$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa File: 32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa (raw, json) Hash identifier: GJreq+XBz1QLCqbDzEX/iol0fjE+wbEUEEMfcNLzFUM= Subject key identifier: 28:07:DC:53:CB:02:74:9A:A6:BB:E3:93:A0:F1:D5:7F:D1:38:37:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E93420CE7C53D19DBDC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 36628 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:93:42:0c:e7:c5:3d:19:db:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=a0fbc658-bfce-49a0-9632-d9abc4c31632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:35:06:21:16:d5:0b:41:35:59:67:72:f4: 61:35:13:0a:b3:18:9a:33:71:3d:cd:08:76:59:ab: c1:7f:84:e1:9a:5e:38:c1:a6:6b:b6:8f:ac:86:1c: bd:98:cb:41:af:b9:74:8d:9a:ed:3a:c6:24:1b:e8: 04:df:25:92:db:9d:33:42:1c:a6:f9:31:81:a6:c5: 90:d7:c2:fd:9b:33:f0:cc:fe:57:6d:de:81:43:90: 47:c6:15:a1:64:5e:33:3f:d2:3c:47:2a:96:22:03: cf:6d:d8:2f:51:51:34:3c:b9:9b:0b:18:de:29:66: 05:b1:ec:35:28:23:9a:1e:df:41:aa:ef:f7:a0:21: 3c:4a:83:7a:80:cc:71:6e:db:f8:61:9e:f5:8b:43: da:7d:82:c1:66:09:c9:56:10:1e:32:b9:16:9a:dd: 4a:0d:74:54:68:74:ee:74:09:a5:8f:4e:e0:ac:d5: 52:e2:84:5e:a1:3e:35:fe:29:c3:b9:c2:a3:f4:f4: 68:32:02:cd:34:6a:66:70:8b:a1:11:22:8c:63:84: 24:2a:8d:cc:48:ed:41:51:38:b0:3f:1f:c4:30:23: 2f:f1:f4:87:7d:db:ef:fc:52:96:bc:0b:01:43:92: 5c:40:e5:ed:de:88:72:53:55:80:32:e2:b6:5d:38: f8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:07:DC:53:CB:02:74:9A:A6:BB:E3:93:A0:F1:D5:7F:D1:38:37:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d0:7c:42:93:c3:c7:21:55:b0:8b:ba:ec:1f:c9:e2:50:31: 2d:15:5a:e0:72:e2:db:a0:4a:dc:44:34:19:e1:aa:e2:0f:4e: 0f:d0:47:37:d1:0a:b9:db:4a:c1:31:83:37:cb:92:17:49:63: 09:f0:5a:11:e4:3c:d0:ae:d3:d6:0b:fa:d4:5d:98:44:ad:08: d3:b8:1b:77:2b:5a:a1:d5:36:4f:46:8c:ac:42:d8:9f:e0:b7: 62:86:1d:15:59:33:be:8b:2f:51:c9:6e:3b:51:56:50:8b:ff: 34:ac:1f:c3:50:d2:ea:d8:f1:18:fe:ae:9e:68:28:bd:b6:89: dd:98:08:7b:e5:e7:d1:ca:fd:bd:10:e3:b9:40:62:cc:06:c4: ff:02:ca:48:4b:a3:f3:1c:93:64:51:41:59:6a:2e:5d:a1:f4: 24:50:6f:a2:fd:d8:77:29:8b:f8:8d:a4:4f:6f:c6:40:af:6c: f8:ec:6a:88:7f:4f:59:ff:72:a2:10:cc:17:97:2c:71:b7:99: 55:fd:45:7c:c3:b2:9e:de:1e:7d:c2:5e:96:25:3b:5f:1b:fc: 43:3d:76:4d:d2:cd:2c:06:2e:18:0c:52:fc:25:21:db:0e:fd: ed:ea:c8:a2:2d:18:87:e8:14:7a:34:e3:4d:49:87:81:bb:02: d1:e1:79:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpNCDOfFPRnb3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YTBmYmM2NTgtYmZjZS00OWEwLTk2MzItZDlhYmM0YzMxNjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf01BiEW1QtBNVlncvRhNRMKsxiaM3E9zQh2 WavBf4Thml44waZrto+shhy9mMtBr7l0jZrtOsYkG+gE3yWS250zQhym+TGBpsWQ 18L9mzPwzP5Xbd6BQ5BHxhWhZF4zP9I8RyqWIgPPbdgvUVE0PLmbCxjeKWYFsew1 KCOaHt9Bqu/3oCE8SoN6gMxxbtv4YZ71i0PafYLBZgnJVhAeMrkWmt1KDXRUaHTu dAmlj07grNVS4oReoT41/inDucKj9PRoMgLNNGpmcIuhESKMY4QkKo3MSO1BUTiw Px/EMCMv8fSHfdvv/FKWvAsBQ5JcQOXt3ohyU1WAMuK2XTj4nQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCgH3FPLAnSaprvjk6Dx1X/RODfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJlM2QyYTktY2IyOS0z MzczLWJkYmUtNDQxOWM2OGZhNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJ0HxCk8PHIVWwi7rsH8niUDEtFVrgcuLboErc RDQZ4ariD04P0Ec30Qq520rBMYM3y5IXSWMJ8FoR5DzQrtPWC/rUXZhErQjTuBt3 K1qh1TZPRoysQtif4Ldihh0VWTO+iy9RyW47UVZQi/80rB/DUNLq2PEY/q6eaCi9 tondmAh75efRyv29EOO5QGLMBsT/AspIS6PzHJNkUUFZai5dofQkUG+i/dh3KYv4 jaRPb8ZAr2z47GqIf09Z/3KiEMwXlyxxt5lV/UV8w7Ke3h59wl6WJTtfG/xDPXZN 0s0sBi4YDFL8JSHbDv3t6siiLRiH6BR6NONNSYeBuwLR4Xmt -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:06 2025 by rpki-client