$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa File: ca850840-255f-381a-ba18-ae3ac781c56e.roa (raw, json) Hash identifier: M1Zx9BI/8qjPk/bDaiLRU2/z1JNpzy9D/civ3w1y+s8= Subject key identifier: 44:60:87:A3:1C:CF:B7:8C:15:22:E0:06:12:B4:57:F7:1A:A2:BB:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183C26CD987BF70180EB220 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 397197 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:c2:6c:d9:87:bf:70:18:0e:b2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=e2f275a0-e4a9-448f-b7ab-b87cb9916219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ac:8f:1c:d1:9f:68:9b:8a:c6:4e:d1:75:59: 13:06:51:ff:08:93:af:3c:af:9f:b4:49:4d:a7:b6: a5:53:05:48:b2:0b:40:31:3a:8a:01:e3:47:c6:ad: df:07:73:70:d9:bb:a2:c7:ad:f6:c6:24:48:3c:23: a2:72:92:e5:be:c0:d3:91:8a:68:8c:61:b4:df:f8: ed:45:c7:04:ac:b7:5e:11:99:bd:f4:3d:6b:0e:ff: 76:23:6f:1e:7f:fb:5a:1f:66:ef:56:f0:38:e2:8f: 20:2e:c8:56:bd:29:3b:74:b6:66:cb:44:a0:e0:f7: 31:32:2f:14:79:0b:b6:3d:ee:ec:03:66:2f:0b:9e: 03:ba:65:e4:f6:97:7e:97:6a:7b:cb:28:0f:14:e5: 21:6f:b3:d0:9a:7f:01:ff:a4:9d:a7:d1:9f:fd:fd: 95:a4:48:82:d0:ff:da:79:87:4a:8f:9d:e4:e0:dd: 2d:a1:35:66:76:75:4a:13:f0:e9:dd:d3:71:3a:37: 12:72:d4:f4:d9:2e:11:f0:41:dd:39:83:b6:19:b9: e5:5f:cb:00:de:3f:00:d3:a5:d8:ad:00:7f:0a:f4: b5:c5:39:96:10:ec:a9:29:c0:76:64:c7:6a:71:13: 90:07:68:9e:25:47:36:b2:a5:9c:a3:4e:63:ed:c2: 6a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:60:87:A3:1C:CF:B7:8C:15:22:E0:06:12:B4:57:F7:1A:A2:BB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:59:88:b0:38:56:a3:c8:6a:d5:c0:35:97:ea:0e:a1:8c:2f: cd:7c:b2:33:d1:86:3c:e0:a0:73:86:1d:24:34:b1:2a:54:f0: 07:2c:92:89:a4:c9:db:e3:67:09:93:44:e9:09:40:87:2a:37: 16:ba:b9:c7:81:27:33:9a:57:e3:65:a5:33:30:dd:85:9c:33: 35:dc:44:49:a8:56:30:51:fe:15:39:74:07:fa:c9:3d:8e:a2: ef:5f:41:a6:21:e9:cd:7b:c8:e3:66:a0:30:61:1d:d0:48:fe: a4:73:b4:2f:53:12:77:be:fe:01:a0:d5:8e:e4:28:1c:d0:2f: e1:fd:0d:ca:1b:f9:59:d4:ad:72:97:c4:04:dd:a3:0a:98:06: 1c:9e:a9:b2:46:1d:f5:8c:39:72:86:3b:1e:27:e5:48:d2:5d: bf:c3:06:ea:97:20:72:8e:ac:fc:df:e7:a3:c5:3d:14:50:7f: 3d:c3:a0:70:4b:ba:79:ea:82:5d:e5:73:9d:d6:e7:ea:73:cf: 88:2a:62:1a:0d:a7:41:05:fc:63:69:99:8a:0b:24:57:81:32: 9d:ea:d5:a8:92:2e:0c:d8:9a:70:90:aa:46:07:31:73:21:b3: d9:ab:5a:e0:1f:71:e2:9c:7b:89:9c:ed:c3:35:40:d2:1c:f0: 63:6f:d0:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg8Js2Ye/cBgOsiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZTJmMjc1YTAtZTRhOS00NDhmLWI3YWItYjg3Y2I5OTE2MjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjayPHNGfaJuKxk7RdVkTBlH/CJOvPK+ftElN p7alUwVIsgtAMTqKAeNHxq3fB3Nw2buix632xiRIPCOicpLlvsDTkYpojGG03/jt RccErLdeEZm99D1rDv92I28ef/taH2bvVvA44o8gLshWvSk7dLZmy0Sg4PcxMi8U eQu2Pe7sA2YvC54DumXk9pd+l2p7yygPFOUhb7PQmn8B/6Sdp9Gf/f2VpEiC0P/a eYdKj53k4N0toTVmdnVKE/Dp3dNxOjcSctT02S4R8EHdOYO2GbnlX8sA3j8A06XY rQB/CvS1xTmWEOypKcB2ZMdqcROQB2ieJUc2sqWco05j7cJqEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFERgh6Mcz7eMFSLgBhK0V/caorsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2E4NTA4NDAtMjU1Zi0z ODFhLWJhMTgtYWUzYWM3ODFjNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBrWYiwOFajyGrVwDWX6g6hjC/NfLIz0YY84KBz hh0kNLEqVPAHLJKJpMnb42cJk0TpCUCHKjcWurnHgSczmlfjZaUzMN2FnDM13ERJ qFYwUf4VOXQH+sk9jqLvX0GmIenNe8jjZqAwYR3QSP6kc7QvUxJ3vv4BoNWO5Cgc 0C/h/Q3KG/lZ1K1yl8QE3aMKmAYcnqmyRh31jDlyhjseJ+VI0l2/wwbqlyByjqz8 3+ejxT0UUH89w6BwS7p56oJd5XOd1ufqc8+IKmIaDadBBfxjaZmKCyRXgTKd6tWo ki4M2JpwkKpGBzFzIbPZq1rgH3HinHuJnO3DNUDSHPBjb9A+ -----END CERTIFICATE-----Generated at Sun Apr 27 04:20:04 2025 by rpki-client