$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa File: 21aa4f37-1aef-3131-91eb-374125dffe2b.roa (raw, json) Hash identifier: EqD5LyzvPaR0fpiNRG72RvTcr1YW2oxPEtrDdwZqcIs= Subject key identifier: 26:C5:8C:26:2F:34:B3:6E:FB:20:83:71:99:9B:36:9F:9C:47:46:3F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183F010C775B61975F05800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396617 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:f0:10:c7:75:b6:19:75:f0:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=336ecc49-51e3-407d-8359-09a2b089d611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:b3:02:70:48:51:8e:2c:f8:47:29:a5:95: b5:a8:ff:2a:44:e3:a9:b3:da:fb:7d:18:56:21:8d: e1:5d:aa:19:51:69:dd:69:fe:fe:35:4f:ac:3c:71: 32:2d:c7:66:92:95:f1:c5:7e:3f:eb:74:cc:0e:99: 72:14:e2:b9:4b:57:5a:f4:bc:76:d0:10:8f:04:85: c7:b9:2e:40:72:d7:98:c6:bf:39:9e:06:1a:9c:18: 59:86:b0:bf:d3:b6:a9:d1:ea:6d:57:7c:3f:ec:f6: cb:fd:aa:0a:b9:3f:a9:8f:1a:53:ea:39:a6:df:f3: a6:d9:9a:f5:36:53:0e:58:2f:19:d6:dc:aa:a5:cf: f2:f5:e9:1d:d9:91:51:50:4f:59:66:e4:2f:53:83: 6d:3f:cf:b0:16:bb:eb:94:15:39:03:6d:7a:f6:e3: 18:55:8a:a1:67:1c:39:7c:35:17:10:e4:7a:5c:22: d1:85:57:c0:0f:fc:62:26:b0:99:5f:63:68:8e:f1: 44:48:5b:31:14:49:53:98:52:e0:51:60:06:93:ea: 0b:ac:f7:d6:cf:28:07:df:55:f3:31:b4:f4:f0:77: d5:57:26:1d:64:e0:4f:b6:ad:b6:37:0d:f6:f1:c9: de:f2:00:a4:b6:02:bb:a4:8e:de:9a:1e:bb:d4:51: 1a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C5:8C:26:2F:34:B3:6E:FB:20:83:71:99:9B:36:9F:9C:47:46:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2c:a4:f1:1e:43:da:ea:ff:db:9f:5d:13:b1:89:c6:5d:7a: 52:df:d2:c2:d4:e6:82:60:e2:83:d5:b5:02:2d:3a:74:2b:b8: e2:56:d9:ce:d0:bb:ab:ad:98:b9:22:68:f0:4d:d6:85:bd:fc: 14:ac:bb:14:9d:90:1e:b7:5b:56:d7:0c:38:7b:5a:a9:8c:eb: 3b:cf:9d:8b:2c:14:f2:97:44:e7:ca:3e:79:db:d1:a6:da:24: 61:e2:03:29:a0:70:f5:b2:af:80:eb:aa:6f:91:29:32:ec:2f: 57:d5:2a:d1:54:4a:05:62:b7:bc:91:63:ee:bf:8e:52:5b:d3: 20:2c:df:cb:1f:db:41:d1:cf:91:ef:04:60:6c:e4:de:17:bd: 4d:4f:4c:90:d3:0c:32:53:62:03:27:ed:24:ff:a9:32:f9:90: c3:8a:31:22:00:4a:10:87:3f:7a:e7:4b:31:f8:ed:32:8c:b9: 4b:65:cd:69:2a:bf:c5:fd:94:20:25:d2:74:14:e3:63:24:0d: 6e:e4:18:5f:fc:fc:c5:11:75:cd:78:28:78:b8:eb:95:51:fb: be:9d:dd:07:19:de:ff:05:7a:e9:70:f3:dd:08:65:7a:91:83: 1b:1b:73:8b:e4:99:b2:02:cd:65:54:ca:19:ba:f7:96:d2:9f: 0e:ec:4f:8d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg/AQx3W2GXXwWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk MzM2ZWNjNDktNTFlMy00MDdkLTgzNTktMDlhMmIwODlkNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtWzAnBIUY4s+EcppZW1qP8qROOps9r7fRhW IY3hXaoZUWndaf7+NU+sPHEyLcdmkpXxxX4/63TMDplyFOK5S1da9Lx20BCPBIXH uS5ActeYxr85ngYanBhZhrC/07ap0eptV3w/7PbL/aoKuT+pjxpT6jmm3/Om2Zr1 NlMOWC8Z1tyqpc/y9ekd2ZFRUE9ZZuQvU4NtP8+wFrvrlBU5A2169uMYVYqhZxw5 fDUXEOR6XCLRhVfAD/xiJrCZX2NojvFESFsxFElTmFLgUWAGk+oLrPfWzygH31Xz MbT08HfVVyYdZOBPtq22Nw328cne8gCktgK7pI7emh671FEaJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCbFjCYvNLNu+yCDcZmbNp+cR0Y/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFhYTRmMzctMWFlZi0z MTMxLTkxZWItMzc0MTI1ZGZmZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBILKTxHkPa6v/bn10TsYnGXXpS39LC1OaCYOKD 1bUCLTp0K7jiVtnO0LurrZi5ImjwTdaFvfwUrLsUnZAet1tW1ww4e1qpjOs7z52L LBTyl0Tnyj5529Gm2iRh4gMpoHD1sq+A66pvkSky7C9X1SrRVEoFYre8kWPuv45S W9MgLN/LH9tB0c+R7wRgbOTeF71NT0yQ0wwyU2IDJ+0k/6ky+ZDDijEiAEoQhz96 50sx+O0yjLlLZc1pKr/F/ZQgJdJ0FONjJA1u5Bhf/PzFEXXNeCh4uOuVUfu+nd0H Gd7/BXrpcPPdCGV6kYMbG3OL5JmyAs1lVMoZuveW0p8O7E+N -----END CERTIFICATE-----Generated at Mon Apr 28 02:50:35 2025 by rpki-client