$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa File: 4f9d7ff7-5a01-3469-b972-6e43af533947.roa (raw, json) Hash identifier: tqYgLpQlcyr/nvWOMvD+bqRwBRDRAhvOIfmgLSxq7Hc= Subject key identifier: C1:84:19:E8:EF:EA:FB:3A:97:56:44:3F:70:5E:5F:1E:97:25:95:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183E804C907839E776E4440 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 36631 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:e8:04:c9:07:83:9e:77:6e:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=e7f860a5-a86a-4ab1-838f-757d66ebfa1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:82:99:dc:8b:c8:7c:03:e1:ff:b3:5a:21: 03:fe:77:d6:7d:31:4e:cd:29:d4:5c:78:98:c1:6e: e1:55:c9:f4:54:f1:ad:8b:a1:f5:ea:08:ca:b5:18: 0f:1b:b7:c9:97:4c:2f:55:be:f5:e1:09:00:06:8c: 06:9d:73:59:96:e2:df:d3:4c:68:91:85:fe:fa:a6: e0:1f:48:d2:2b:b4:ef:f0:85:19:70:46:c2:24:dd: bd:63:8d:a5:68:3d:80:d0:6e:db:42:f4:81:c4:5c: 60:b4:94:b6:6a:26:87:27:e0:cd:f8:ba:ed:70:37: f7:d4:36:1e:79:38:e8:ee:2c:b2:b8:73:5a:f2:6e: 75:e7:7d:76:e9:d8:9e:59:7e:60:34:3a:89:9f:6d: b9:39:0d:21:c1:d1:59:9d:88:72:e2:cb:ed:ec:d3: c0:b2:24:d5:e3:fd:c0:61:78:02:b7:32:cd:83:b1: 3e:b2:f5:62:3b:aa:2a:4e:4c:e6:c3:e3:17:9f:54: cf:11:de:32:33:10:ba:06:fe:e5:c5:0f:94:90:1a: 8b:56:8c:67:2e:7b:12:ff:8a:be:69:c5:f3:7a:0e: bc:6e:31:c1:e9:c2:16:26:1f:18:a4:01:df:24:ff: 73:80:2b:a9:44:36:e5:9b:22:b8:60:de:17:ee:92: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:19:E8:EF:EA:FB:3A:97:56:44:3F:70:5E:5F:1E:97:25:95:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f9d7ff7-5a01-3469-b972-6e43af533947.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:1e:3b:33:ae:2b:80:b4:38:c6:e0:09:1d:3d:43:0a:d5:6a: ec:87:88:7c:70:8e:73:11:86:60:96:43:f0:de:c5:e6:f5:ee: 41:00:b8:85:f1:06:c9:09:11:15:5e:1e:a3:ac:cb:b8:9f:c5: e7:b8:43:bc:a1:8f:2b:01:aa:c4:b8:6f:db:ec:94:40:9c:3e: e7:7f:92:a9:03:42:b5:b5:68:c5:4d:c6:ef:a6:c7:af:f6:68: ae:61:fe:60:35:12:43:20:7b:8a:e6:fe:2f:94:4d:8e:49:ec: 1d:48:c2:80:08:eb:69:44:3f:89:88:c7:80:d6:7b:c8:99:c2: d7:c2:f4:da:2d:16:cd:30:5a:7f:32:45:4f:88:ad:4e:6f:d0: 4e:ca:3a:13:a0:a7:7d:e6:02:f1:ee:6a:1c:b1:4e:10:ff:01: 7c:fb:6d:1b:16:a3:3e:f2:45:a9:3e:b6:e3:19:50:c4:49:71: 3a:f0:e5:f6:fc:a8:49:a4:e6:36:cd:fb:0b:e8:99:53:51:46: a0:ae:c3:f2:a8:88:43:72:a3:7c:81:5f:de:42:d1:04:16:fe: bf:19:29:8f:3d:34:37:ed:45:38:1f:f6:73:d5:1d:ff:9f:73: c4:26:d4:eb:83:08:2b:84:e1:f6:a7:4c:76:e0:40:93:9d:6d: 2a:35:db:d2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg+gEyQeDnnduREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZTdmODYwYTUtYTg2YS00YWIxLTgzOGYtNzU3ZDY2ZWJmYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIuCmdyLyHwD4f+zWiED/nfWfTFOzSnUXHiY wW7hVcn0VPGti6H16gjKtRgPG7fJl0wvVb714QkABowGnXNZluLf00xokYX++qbg H0jSK7Tv8IUZcEbCJN29Y42laD2A0G7bQvSBxFxgtJS2aiaHJ+DN+LrtcDf31DYe eTjo7iyyuHNa8m5153126dieWX5gNDqJn225OQ0hwdFZnYhy4svt7NPAsiTV4/3A YXgCtzLNg7E+svViO6oqTkzmw+MXn1TPEd4yMxC6Bv7lxQ+UkBqLVoxnLnsS/4q+ acXzeg68bjHB6cIWJh8YpAHfJP9zgCupRDblmyK4YN4X7pLUwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMGEGejv6vs6l1ZEP3BeXx6XJZUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY5ZDdmZjctNWEwMS0z NDY5LWI5NzItNmU0M2FmNTMzOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCqHjszriuAtDjG4AkdPUMK1Wrsh4h8cI5zEYZg lkPw3sXm9e5BALiF8QbJCREVXh6jrMu4n8XnuEO8oY8rAarEuG/b7JRAnD7nf5Kp A0K1tWjFTcbvpsev9miuYf5gNRJDIHuK5v4vlE2OSewdSMKACOtpRD+JiMeA1nvI mcLXwvTaLRbNMFp/MkVPiK1Ob9BOyjoToKd95gLx7mocsU4Q/wF8+20bFqM+8kWp PrbjGVDESXE68OX2/KhJpOY2zfsL6JlTUUagrsPyqIhDcqN8gV/eQtEEFv6/GSmP PTQ37UU4H/Zz1R3/n3PEJtTrgwgrhOH2p0x24ECTnW0qNdvS -----END CERTIFICATE-----Generated at Sun Apr 27 10:40:48 2025 by rpki-client