$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101d61bb-68da-34e5-8892-5c3b03775469.roa File: 101d61bb-68da-34e5-8892-5c3b03775469.roa (raw, json) Hash identifier: Jor+UVghiEW0vMaaqHqFasYMabBHEsAXiLDhfu/sE5g= Subject key identifier: F7:15:AE:98:B7:F6:3A:F1:85:5E:9D:8F:69:3E:F8:F5:88:52:05:86 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183C5A67E5E60FB01200600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101d61bb-68da-34e5-8892-5c3b03775469.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397201 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:c5:a6:7e:5e:60:fb:01:20:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=751b48c6-8a68-4964-9e27-30acc6a3ef7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:f2:35:5f:30:1a:ac:c4:8e:0b:e1:ae:54: 0e:7c:52:4d:be:03:5a:67:4a:98:54:c4:07:0f:89: 79:8d:ff:35:ac:11:b6:77:f8:3d:d4:aa:03:39:b1: c9:49:ac:6d:3c:ca:1a:74:00:5a:7b:0e:24:6f:3c: d2:4f:4b:4a:08:79:b3:2e:f2:c4:10:f8:56:ab:eb: fd:c7:33:af:41:61:62:0c:0d:9c:18:13:f8:54:06: 4b:45:0e:13:15:51:4f:39:bb:65:78:d9:4a:ea:bc: e9:f4:ce:63:1d:c3:b5:72:a1:36:d6:69:07:c1:9c: 41:5d:d2:3c:08:3b:e0:8e:19:6e:5c:71:8f:24:89: 9a:2a:cc:4b:55:a8:da:93:a6:10:ad:25:70:d3:b1: da:d1:57:80:f4:95:23:69:51:71:2d:59:db:28:c4: 28:21:b3:6a:d1:54:d5:d2:f5:6c:b4:55:fe:e8:f0: 81:70:7a:63:26:42:c9:d5:3a:da:67:ea:df:20:4b: 62:bf:e6:0f:5a:19:b8:ab:fb:22:c5:a6:f7:b4:c9: a3:16:88:65:f7:59:c2:4f:23:d5:d9:f2:c7:21:65: cb:59:20:fc:94:70:05:15:55:63:19:e3:cc:00:d9: 06:c6:2c:37:46:61:67:5f:ea:74:e0:cd:51:57:12: 03:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:15:AE:98:B7:F6:3A:F1:85:5E:9D:8F:69:3E:F8:F5:88:52:05:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/101d61bb-68da-34e5-8892-5c3b03775469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:47:18:42:33:09:4f:6e:28:ee:dc:52:25:a7:f5:c8:86:76: ee:74:f5:70:86:09:0c:d7:14:c4:e6:46:01:b1:1b:a5:2c:83: bf:7b:14:fc:7b:67:2e:9b:a2:b7:98:c1:b0:69:ce:38:a8:fc: f4:e8:03:4d:50:11:76:c5:01:c6:fc:d9:87:3d:f1:89:77:23: b5:3d:f4:1e:88:f5:7e:e8:b8:de:99:3a:8b:8b:50:7e:de:a9: 75:75:36:59:41:0c:14:03:ea:85:55:01:24:71:29:41:2d:f0: 10:10:c3:da:0e:36:06:3e:73:54:c0:da:33:a7:8e:3f:88:a9: 91:36:02:ed:b0:17:59:15:58:ef:2f:6a:89:a7:91:d9:33:df: fc:71:aa:a2:f7:71:30:97:69:ba:99:49:c4:bc:03:73:05:95: c7:80:8e:36:c6:89:27:93:a6:ea:a8:c1:90:5b:e1:fb:f3:68: 29:ba:e7:20:35:24:23:ce:ec:3e:7d:ee:11:0d:e3:70:ee:f3: dc:d9:99:e9:41:fa:ef:70:51:06:98:5e:13:83:c3:f9:da:b2: 69:8b:51:07:9f:99:55:bd:a6:37:6c:57:03:75:84:3a:06:87: 3a:16:3e:66:27:fc:38:bf:fa:38:a2:33:fd:28:9c:0d:2e:3a: 33:07:85:39 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg8Wmfl5g+wEgBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk NzUxYjQ4YzYtOGE2OC00OTY0LTllMjctMzBhY2M2YTNlZjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl7yNV8wGqzEjgvhrlQOfFJNvgNaZ0qYVMQH D4l5jf81rBG2d/g91KoDObHJSaxtPMoadABaew4kbzzST0tKCHmzLvLEEPhWq+v9 xzOvQWFiDA2cGBP4VAZLRQ4TFVFPObtleNlK6rzp9M5jHcO1cqE21mkHwZxBXdI8 CDvgjhluXHGPJImaKsxLVajak6YQrSVw07Ha0VeA9JUjaVFxLVnbKMQoIbNq0VTV 0vVstFX+6PCBcHpjJkLJ1TraZ+rfIEtiv+YPWhm4q/sixab3tMmjFohl91nCTyPV 2fLHIWXLWSD8lHAFFVVjGePMANkGxiw3RmFnX+p04M1RVxIDzwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPcVrpi39jrxhV6dj2k++PWIUgWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTAxZDYxYmItNjhkYS0z NGU1LTg4OTItNWMzYjAzNzc1NDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCuRxhCMwlPbiju3FIlp/XIhnbudPVwhgkM1xTE 5kYBsRulLIO/exT8e2cum6K3mMGwac44qPz06ANNUBF2xQHG/NmHPfGJdyO1PfQe iPV+6LjemTqLi1B+3ql1dTZZQQwUA+qFVQEkcSlBLfAQEMPaDjYGPnNUwNozp44/ iKmRNgLtsBdZFVjvL2qJp5HZM9/8caqi93Ewl2m6mUnEvANzBZXHgI42xoknk6bq qMGQW+H782gpuucgNSQjzuw+fe4RDeNw7vPc2ZnpQfrvcFEGmF4Tg8P52rJpi1EH n5lVvaY3bFcDdYQ6Boc6Fj5mJ/w4v/o4ojP9KJwNLjozB4U5 -----END CERTIFICATE-----Generated at Sun Apr 27 04:12:38 2025 by rpki-client