$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa File: 407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa (raw, json) Hash identifier: mUCzkWa70tzOw7XpfayIyOyyrnaPCUxZtHQOeelhTjI= Subject key identifier: BF:BD:80:AB:C1:85:0F:17:FB:51:86:FD:93:BE:6F:19:0A:63:4B:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E9595424E7D2EC51C3930 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396600 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:95:95:42:4e:7d:2e:c5:1c:39:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=42a55525-c191-497f-b3d7-6dffebde0b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:ef:31:ff:c0:34:6e:7f:3f:dc:c5:58:43: cb:dc:ee:54:36:2f:a0:98:e4:f3:44:0b:d0:7d:91: a7:e0:c3:39:02:cb:f3:c0:09:25:09:6e:25:72:a6: e1:7e:43:6c:01:df:15:93:41:2c:d5:85:58:61:46: 31:bc:d2:13:d9:6c:31:02:27:27:57:25:de:7a:30: de:65:0d:a4:26:26:de:f8:4c:3f:20:4e:99:6a:ad: b2:1d:b3:e7:49:21:ac:67:6c:4e:de:bc:36:cf:b7: 7e:0a:96:65:35:2b:f4:6a:7d:fd:c2:02:ac:fc:d7: c5:79:7c:b6:d4:16:10:0c:2b:b6:87:b0:04:65:39: 56:91:44:91:a1:45:ad:f9:78:b4:e5:fa:da:39:a7: 74:58:f6:01:61:56:92:25:9c:c2:3d:ed:55:62:79: ec:a2:55:af:76:5c:6c:9c:e9:dc:0e:17:dd:45:b4: 9b:46:21:95:95:98:d6:76:2f:b9:16:2c:8c:4c:f9: d4:22:49:22:2d:22:3c:5f:e2:f1:52:af:94:f5:86: 48:a5:b8:ee:2a:2c:84:79:01:80:db:6a:1f:0c:7c: 2d:3c:8d:5c:87:f5:1d:62:b6:03:27:5f:28:2a:73: 05:66:fa:eb:bb:10:db:b0:85:32:8e:9b:95:e3:f3: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BD:80:AB:C1:85:0F:17:FB:51:86:FD:93:BE:6F:19:0A:63:4B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/407bf5f1-b7b5-3a6b-85fb-1bd641fe077b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:da:a4:74:f0:74:bc:06:a3:ae:2b:e5:0e:5d:78:bb:12:22: cc:d7:70:08:f3:f5:29:6c:31:f7:9f:e5:e7:6c:4b:a1:e3:59: 1c:92:a6:af:f7:48:b1:eb:43:57:17:4a:d2:43:60:f2:e9:f6: 06:02:4a:89:46:5f:bb:34:a0:b8:bb:09:d3:7f:2c:97:15:70: 20:1e:79:8f:44:4d:d5:a9:5d:01:bd:d1:e8:93:99:07:ca:c8: 31:73:83:be:dc:37:a0:05:fd:71:f3:02:c2:66:f4:09:a7:bf: e9:c6:4e:e3:df:3e:93:f5:3a:61:62:20:f5:9c:8f:1a:f1:cb: d6:27:6d:fa:06:c1:68:6a:ff:fe:11:91:0a:1e:51:1d:33:e7: af:ca:1c:71:6a:c0:b9:a0:a9:a3:fb:9c:6a:99:31:9f:12:93: 23:2f:63:47:66:f2:a7:44:66:bf:3e:6d:e5:5a:c6:ca:a7:d2: f4:bf:61:8c:e7:5b:ec:5a:a3:fc:3d:6a:69:6d:2e:27:bc:13: b5:33:86:b7:6a:a3:af:5d:23:16:ce:69:d1:f3:c6:9a:3f:c2: f5:5f:aa:a2:5e:f7:8f:dc:b6:3c:c0:a2:67:b6:c6:5a:fb:63: f1:ea:bf:2d:db:4d:40:e1:d4:f7:5d:93:0d:90:6b:f2:cf:96: 09:80:33:fe -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpWVQk59LsUcOTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NDJhNTU1MjUtYzE5MS00OTdmLWIzZDctNmRmZmViZGUwYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhTvMf/ANG5/P9zFWEPL3O5UNi+gmOTzRAvQ fZGn4MM5AsvzwAklCW4lcqbhfkNsAd8Vk0Es1YVYYUYxvNIT2WwxAicnVyXeejDe ZQ2kJibe+Ew/IE6Zaq2yHbPnSSGsZ2xO3rw2z7d+CpZlNSv0an39wgKs/NfFeXy2 1BYQDCu2h7AEZTlWkUSRoUWt+Xi05fraOad0WPYBYVaSJZzCPe1VYnnsolWvdlxs nOncDhfdRbSbRiGVlZjWdi+5FiyMTPnUIkkiLSI8X+LxUq+U9YZIpbjuKiyEeQGA 22ofDHwtPI1ch/UdYrYDJ18oKnMFZvrruxDbsIUyjpuV4/PUQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL+9gKvBhQ8X+1GG/ZO+bxkKY0ulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA3YmY1ZjEtYjdiNS0z YTZiLTg1ZmItMWJkNjQxZmUwNzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBC2qR08HS8BqOuK+UOXXi7EiLM13AI8/UpbDH3 n+XnbEuh41kckqav90ix60NXF0rSQ2Dy6fYGAkqJRl+7NKC4uwnTfyyXFXAgHnmP RE3VqV0BvdHok5kHysgxc4O+3DegBf1x8wLCZvQJp7/pxk7j3z6T9TphYiD1nI8a 8cvWJ236BsFoav/+EZEKHlEdM+evyhxxasC5oKmj+5xqmTGfEpMjL2NHZvKnRGa/ Pm3lWsbKp9L0v2GM51vsWqP8PWppbS4nvBO1M4a3aqOvXSMWzmnR88aaP8L1X6qi XveP3LY8wKJntsZa+2Px6r8t201A4dT3XZMNkGvyz5YJgDP+ -----END CERTIFICATE-----Generated at Sun Apr 27 15:20:39 2025 by rpki-client