$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa File: 0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa (raw, json) Hash identifier: gwwxWxrVJXdGl98L+5EmyluYHNu7/Zg597DRk3rz0gA= Subject key identifier: 93:AF:9C:1A:3B:85:54:74:1A:DE:F6:7B:87:C1:CA:B8:59:FE:C4:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E9398A02DFACAFAA92880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 396576 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:93:98:a0:2d:fa:ca:fa:a9:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=9a324dd9-c72e-4287-9ec5-a4cc7a24b4bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:8f:58:dd:77:86:17:89:b7:9e:3e:22:f4: 2a:d2:ed:69:d4:e9:26:fc:25:13:f4:d2:a8:0a:79: 20:f0:88:5c:47:9e:13:bc:03:15:20:b2:89:71:65: e3:cf:81:81:f3:19:85:ba:d1:e4:92:58:27:6a:c9: a9:ea:b6:0d:12:f5:92:b6:10:a0:01:7b:c0:3d:07: 5b:cf:da:d1:23:fb:bf:6e:b9:1c:dd:e5:b9:03:8b: 01:8f:65:a8:96:b5:e2:59:d9:b9:32:1b:d9:fa:68: 9e:a5:3a:18:e2:2e:d0:ad:55:5a:20:53:cf:d7:eb: 4a:5d:9f:e9:73:9d:13:d9:6f:a5:93:a3:c9:aa:48: 1b:bd:92:30:e0:81:81:b1:0f:44:7a:da:a9:8d:0b: 67:5d:31:15:f4:07:56:fe:98:64:70:6a:bc:6a:e2: 64:3d:ba:99:c1:a5:92:13:e4:27:da:7b:71:f9:03: 6d:bb:cd:55:ad:ab:69:e5:dd:5f:60:5a:17:21:aa: 0d:bb:9a:0d:54:d9:c4:c7:e9:76:12:ee:58:96:bb: c0:3c:fd:27:0a:a6:98:c9:57:e0:30:2e:2f:51:90: 1f:1b:d3:02:cc:c7:32:14:02:15:f0:90:b6:ff:0a: 9f:56:fc:cc:4b:5e:3c:11:e2:5a:cf:6e:0e:39:07: 19:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:AF:9C:1A:3B:85:54:74:1A:DE:F6:7B:87:C1:CA:B8:59:FE:C4:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b3:0e:02:b1:d7:25:fe:9c:07:bb:c4:ba:ed:84:99:c7:b8: 10:73:b4:d1:97:12:f3:50:6d:b5:b0:c4:11:9e:0a:ce:6f:08: 3e:32:ea:83:ef:7e:f1:7f:e7:21:80:17:d6:b5:de:6c:8f:90: af:04:7f:6a:a4:99:68:f6:d2:d8:32:b9:98:63:a4:ad:77:90: d7:7d:23:92:b7:a1:85:65:80:25:eb:2b:54:65:ab:fa:36:8e: 81:77:2d:e1:07:d2:1b:b8:0c:91:c9:a5:a9:ac:99:e0:47:94: c8:a2:fd:2e:76:47:34:fb:e0:e3:06:63:7f:81:c1:b8:9f:af: 63:0a:7c:9f:7d:2f:29:f7:1b:0f:53:ec:4d:4a:75:7d:17:b8: 56:54:33:11:24:f9:ba:01:11:6f:bb:1d:f4:86:be:18:70:f6: f4:1b:e2:1b:30:41:f6:af:b1:f9:cf:68:6b:56:9b:ac:d3:fb: 22:7e:86:0f:7a:44:0b:a7:0a:5d:93:45:60:50:16:8e:dd:83: 23:20:69:66:d5:43:f8:8f:f4:fe:b8:82:40:ee:97:fe:03:19: 34:10:f1:05:26:3e:37:1c:ed:a2:fb:60:70:53:55:d0:33:11: 31:c6:32:bf:b6:60:b9:ea:40:6a:0b:28:f1:11:31:3f:67:d3: b8:19:39:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5PpOYoC36yvqpKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk OWEzMjRkZDktYzcyZS00Mjg3LTllYzUtYTRjYzdhMjRiNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle2PWN13hheJt54+IvQq0u1p1Okm/CUT9NKo Cnkg8IhcR54TvAMVILKJcWXjz4GB8xmFutHkklgnasmp6rYNEvWSthCgAXvAPQdb z9rRI/u/brkc3eW5A4sBj2WolrXiWdm5MhvZ+miepToY4i7QrVVaIFPP1+tKXZ/p c50T2W+lk6PJqkgbvZIw4IGBsQ9EetqpjQtnXTEV9AdW/phkcGq8auJkPbqZwaWS E+Qn2ntx+QNtu81Vratp5d1fYFoXIaoNu5oNVNnEx+l2Eu5YlrvAPP0nCqaYyVfg MC4vUZAfG9MCzMcyFAIV8JC2/wqfVvzMS148EeJaz24OOQcZGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJOvnBo7hVR0Gt72e4fByrhZ/sStMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGEzNzY5YzctZDgzNS0z MTI2LWE5YzEtYTllMzYzOTVlYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAKsw4Csdcl/pwHu8S67YSZx7gQc7TRlxLzUG21 sMQRngrObwg+MuqD737xf+chgBfWtd5sj5CvBH9qpJlo9tLYMrmYY6Std5DXfSOS t6GFZYAl6ytUZav6No6Bdy3hB9IbuAyRyaWprJngR5TIov0udkc0++DjBmN/gcG4 n69jCnyffS8p9xsPU+xNSnV9F7hWVDMRJPm6ARFvux30hr4YcPb0G+IbMEH2r7H5 z2hrVpus0/sifoYPekQLpwpdk0VgUBaO3YMjIGlm1UP4j/T+uIJA7pf+Axk0EPEF Jj43HO2i+2BwU1XQMxExxjK/tmC56kBqCyjxETE/Z9O4GTlG -----END CERTIFICATE-----Generated at Sun Apr 27 19:45:26 2025 by rpki-client