$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa File: 24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa (raw, json) Hash identifier: ezGizfFmchcXLHklGMd9RIUloVKP89DJijL66h0X0Gg= Subject key identifier: 98:8B:6D:D7:30:CD:50:7F:93:B5:E5:08:99:91:CE:88:C7:AE:08:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183F56BBECEADF4E6073A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397198 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:f5:6b:be:ce:ad:f4:e6:07:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=c631ac3f-73d9-45d3-bfde-73cc201dc179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:2a:0b:06:e4:9d:b3:ad:3d:68:07:87:5c: e2:5e:c5:9e:c8:53:07:9c:37:f3:49:76:85:43:34: 48:e8:ca:dd:ed:f8:e3:03:44:dd:09:45:d6:f1:a5: f9:e4:79:45:4b:10:4d:b9:15:64:28:33:7f:e4:ad: 80:81:55:41:ce:68:a7:b6:b3:7f:14:54:e0:f6:2a: 0b:03:e3:0e:7a:8c:90:62:d2:60:e4:d0:51:8c:2c: 61:74:1d:81:c1:0e:6a:01:91:bb:36:a9:3c:80:a4: 9e:4a:d4:ee:3a:d2:05:28:73:89:70:cc:64:47:fb: a0:e1:d0:a6:8b:91:88:a0:05:4e:90:5e:2c:75:fa: 5c:6f:a6:95:e8:30:07:2d:fa:95:e0:c7:1f:f8:98: 14:5e:2e:ed:60:dc:3a:9b:7e:d9:f1:b0:a0:8e:88: 0e:8c:03:58:28:14:0a:3f:c2:a3:41:6f:a8:10:5b: f7:cd:14:4b:f1:7e:e2:8a:60:59:d1:23:c7:ae:a0: 09:05:58:8d:7a:23:01:89:31:88:74:e4:e8:f7:6b: 98:15:85:f9:fd:7d:85:84:5f:29:96:8a:30:83:79: 16:df:f6:cf:47:97:d2:02:d0:10:7a:da:a9:7b:36: af:a7:c4:64:1e:79:02:d5:61:25:9e:72:68:60:7d: 4e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8B:6D:D7:30:CD:50:7F:93:B5:E5:08:99:91:CE:88:C7:AE:08:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:07:fd:04:92:4e:f2:48:87:85:cb:63:09:0e:c0:5f:9b:61: 69:e4:45:33:1d:49:82:f7:1f:1b:9d:57:88:8b:77:7b:3a:ce: a8:6e:79:8e:7b:5e:74:dd:cc:9d:cf:ab:78:89:8b:ab:1d:62: 1a:79:8e:43:8a:c7:19:39:ce:c9:e6:e2:b9:95:34:74:9e:33: 03:c2:fe:59:e1:5a:c2:81:83:62:2c:6d:2b:74:a1:f9:32:92: 5f:d5:19:b1:22:eb:d4:9d:73:f6:2e:09:7f:75:8d:62:12:4b: 55:4d:5e:b3:a6:08:94:aa:2d:94:0d:0f:04:52:e0:c9:f5:bc: aa:62:1a:03:e1:66:02:a2:c8:64:cc:34:18:74:62:d1:3c:8e: f2:55:a5:a9:f1:ba:1a:77:90:cb:ef:8a:21:03:b3:27:ee:02: f0:3f:d6:59:a2:91:32:ca:29:71:bf:09:ea:28:3b:cf:86:b4: 08:2d:5b:5c:ea:2d:98:e8:40:81:8a:c1:13:2d:8f:ac:6f:29: cf:7f:08:7e:be:24:a9:45:ed:82:fb:11:44:14:6a:e5:8f:b0: 73:4b:6a:67:6a:c0:36:96:ce:a2:f1:9f:59:10:27:b9:26:0c: 25:eb:be:df:12:d5:63:a3:0e:ed:79:7f:3f:3e:30:58:6f:7a: b5:8e:c3:41 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg/Vrvs6t9OYHOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YzYzMWFjM2YtNzNkOS00NWQzLWJmZGUtNzNjYzIwMWRjMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK0qCwbknbOtPWgHh1ziXsWeyFMHnDfzSXaF QzRI6Mrd7fjjA0TdCUXW8aX55HlFSxBNuRVkKDN/5K2AgVVBzmintrN/FFTg9ioL A+MOeoyQYtJg5NBRjCxhdB2BwQ5qAZG7Nqk8gKSeStTuOtIFKHOJcMxkR/ug4dCm i5GIoAVOkF4sdfpcb6aV6DAHLfqV4Mcf+JgUXi7tYNw6m37Z8bCgjogOjANYKBQK P8KjQW+oEFv3zRRL8X7iimBZ0SPHrqAJBViNeiMBiTGIdOTo92uYFYX5/X2FhF8p loowg3kW3/bPR5fSAtAQetqpezavp8RkHnkC1WElnnJoYH1OMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJiLbdcwzVB/k7XlCJmRzojHrggFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQwNDdhMzgtNWRkMi0z NGQ3LWE0ZjAtYjdmNWE2YWY5NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAdB/0Ekk7ySIeFy2MJDsBfm2Fp5EUzHUmC9x8b nVeIi3d7Os6obnmOe1503cydz6t4iYurHWIaeY5DiscZOc7J5uK5lTR0njMDwv5Z 4VrCgYNiLG0rdKH5MpJf1RmxIuvUnXP2Lgl/dY1iEktVTV6zpgiUqi2UDQ8EUuDJ 9byqYhoD4WYCoshkzDQYdGLRPI7yVaWp8boad5DL74ohA7Mn7gLwP9ZZopEyyilx vwnqKDvPhrQILVtc6i2Y6ECBisETLY+sbynPfwh+viSpRe2C+xFEFGrlj7BzS2pn asA2ls6i8Z9ZECe5Jgwl677fEtVjow7teX8/PjBYb3q1jsNB -----END CERTIFICATE-----Generated at Mon Apr 28 06:45:56 2025 by rpki-client