$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d37703-4e05-3cff-93fc-f53fe2ffcb6e.roa File: 10d37703-4e05-3cff-93fc-f53fe2ffcb6e.roa (raw, json) Hash identifier: KuWeT+TqjT/ED3lMxl2qsEtJ3gqyXz3KC0oMbWSr7JM= Subject key identifier: B4:B1:2C:3C:1E:83:63:9A:8F:48:BE:E0:79:B5:96:12:C7:F4:0F:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183F81B25953DD00130C280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d37703-4e05-3cff-93fc-f53fe2ffcb6e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396582 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:f8:1b:25:95:3d:d0:01:30:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=8b0615e6-9a5d-4905-b7ef-99358007fcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:67:1e:80:2b:a7:fe:60:fd:2e:9e:e7:b9: 60:3e:d9:94:3e:2b:73:cd:18:e7:a5:6b:32:28:e3: a9:0d:1d:10:52:7f:84:41:6f:c0:08:ed:40:6f:58: a4:59:4b:2a:2c:73:c4:bd:69:07:01:71:e7:9f:8b: c6:66:25:55:b0:68:c4:3f:fb:df:03:15:2a:15:85: a7:70:1c:aa:e1:f4:e3:59:29:c4:b3:f1:d6:52:47: d0:9d:32:51:f4:de:f0:d6:d6:38:cc:07:99:d8:14: 33:58:72:8d:5c:52:53:fd:d3:15:ee:a7:a2:8f:86: 20:db:86:78:ab:1a:a6:f8:e7:95:8f:ea:0f:84:23: c3:98:a1:13:aa:eb:77:6c:50:7c:12:d6:26:aa:5d: 48:9e:86:88:22:30:9e:03:c0:88:f8:f2:f3:37:bd: bb:f5:20:c8:41:96:53:99:5b:fc:60:27:90:cb:24: 91:af:45:d3:80:c4:b2:a9:90:ae:80:1f:0d:94:39: ce:4c:88:e3:15:40:e4:ce:43:12:99:71:77:e6:4e: 69:25:d8:af:f9:88:46:67:1d:5d:6f:00:47:49:b6: 6b:b5:05:70:5b:6e:cd:69:5c:1d:63:58:33:e1:29: 0a:a1:bd:1a:88:62:3a:91:1e:50:34:51:6b:ec:11: ec:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B1:2C:3C:1E:83:63:9A:8F:48:BE:E0:79:B5:96:12:C7:F4:0F:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d37703-4e05-3cff-93fc-f53fe2ffcb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ef:0d:19:b2:2e:02:32:11:6b:8d:00:92:14:69:aa:99:a6: 5a:9e:e5:ec:49:f0:62:ec:5f:82:32:ac:bb:e8:93:97:32:05: 67:dd:d3:08:63:30:57:df:03:fa:c7:6e:b5:fa:d3:fc:86:6a: ef:df:86:0a:c6:2a:72:e8:7e:2b:9e:40:1b:34:a8:e0:8f:7e: 2e:c2:5b:89:5d:77:c0:79:ea:f1:cc:f0:ea:d8:10:2f:9b:de: 0d:8c:4c:55:5a:f2:9e:cd:78:76:33:89:da:cc:c3:fd:69:05: 69:29:c9:1d:3e:3b:70:b8:d7:e4:5d:e6:a4:2b:02:83:f6:1a: 30:bd:a6:d3:fc:e5:ab:b8:a9:6b:0f:64:62:32:66:5d:eb:02: 89:62:ad:15:52:6c:98:e9:23:4a:e7:d3:76:1e:85:13:a4:ab: b9:76:51:1e:de:2b:e4:be:dd:ab:6a:1c:49:b1:5d:9b:64:5f: 19:c1:80:97:b0:d3:4a:51:53:e6:9a:e5:77:82:9b:bd:b7:e4: 04:cf:94:da:2d:c5:28:bf:06:38:40:2e:a6:13:a9:4a:43:08: 10:da:96:12:fc:d6:a5:16:06:39:ee:e3:42:dc:58:e0:d5:5d: 29:7e:fb:d4:56:5e:2f:f9:b1:bf:f0:f6:66:f0:6a:ae:6f:97: ab:8e:8b:45 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg/gbJZU90AEwwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk OGIwNjE1ZTYtOWE1ZC00OTA1LWI3ZWYtOTkzNTgwMDdmY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreNnHoArp/5g/S6e57lgPtmUPitzzRjnpWsy KOOpDR0QUn+EQW/ACO1Ab1ikWUsqLHPEvWkHAXHnn4vGZiVVsGjEP/vfAxUqFYWn cByq4fTjWSnEs/HWUkfQnTJR9N7w1tY4zAeZ2BQzWHKNXFJT/dMV7qeij4Yg24Z4 qxqm+OeVj+oPhCPDmKETqut3bFB8EtYmql1InoaIIjCeA8CI+PLzN7279SDIQZZT mVv8YCeQyySRr0XTgMSyqZCugB8NlDnOTIjjFUDkzkMSmXF35k5pJdiv+YhGZx1d bwBHSbZrtQVwW27NaVwdY1gz4SkKob0aiGI6kR5QNFFr7BHslwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLSxLDweg2Oaj0i+4Hm1lhLH9A+rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTBkMzc3MDMtNGUwNS0z Y2ZmLTkzZmMtZjUzZmUyZmZjYjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAV7w0Zsi4CMhFrjQCSFGmqmaZanuXsSfBi7F+C Mqy76JOXMgVn3dMIYzBX3wP6x261+tP8hmrv34YKxipy6H4rnkAbNKjgj34uwluJ XXfAeerxzPDq2BAvm94NjExVWvKezXh2M4nazMP9aQVpKckdPjtwuNfkXeakKwKD 9howvabT/OWruKlrD2RiMmZd6wKJYq0VUmyY6SNK59N2HoUTpKu5dlEe3ivkvt2r ahxJsV2bZF8ZwYCXsNNKUVPmmuV3gpu9t+QEz5TaLcUovwY4QC6mE6lKQwgQ2pYS /NalFgY57uNC3Fjg1V0pfvvUVl4v+bG/8PZm8Gqub5erjotF -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:54 2025 by rpki-client