$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf623a09-779c-32c5-8994-71da847453c8.roa File: bf623a09-779c-32c5-8994-71da847453c8.roa (raw, json) Hash identifier: 9rAiusTaQD/+acZ5YRobZd3A9zqZ8xfAJidhtTnzzG0= Subject key identifier: CA:69:33:08:D2:3E:4C:4E:B2:A9:8C:14:C4:23:E2:22:95:CB:CB:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584917DC16B220CBF128E0C6EE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf623a09-779c-32c5-8994-71da847453c8.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 396568 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:16:b2:20:cb:f1:28:e0:c6:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=5cc23e15-a100-4d26-a78b-e266a8b98881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e3:5b:0c:28:fc:1a:5d:5e:37:cf:d7:6e:fb: 86:08:33:0c:1a:fa:03:d8:5c:f5:ff:4b:d0:d5:30: 7b:f3:bf:1e:b3:38:79:7b:36:0d:32:e0:81:5a:72: 86:da:0c:04:12:29:81:05:b5:65:ed:49:d5:a5:60: a8:e4:1c:75:e3:74:c8:d8:e8:e7:51:72:c5:1e:60: 6b:7e:24:ba:6c:97:c1:61:b5:bb:3b:5a:86:e6:1e: 27:20:73:d7:91:3c:fd:d4:9e:a1:68:84:8e:1d:91: 00:e8:26:49:e4:5b:73:1f:f0:63:13:ee:20:13:8a: 98:48:bf:13:ad:7d:d2:d3:5e:73:02:4f:4a:80:95: 89:2b:2c:43:2a:43:d5:d4:fe:f9:9c:fe:5f:c3:0c: 3f:5c:75:58:40:51:0c:a4:d9:c5:96:17:f5:30:9f: 14:dc:49:1f:03:30:1e:f6:45:f3:8a:cd:1f:69:6c: e3:ff:d7:70:98:5f:64:aa:c9:01:a3:8b:16:e0:41: 3b:fd:07:85:44:65:6e:25:90:22:e5:03:1d:bc:8b: 50:ed:2b:85:ed:09:c7:03:23:f0:82:8f:41:42:4f: 40:d1:88:ca:25:d9:70:dd:36:63:79:b2:02:61:3b: 09:04:25:ea:09:bd:db:72:de:2b:90:74:db:c0:b5: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:69:33:08:D2:3E:4C:4E:B2:A9:8C:14:C4:23:E2:22:95:CB:CB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf623a09-779c-32c5-8994-71da847453c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:68:66:e8:51:c1:39:3c:7b:e7:b1:8d:d9:54:29:e6:c1:1c: ff:26:31:df:67:5e:72:1c:ac:f9:da:09:39:87:71:0d:88:23: 92:1f:bf:58:c4:f6:63:8d:fd:9c:b6:93:11:26:0a:23:6d:ec: a6:3f:a5:69:59:4b:9b:86:03:79:5b:da:01:56:9b:ba:3a:cf: 1d:e9:ae:6b:45:a0:30:7c:f3:6b:48:61:57:7b:93:ed:ac:2c: ed:af:c5:4f:b1:75:24:39:ed:6c:c0:c9:4b:c8:a0:5d:02:fe: 40:a1:97:58:f4:ee:13:97:6c:3c:2f:ce:22:29:05:b1:2a:da: fd:eb:40:df:a7:02:10:94:f0:1d:ca:e3:82:cf:c4:0a:d4:86: 32:c6:56:37:d0:73:e7:ca:32:ed:7e:5b:05:04:e6:52:d8:89: 98:0c:31:c8:45:b3:d2:1a:fe:a0:a1:ea:98:1e:62:aa:e8:ab: 38:69:9e:fa:c8:44:44:75:13:d6:9c:8f:e4:bd:45:1c:30:e8: 0f:15:ed:df:da:61:29:06:f9:45:66:96:94:e5:3b:cd:62:02: 9f:76:53:ce:63:e4:6e:7b:40:fd:d9:a5:4b:d8:b1:35:34:06: fa:e2:34:2d:67:cd:0f:47:50:cc:fb:98:08:33:a0:be:e4:d6: 4a:2c:ce:bc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BayIMvxKODG7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NWNjMjNlMTUtYTEwMC00ZDI2LWE3OGItZTI2NmE4Yjk4ODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+NbDCj8Gl1eN8/XbvuGCDMMGvoD2Fz1/0vQ 1TB7878eszh5ezYNMuCBWnKG2gwEEimBBbVl7UnVpWCo5Bx143TI2OjnUXLFHmBr fiS6bJfBYbW7O1qG5h4nIHPXkTz91J6haISOHZEA6CZJ5FtzH/BjE+4gE4qYSL8T rX3S015zAk9KgJWJKyxDKkPV1P75nP5fwww/XHVYQFEMpNnFlhf1MJ8U3EkfAzAe 9kXzis0faWzj/9dwmF9kqskBo4sW4EE7/QeFRGVuJZAi5QMdvItQ7SuF7QnHAyPw go9BQk9A0YjKJdlw3TZjebICYTsJBCXqCb3bct4rkHTbwLW+9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMppMwjSPkxOsqmMFMQj4iKVy8vYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY2MjNhMDktNzc5Yy0z MmM1LTg5OTQtNzFkYTg0NzQ1M2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCTaGboUcE5PHvnsY3ZVCnmwRz/JjHfZ15yHKz5 2gk5h3ENiCOSH79YxPZjjf2ctpMRJgojbeymP6VpWUubhgN5W9oBVpu6Os8d6a5r RaAwfPNrSGFXe5PtrCztr8VPsXUkOe1swMlLyKBdAv5AoZdY9O4Tl2w8L84iKQWx Ktr960DfpwIQlPAdyuOCz8QK1IYyxlY30HPnyjLtflsFBOZS2ImYDDHIRbPSGv6g oeqYHmKq6Ks4aZ76yEREdRPWnI/kvUUcMOgPFe3f2mEpBvlFZpaU5TvNYgKfdlPO Y+Rue0D92aVL2LE1NAb64jQtZ80PR1DM+5gIM6C+5NZKLM68 -----END CERTIFICATE-----Generated at Sun Apr 27 15:53:58 2025 by rpki-client