$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa File: e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa (raw, json) Hash identifier: 61DWDZx/MBCp+Cs8Rkqe1yf51SecpEoR4aPc0wpK8s8= Subject key identifier: 41:B0:42:75:DA:15:6B:3B:46:E9:9A:78:43:AD:67:4E:B2:1F:C5:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584929E3D933DF9D1D82E5FF1680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 396594 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:d9:33:df:9d:1d:82:e5:ff:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=50c47213-0a89-4ab7-a037-52153066030a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:20:43:e8:98:37:f3:fc:d6:86:4d:c6:3b: 86:83:e1:63:9a:b7:1c:f3:0f:4b:23:6d:36:4d:4a: 10:cd:33:05:c7:7a:6e:82:9d:13:67:df:e1:44:51: e3:76:3a:b0:0d:d0:3b:b3:52:c4:7c:cb:f3:d4:67: b1:ac:cd:0d:9f:e9:eb:95:f3:bb:e4:39:98:6f:58: ce:85:32:2e:f9:d3:f5:db:e0:6d:37:79:32:c3:51: 93:e7:0f:0a:62:d4:41:ec:03:30:69:2b:44:c8:6f: a8:23:95:fe:c6:ce:88:8a:bf:2d:88:1f:8e:88:f4: 49:46:2c:4d:5d:79:f2:74:e5:05:56:1d:05:c9:f2: aa:ca:3b:a6:09:f8:c7:a5:76:44:14:d4:dc:79:f9: 88:09:53:a8:a5:f3:c9:2f:4f:b4:b9:9a:ba:f6:7f: 9e:89:64:b4:21:e1:fe:6a:65:6f:9f:a4:3a:8b:e2: 5c:c4:3c:fb:a9:c6:7a:16:90:a5:3f:3b:15:44:7d: 81:59:cc:8e:11:89:55:fa:2a:1e:5e:4c:a4:75:95: 11:0b:3d:86:be:a8:c2:60:44:cd:33:60:80:f3:25: a3:cd:73:cc:9d:3b:40:65:aa:c6:3b:ae:23:db:1a: 72:61:4b:03:59:51:75:73:f2:6b:32:41:87:a2:56: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B0:42:75:DA:15:6B:3B:46:E9:9A:78:43:AD:67:4E:B2:1F:C5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5e:86:0d:91:b2:92:7b:bc:60:ec:2f:a8:02:41:89:1c:2b: 2f:9a:87:ce:82:ed:64:ca:04:cd:db:e2:81:ac:f9:ce:40:13: 98:dc:e6:2f:85:c8:93:4c:73:30:e5:76:47:99:93:fe:95:3a: 0b:04:a7:22:c1:c2:34:53:87:6a:1f:0b:e6:3c:ae:35:a1:82: 85:a6:c1:2a:83:8d:36:7c:2f:1e:b9:7b:1f:ba:fd:ae:45:5a: c9:5e:5b:ef:2c:01:49:1e:9f:d1:4c:86:13:aa:c6:9b:56:20: bb:96:83:67:b9:b9:0d:ce:85:dd:d0:ca:85:46:30:68:1d:dd: 57:95:83:55:08:aa:50:72:a2:9d:0e:2f:94:64:5b:9a:48:4e: 09:be:64:af:ec:ca:89:9f:f3:9a:e0:ad:4b:97:e6:63:29:57: 0b:a1:3c:3c:aa:9e:0b:79:34:9d:a0:ea:5d:b9:99:71:85:c0: 35:3a:98:31:d1:6d:7f:d3:2b:9d:c4:62:32:12:10:84:42:ff: f0:14:49:13:3a:d8:19:2f:a8:df:27:5f:e2:01:98:f5:93:f2: e3:df:ca:bd:1e:c1:de:68:a2:c2:bd:57:32:56:88:c4:ad:b7: d1:8f:64:d1:f5:ce:55:54:41:1f:f6:4b:e4:0c:c5:e4:7f:97: 4c:19:dd:27 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49kz350dguX/FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk NTBjNDcyMTMtMGE4OS00YWI3LWEwMzctNTIxNTMwNjYwMzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXcgQ+iYN/P81oZNxjuGg+Fjmrcc8w9LI202 TUoQzTMFx3pugp0TZ9/hRFHjdjqwDdA7s1LEfMvz1GexrM0Nn+nrlfO75DmYb1jO hTIu+dP12+BtN3kyw1GT5w8KYtRB7AMwaStEyG+oI5X+xs6Iir8tiB+OiPRJRixN XXnydOUFVh0FyfKqyjumCfjHpXZEFNTcefmICVOopfPJL0+0uZq69n+eiWS0IeH+ amVvn6Q6i+JcxDz7qcZ6FpClPzsVRH2BWcyOEYlV+ioeXkykdZURCz2GvqjCYETN M2CA8yWjzXPMnTtAZarGO64j2xpyYUsDWVF1c/JrMkGHolajqwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEGwQnXaFWs7RumaeEOtZ06yH8WsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTE5ZjRiOGUtMGVlNC0z OGRlLWE4YWEtMmVlYWU0MTQ1MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBeXoYNkbKSe7xg7C+oAkGJHCsvmofOgu1kygTN 2+KBrPnOQBOY3OYvhciTTHMw5XZHmZP+lToLBKciwcI0U4dqHwvmPK41oYKFpsEq g402fC8euXsfuv2uRVrJXlvvLAFJHp/RTIYTqsabViC7loNnubkNzoXd0MqFRjBo Hd1XlYNVCKpQcqKdDi+UZFuaSE4JvmSv7MqJn/Oa4K1Ll+ZjKVcLoTw8qp4LeTSd oOpduZlxhcA1Opgx0W1/0yudxGIyEhCEQv/wFEkTOtgZL6jfJ1/iAZj1k/Lj38q9 HsHeaKLCvVcyVojErbfRj2TR9c5VVEEf9kvkDMXkf5dMGd0n -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:23 2025 by rpki-client