$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa File: 499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa (raw, json) Hash identifier: 2Mj7apKrgtjQtSPAdYRGbXhdEIa9eQwwv2EIENJ7NoY= Subject key identifier: 17:30:5E:EF:E0:B0:98:2C:F2:CB:FE:90:6E:CC:8D:10:62:2A:F3:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183C6C05E86F1FF4515F1C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397212 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:c6:c0:5e:86:f1:ff:45:15:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=3c0190b2-218c-4fe4-adc9-72684908a489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:12:36:0e:1d:72:98:b9:50:78:1c:30:81: 4c:9e:08:5e:a1:92:74:d6:a4:e0:4f:df:f3:8b:29: 90:bf:5d:9c:c2:c8:03:b6:70:da:ff:50:ef:81:f2: 07:bb:cc:1d:e8:85:83:8b:f9:12:f0:c0:5b:3e:54: a6:8e:b9:06:e8:3f:4a:c5:a7:f2:61:76:11:24:5d: 76:be:8e:9e:90:ec:73:ba:22:68:3a:1d:c2:4a:31: 16:36:51:e0:3b:88:a0:eb:97:59:9a:a4:62:e9:6f: 31:de:57:dc:bb:96:29:6c:4d:f1:0b:59:0f:5d:dd: 47:c3:43:1e:b4:82:2d:e1:0b:c8:fa:43:37:66:5e: 6f:17:bf:fe:01:69:e1:1f:a5:47:6d:bc:54:af:05: 85:62:e6:5f:11:e0:4d:5a:56:e7:e7:43:5c:bd:a2: 2e:ec:39:95:1d:7b:a5:15:3f:74:a6:d1:a5:bb:94: 4c:45:6f:4d:ff:6c:89:1b:00:35:6b:e7:9d:2a:32: 4f:01:23:c0:c7:21:c0:e0:6a:0d:45:c4:8e:a3:b3: c8:eb:5c:67:9b:f1:b3:17:bd:65:89:86:ad:6c:95: c8:de:5c:56:01:e2:da:75:d0:f4:2f:c5:6a:79:33: a9:4c:48:b3:40:55:5a:10:12:3b:87:db:00:95:1d: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:30:5E:EF:E0:B0:98:2C:F2:CB:FE:90:6E:CC:8D:10:62:2A:F3:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:5b:b5:b4:1b:53:56:e7:a9:96:42:ef:09:05:f3:96:06:73: a7:a9:f1:67:13:67:1a:9f:8a:f7:2f:1a:bf:be:b0:b4:6f:7e: 2a:63:59:ca:e8:bd:92:03:ce:35:ad:67:9d:ae:90:39:f9:aa: 0e:96:13:59:7a:24:55:76:27:e6:4c:15:ef:9e:61:1b:d5:b2: ff:ec:4c:f0:36:d8:0c:ba:b3:f0:34:26:f8:90:cb:63:76:cd: 02:f8:7d:b6:8a:7c:59:a4:82:d7:0d:b8:1f:73:f9:4b:d4:5b: ba:d0:13:d7:9b:35:06:d0:ee:b3:e3:7d:1b:45:c6:84:91:ac: 40:21:d5:25:b2:ce:17:99:c6:f5:35:11:e7:ac:34:d6:42:86: e7:bc:90:33:11:bd:7b:ff:48:42:64:92:0c:20:40:b3:8c:18: 8c:49:36:5c:ed:50:1c:bc:8a:75:f6:8f:64:a3:92:51:54:d9: 64:4f:e0:53:7a:be:53:2e:ab:c3:5f:0d:07:f3:55:d6:64:93: 8b:cb:57:78:b7:8d:8c:1f:61:ee:68:fb:bb:19:f7:a5:30:63: 88:b2:72:cb:a9:19:e9:db:e9:36:b3:d7:49:85:d6:d2:f8:85: bc:7c:5a:5f:7f:52:6f:cf:1b:05:50:67:ad:5e:5c:d7:35:a1: 20:8c:c4:c0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg8bAXobx/0UV8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk M2MwMTkwYjItMjE4Yy00ZmU0LWFkYzktNzI2ODQ5MDhhNDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIUSNg4dcpi5UHgcMIFMngheoZJ01qTgT9/z iymQv12cwsgDtnDa/1DvgfIHu8wd6IWDi/kS8MBbPlSmjrkG6D9KxafyYXYRJF12 vo6ekOxzuiJoOh3CSjEWNlHgO4ig65dZmqRi6W8x3lfcu5YpbE3xC1kPXd1Hw0Me tIIt4QvI+kM3Zl5vF7/+AWnhH6VHbbxUrwWFYuZfEeBNWlbn50NcvaIu7DmVHXul FT90ptGlu5RMRW9N/2yJGwA1a+edKjJPASPAxyHA4GoNRcSOo7PI61xnm/GzF71l iYatbJXI3lxWAeLaddD0L8VqeTOpTEizQFVaEBI7h9sAlR21vQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBcwXu/gsJgs8sv+kG7MjRBiKvOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDk5ZmNhN2UtMzZlYy0z N2YxLWEwMmMtMWJhNTcxMGM3OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCsW7W0G1NW56mWQu8JBfOWBnOnqfFnE2can4r3 Lxq/vrC0b34qY1nK6L2SA841rWedrpA5+aoOlhNZeiRVdifmTBXvnmEb1bL/7Ezw NtgMurPwNCb4kMtjds0C+H22inxZpILXDbgfc/lL1Fu60BPXmzUG0O6z430bRcaE kaxAIdUlss4Xmcb1NRHnrDTWQobnvJAzEb17/0hCZJIMIECzjBiMSTZc7VAcvIp1 9o9ko5JRVNlkT+BTer5TLqvDXw0H81XWZJOLy1d4t42MH2HuaPu7GfelMGOIsnLL qRnp2+k2s9dJhdbS+IW8fFpff1JvzxsFUGetXlzXNaEgjMTA -----END CERTIFICATE-----Generated at Sun Apr 27 11:24:00 2025 by rpki-client