$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa File: 451b289c-43de-3e80-bb28-59eca9431a1b.roa (raw, json) Hash identifier: 8T0ww2lB0TCOduEBYkeZlEbm1VdcgPCGmFCZszyxBMI= Subject key identifier: E4:6C:9B:66:9C:4F:0D:A4:A4:97:6B:9F:E9:49:28:D2:CD:05:B8:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584917DC173913D5511B7EE21DC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 20172 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:17:39:13:d5:51:1b:7e:e2:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=c24e71c1-d3c1-4b59-862b-c51fd8839791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7f:b4:7e:af:6c:3f:7a:04:c9:91:97:d6:6b: b3:44:18:ea:93:57:86:5e:63:cd:d7:b1:19:4e:eb: 49:de:3b:8b:cc:97:66:64:ac:8e:c0:b1:f2:26:b3: b6:a1:be:7c:7f:92:69:9c:ae:a7:00:84:71:57:80: 1c:9a:26:c7:e5:83:fd:39:0b:8a:9b:2c:17:e7:07: 75:7f:01:86:f9:4a:73:01:c6:d9:c9:5b:c9:fd:fa: d1:cf:70:77:79:d1:f3:d2:36:23:7b:17:a0:98:e5: 24:68:85:c0:82:c0:d4:76:fd:be:8f:65:8b:d8:fe: db:ab:80:a9:e8:98:3a:b7:3b:1d:44:13:03:55:76: 29:3e:fd:47:19:99:02:db:f4:c2:58:ed:0d:a5:c9: eb:c2:49:30:86:07:51:0c:30:89:84:2b:10:d6:61: f2:43:f7:80:02:10:3f:8d:0f:de:de:a2:38:1d:1e: 51:aa:5d:af:34:78:60:5d:ed:88:2c:7f:cf:44:a3: 7f:b8:b9:12:3f:2c:bb:6a:32:3c:1f:a3:cf:df:1f: 96:e7:f3:2c:00:f4:33:91:7b:da:72:42:e2:e9:e3: 7e:98:37:e2:0c:e7:a2:40:0a:25:87:7c:95:be:2d: 1d:13:eb:28:e4:e6:0d:f6:da:2a:9f:00:46:c1:15: 79:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6C:9B:66:9C:4F:0D:A4:A4:97:6B:9F:E9:49:28:D2:CD:05:B8:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/451b289c-43de-3e80-bb28-59eca9431a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:87:de:54:ad:be:0f:eb:9a:13:f1:46:f6:92:37:f8:64:6e: cc:cd:4f:4b:ba:1f:11:25:33:93:c5:24:01:94:7c:d7:e9:5d: 4d:e0:5f:22:a4:4c:b8:d2:9d:c5:ef:32:ee:6a:b9:88:15:fb: b0:13:e7:39:f8:fb:51:3d:ec:94:5e:ac:ec:cd:a6:38:94:65: 58:e2:42:65:ea:d1:c0:01:26:3b:c0:b4:dd:b5:ae:f8:cd:db: 7c:48:22:46:1b:34:30:87:fc:f0:3c:b9:98:63:4f:e0:c0:a1: 0d:eb:09:03:af:56:b9:19:87:13:67:63:86:b2:63:a2:2d:e1: c5:dd:13:ca:25:6f:00:73:16:99:1a:1a:a8:67:f6:5e:97:f2: 61:61:9c:46:35:b9:0a:89:ec:76:d5:1d:67:19:73:7e:53:99: f9:bf:5e:81:bf:49:e4:55:04:01:ff:44:97:f6:d2:d7:1b:79: 21:27:e3:43:be:83:05:e2:db:ae:7c:0e:1c:85:67:a5:70:81: 19:d4:57:64:ec:7f:41:12:81:5b:f8:cf:86:12:fc:ec:18:31: 89:d5:2d:ec:92:b6:fb:28:96:8a:d1:fa:dc:b0:8f:73:98:61: ed:44:5b:b9:ab:a3:f7:f9:6f:78:fb:df:00:24:f0:12:02:a7: 9b:f1:c6:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3Bc5E9VRG37iHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk YzI0ZTcxYzEtZDNjMS00YjU5LTg2MmItYzUxZmQ4ODM5NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX+0fq9sP3oEyZGX1muzRBjqk1eGXmPN17EZ TutJ3juLzJdmZKyOwLHyJrO2ob58f5JpnK6nAIRxV4AcmibH5YP9OQuKmywX5wd1 fwGG+UpzAcbZyVvJ/frRz3B3edHz0jYjexegmOUkaIXAgsDUdv2+j2WL2P7bq4Cp 6Jg6tzsdRBMDVXYpPv1HGZkC2/TCWO0NpcnrwkkwhgdRDDCJhCsQ1mHyQ/eAAhA/ jQ/e3qI4HR5Rql2vNHhgXe2ILH/PRKN/uLkSPyy7ajI8H6PP3x+W5/MsAPQzkXva ckLi6eN+mDfiDOeiQAolh3yVvi0dE+so5OYN9toqnwBGwRV5awIDAQABo4IDYjCC A14wHQYDVR0OBBYEFORsm2acTw2kpJdrn+lJKNLNBbivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDUxYjI4OWMtNDNkZS0z ZTgwLWJiMjgtNTllY2E5NDMxYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCrh95Urb4P65oT8Ub2kjf4ZG7MzU9Luh8RJTOT xSQBlHzX6V1N4F8ipEy40p3F7zLuarmIFfuwE+c5+PtRPeyUXqzszaY4lGVY4kJl 6tHAASY7wLTdta74zdt8SCJGGzQwh/zwPLmYY0/gwKEN6wkDr1a5GYcTZ2OGsmOi LeHF3RPKJW8AcxaZGhqoZ/Zel/JhYZxGNbkKiex21R1nGXN+U5n5v16Bv0nkVQQB /0SX9tLXG3khJ+NDvoMF4tuufA4chWelcIEZ1Fdk7H9BEoFb+M+GEvzsGDGJ1S3s krb7KJaK0frcsI9zmGHtRFu5q6P3+W94+98AJPASAqeb8cZ5 -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:05 2025 by rpki-client