3F:B1:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db25afb9-9676-3382-8f8d-d56f2762303d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:73:be:db:cd:fc:84:06:bc:d4:4a:c3:77:cf:bd:7f:c5:35: ad:d3:46:91:ba:2f:e6:81:7a:b0:83:79:f9:f4:a1:43:98:e2: 98:87:ed:d4:ee:d1:ca:5e:69:00:8f:5f:a1:0c:08:be:c8:75: 53:6f:0b:17:21:fd:cc:53:9c:24:76:f5:00:82:f6:b7:a6:c8: 2d:41:19:5e:c7:1f:59:fe:27:b0:76:41:bf:93:72:95:f4:07: e9:ce:ea:ed:ac:ab:2b:c5:85:a1:15:f0:a9:8b:66:3e:46:10: 96:dc:d2:2d:42:0f:96:f7:1c:45:c5:a3:9b:2b:db:1b:9c:ef: fd:2a:5b:e0:1e:2b:ec:54:fd:98:3a:38:0c:75:ab:38:1d:66: 1f:d0:51:96:46:b7:40:f1:20:29:23:91:93:77:16:dc:69:fd: d5:d4:58:2d:f3:f2:99:21:92:04:8d:06:e5:ea:31:46:ba:81: 40:11:11:e7:15:6a:6f:34:21:cd:8e:06:19:c0:23:2c:10:82: b0:3b:44:cd:99:68:dd:87:60:27:06:9e:6b:54:35:4c:4d:ac: a2:e6:f4:10:7f:51:60:e7:c2:f3:2f:01:68:79:d4:53:05:e4: d3:57:c2:bd:13:1e:78:17:fa:29:d4:58:92:00:ed:09:94:1a: ca:9a:b5:c1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTphvea6jIAsndYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NGQ1MmY5ZWMtMmM4Ni00NjQxLWI4ZDctNWMwOTAwMmRmOGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t2sny9yRSBVTEQ9bFEKA/O4z6t7643ZwPZj /1zOnB5EELCVxu4RIqh6sDzjBIJ0KZ+Z0l0DyZPUoJ2vHJU/fjHyHExH+Yogl8Yw 2kpsJeyLxzHN8kpA1SED/A1gbLzQf2VOoRK4Dq1eSVEfRdlwxTdwRqrxy2h4rYVv D6VXBm/XaoonmV3YH/0UJhkrcMqGImn4wRSIaHxDB/o7OjI/uSm2+Qln1/rIZIfC fBL8sxaUA0t/uKs3G4eYQrLFOgzjCCRdlODNITMopQ0UeAimWKqMf5XI1uSQJ/e+ 3R9my0/kIZKHqEC04JtQ7pH3XG3rzs1cvcXstN7QAkD1a7cbMQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDuZ367hoC9AGTDlaUk3qTZoP7GEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGIyNWFmYjktOTY3Ni0z MzgyLThmOGQtZDU2ZjI3NjIzMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvc77bzfyEBrzUSsN3z71/xTWt00aRui/mgXqw g3n59KFDmOKYh+3U7tHKXmkAj1+hDAi+yHVTbwsXIf3MU5wkdvUAgva3psgtQRle xx9Z/iewdkG/k3KV9AfpzurtrKsrxYWhFfCpi2Y+RhCW3NItQg+W9xxFxaObK9sb nO/9KlvgHivsVP2YOjgMdas4HWYf0FGWRrdA8SApI5GTdxbcaf3V1Fgt8/KZIZIE jQbl6jFGuoFAERHnFWpvNCHNjgYZwCMsEIKwO0TNmWjdh2AnBp5rVDVMTayi5vQQ f1Fg58LzLwFoedRTBeTTV8K9Ex54F/op1FiSAO0JlBrKmrXB -----END CERTIFICATE-----Generated at Fri Apr 11 22:35:49 2025 by rpki-client