$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa File: e327dd02-2788-385a-abb3-3f7d57e3407c.roa (raw, json) Hash identifier: dLESJgaQikUXJw3zLw7twbARqs0xwj2PBJ5nrDmka+I= Subject key identifier: 60:88:FD:7A:E6:1A:B4:D5:F3:A2:7A:BE:BA:C1:E4:0E:73:2C:AD:E5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E9428FDFC5AA00F916480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 397210 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:94:28:fd:fc:5a:a0:0f:91:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=b66a6771-8ff3-4f5b-99e1-830d0fca8a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8b:18:73:5a:48:78:30:e1:66:0f:38:fb:e8: 1b:1f:90:ff:c5:f8:8e:0c:07:9d:00:ff:d5:c6:fe: 7a:50:43:f3:1d:da:8b:6e:8d:ce:16:c3:59:59:3c: 8d:89:a8:40:04:e5:4c:ec:f3:51:d3:6b:21:a0:bc: de:64:50:d2:0c:de:27:be:32:0f:34:80:74:14:c2: 0e:11:f1:95:fd:4a:97:c8:2a:1c:69:41:18:98:ee: 13:d3:5e:fa:65:7d:9e:f4:6c:70:d6:28:53:e6:ee: 29:28:eb:0f:21:f3:03:d7:91:0c:dd:71:1b:29:24: fd:1e:10:09:95:b4:0e:41:1b:15:90:c1:2a:7f:7f: 24:dd:ba:b5:e8:75:f8:fe:45:71:b3:d3:d6:c8:6a: d9:c9:a6:27:6d:91:2c:58:6a:c1:47:d8:14:5f:ce: 43:b6:04:cf:5c:fa:73:72:a1:5e:a3:f7:69:e6:a9: 7f:25:56:29:7b:79:f7:61:93:ce:a5:8f:5d:8c:8e: f5:b9:03:86:c0:57:91:9f:3d:51:36:9a:a2:f8:bc: 34:75:3b:f6:e4:a3:83:b1:55:2d:11:c6:c7:67:c3: b4:bd:ad:d5:c0:16:b3:47:75:4e:66:d9:34:01:8d: eb:b8:53:5a:98:b4:db:36:a8:2b:32:c8:49:51:76: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:FD:7A:E6:1A:B4:D5:F3:A2:7A:BE:BA:C1:E4:0E:73:2C:AD:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:83:36:88:8b:7d:62:95:1c:cd:8f:19:fb:db:fd:58:31:f8: c2:e1:1f:03:19:17:d1:70:7d:8e:5b:bf:1d:ee:f4:58:30:fb: 33:89:2f:b5:19:ec:c2:34:c0:bd:59:6e:c1:3e:2e:f1:39:99: 86:9f:c5:d6:1a:fc:b5:c0:ad:96:14:40:ec:47:62:79:d5:53: af:d5:36:bc:79:77:78:11:62:f2:94:4c:9a:f8:15:6f:3e:06: 60:54:15:69:cc:66:bd:8a:7e:64:69:ac:8f:71:53:1a:fa:db: 77:09:72:cd:4e:76:4e:9e:00:6d:3f:e2:52:3d:a2:0e:a4:5e: 8d:f7:87:be:4b:d0:74:52:3e:dc:09:22:5b:d9:e4:59:45:15: 75:33:28:0e:0f:d1:bc:1b:2a:07:1c:c2:44:45:32:8e:db:d2: 3b:b7:7e:dc:9a:85:39:4b:76:09:b7:6f:82:10:61:e1:8f:b3: 6f:e0:f5:74:b6:2e:ce:b9:c8:78:0e:eb:5e:af:0e:a7:f3:3f: 8f:d0:fe:f4:86:6b:1c:8d:70:f8:3e:fa:7b:16:85:9b:69:b1: 25:93:cd:dd:b0:ac:08:a1:79:e6:c3:e7:11:f7:a6:37:ab:e5: 30:76:ad:92:8d:b7:97:ed:09:b0:be:31:58:ac:db:49:65:2d: a0:24:e6:60 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpQo/fxaoA+RZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YjY2YTY3NzEtOGZmMy00ZjViLTk5ZTEtODMwZDBmY2E4YTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IsYc1pIeDDhZg84++gbH5D/xfiODAedAP/V xv56UEPzHdqLbo3OFsNZWTyNiahABOVM7PNR02shoLzeZFDSDN4nvjIPNIB0FMIO EfGV/UqXyCocaUEYmO4T0176ZX2e9Gxw1ihT5u4pKOsPIfMD15EM3XEbKST9HhAJ lbQOQRsVkMEqf38k3bq16HX4/kVxs9PWyGrZyaYnbZEsWGrBR9gUX85DtgTPXPpz cqFeo/dp5ql/JVYpe3n3YZPOpY9djI71uQOGwFeRnz1RNpqi+Lw0dTv25KODsVUt EcbHZ8O0va3VwBazR3VOZtk0AY3ruFNamLTbNqgrMshJUXYSHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGCI/XrmGrTV86J6vrrB5A5zLK3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTMyN2RkMDItMjc4OC0z ODVhLWFiYjMtM2Y3ZDU3ZTM0MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBngzaIi31ilRzNjxn72/1YMfjC4R8DGRfRcH2O W78d7vRYMPsziS+1GezCNMC9WW7BPi7xOZmGn8XWGvy1wK2WFEDsR2J51VOv1Ta8 eXd4EWLylEya+BVvPgZgVBVpzGa9in5kaayPcVMa+tt3CXLNTnZOngBtP+JSPaIO pF6N94e+S9B0Uj7cCSJb2eRZRRV1MygOD9G8GyoHHMJERTKO29I7t37cmoU5S3YJ t2+CEGHhj7Nv4PV0ti7Ouch4Duterw6n8z+P0P70hmscjXD4Pvp7FoWbabElk83d sKwIoXnmw+cR96Y3q+Uwdq2SjbeX7QmwvjFYrNtJZS2gJOZg -----END CERTIFICATE-----Generated at Sun Apr 27 13:41:05 2025 by rpki-client