$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07f7986b-6ce2-3795-87cd-d7c367c5da46.roa File: 07f7986b-6ce2-3795-87cd-d7c367c5da46.roa (raw, json) Hash identifier: cyWPujUCs8h5oHPHD3bz6KkyQjxNzOxioOyIPVJ7o50= Subject key identifier: E9:5B:25:97:E6:37:CF:B0:21:FC:23:CA:7D:3A:02:96:1D:AC:19:1B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183DA64E55AE609A0430E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07f7986b-6ce2-3795-87cd-d7c367c5da46.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396827 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:da:64:e5:5a:e6:09:a0:43:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=9852b7ea-afc2-417d-9dc3-a058be3c5eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:99:bf:a5:2a:5e:af:b8:4f:59:32:56:37:e7: f7:d6:6c:ba:5e:78:33:f7:f4:99:12:90:70:f9:5c: d3:fa:d6:4d:ca:b0:35:aa:4b:76:10:39:8f:96:4a: ab:ea:a6:33:51:99:22:a7:98:c7:40:8e:91:9e:f8: 50:14:99:08:46:49:8c:bb:bf:13:64:f4:8e:a3:75: 8a:62:12:ff:39:bc:e9:9c:47:d8:11:9d:0b:79:f8: c7:65:40:b9:1b:6f:9a:8c:42:ea:c3:f2:e4:17:ee: e6:8c:c7:5c:fa:c8:5d:c1:1d:3b:fc:07:4d:27:71: a8:c4:67:38:93:d8:58:3c:6a:d7:23:49:ae:f8:2e: 82:fb:a1:38:97:44:cf:20:83:92:03:69:93:a2:85: 19:27:4d:e5:c4:c0:4f:20:31:89:b1:5a:bc:27:3d: 22:3a:e2:b3:1c:3d:c7:56:e2:7b:41:23:18:ad:c7: 10:15:69:22:d2:67:b2:af:3c:b0:56:b3:1a:8b:df: 54:05:95:f1:8a:f4:b9:d5:25:3e:33:c6:0f:6c:e9: 91:b8:71:50:b2:32:d6:c2:f7:ba:ff:02:e9:86:e8: 96:2d:54:83:34:6c:8f:ca:48:01:7f:a9:3c:20:b3: 8f:22:30:d8:32:2d:a1:c4:ac:78:3e:10:13:bc:a6: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5B:25:97:E6:37:CF:B0:21:FC:23:CA:7D:3A:02:96:1D:AC:19:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07f7986b-6ce2-3795-87cd-d7c367c5da46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:47:89:c0:64:f0:d1:2f:70:f4:5e:cc:e7:a6:bb:ae:a5:2a: 7b:f9:ee:fc:49:13:60:d5:74:31:d4:2d:1a:91:15:df:9a:6b: 82:1e:f8:47:ac:6f:bd:64:7e:0a:24:6f:f6:70:51:c9:29:f4: fc:04:fd:13:2a:96:72:48:10:95:16:8f:3e:f0:4c:60:9e:fa: a2:29:3c:3d:ce:5b:65:9b:70:28:da:54:00:7e:d9:f8:d7:f8: c3:18:09:9f:0b:d5:2e:f7:ab:1d:cb:b5:dd:76:bb:7a:37:4b: 61:54:3d:9a:55:f8:ee:ef:1b:aa:dc:0f:01:19:a0:0e:ed:79: 3c:47:34:8a:ac:f2:6c:1d:0c:41:96:1b:f6:1e:bc:fd:1a:b6: ec:71:d8:c5:3b:e6:81:9c:97:f0:d6:aa:85:78:62:7b:ba:b4: 84:a4:f2:51:be:82:56:a4:0f:7e:f5:c1:38:35:82:78:ae:50: 4d:82:f5:db:08:7f:50:74:26:61:ff:16:64:8a:bb:15:13:9a: f0:cd:c4:ba:a4:3e:3d:63:3c:37:d1:69:6d:01:8d:d3:17:77: 35:40:6d:df:40:b6:ba:40:63:7b:36:67:17:af:95:0d:10:dd: d3:d0:ca:84:58:d9:bf:01:4e:e8:1a:8c:8f:b9:b5:46:f8:5e: dc:4c:fb:3f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg9pk5VrmCaBDDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk OTg1MmI3ZWEtYWZjMi00MTdkLTlkYzMtYTA1OGJlM2M1ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpm/pSper7hPWTJWN+f31my6Xngz9/SZEpBw +VzT+tZNyrA1qkt2EDmPlkqr6qYzUZkip5jHQI6RnvhQFJkIRkmMu78TZPSOo3WK YhL/ObzpnEfYEZ0LefjHZUC5G2+ajELqw/LkF+7mjMdc+shdwR07/AdNJ3GoxGc4 k9hYPGrXI0mu+C6C+6E4l0TPIIOSA2mTooUZJ03lxMBPIDGJsVq8Jz0iOuKzHD3H VuJ7QSMYrccQFWki0meyrzywVrMai99UBZXxivS51SU+M8YPbOmRuHFQsjLWwve6 /wLphuiWLVSDNGyPykgBf6k8ILOPIjDYMi2hxKx4PhATvKapKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOlbJZfmN8+wIfwjyn06ApYdrBkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDdmNzk4NmItNmNlMi0z Nzk1LTg3Y2QtZDdjMzY3YzVkYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCpR4nAZPDRL3D0XsznpruupSp7+e78SRNg1XQx 1C0akRXfmmuCHvhHrG+9ZH4KJG/2cFHJKfT8BP0TKpZySBCVFo8+8ExgnvqiKTw9 zltlm3Ao2lQAftn41/jDGAmfC9Uu96sdy7Xddrt6N0thVD2aVfju7xuq3A8BGaAO 7Xk8RzSKrPJsHQxBlhv2Hrz9GrbscdjFO+aBnJfw1qqFeGJ7urSEpPJRvoJWpA9+ 9cE4NYJ4rlBNgvXbCH9QdCZh/xZkirsVE5rwzcS6pD49Yzw30WltAY3TF3c1QG3f QLa6QGN7NmcXr5UNEN3T0MqEWNm/AU7oGoyPubVG+F7cTPs/ -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:43 2025 by rpki-client