$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa File: f563c169-14af-3bdc-a2ce-727526c05eba.roa (raw, json) Hash identifier: iDn3K7IyjgDWO3UqIjSR8uzn7m39PF1OiN/0Aqew0Gc= Subject key identifier: 2A:4A:58:3E:E9:C3:42:E4:9A:E6:63:6A:77:A1:C5:0D:0D:C4:9F:D2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849393E8F862ABB97D404BF2F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 396605 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:8f:86:2a:bb:97:d4:04:bf:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=b9cdcbee-74e1-4989-8e0e-b23a58121d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:b4:f6:d4:41:b1:1d:9a:e2:e1:53:f8:3c: 55:d5:f1:70:92:0e:9a:c9:e9:5c:03:5c:19:8c:da: 2e:df:dd:9e:06:f6:f1:93:28:95:9d:b0:d3:14:fb: 88:eb:ef:bc:44:2f:3d:32:7b:1f:f4:92:77:7b:73: ff:dd:a5:b4:2d:7f:89:57:42:70:d4:ba:74:5e:57: 3b:e1:ce:13:ef:65:8f:85:88:3e:68:6d:dd:bf:33: d6:0c:0c:bd:63:b3:81:eb:55:9a:e7:1b:a2:d4:0a: eb:3f:f3:34:07:ec:eb:a0:b9:03:c4:92:30:25:6c: 62:97:2e:5f:4b:15:ea:44:35:a2:96:d7:78:80:f7: d6:02:78:2e:4f:a1:39:1c:55:12:f6:6a:04:85:48: 4c:c3:fa:a5:dc:27:39:18:92:75:f3:29:53:93:69: 78:24:80:23:96:be:d4:c1:8d:e9:ac:d7:e3:45:60: d8:73:72:af:28:7f:bd:21:c9:e8:e1:49:38:0e:59: 4b:0d:e9:ec:7b:7d:13:14:6c:27:f6:14:ad:5e:b2: b2:5a:c4:0d:34:97:15:5b:99:90:ae:5b:c5:96:d5: 1e:1f:2d:26:cd:06:67:42:6a:3d:bb:b2:b5:4c:55: fa:ac:81:f8:58:de:3e:dc:3f:4c:2d:23:ec:a8:fe: b3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4A:58:3E:E9:C3:42:E4:9A:E6:63:6A:77:A1:C5:0D:0D:C4:9F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f563c169-14af-3bdc-a2ce-727526c05eba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:85:94:ca:ba:df:55:03:f7:48:fa:70:49:b5:9a:4f:91:58: 2a:c4:7f:02:33:db:d4:9b:44:eb:a6:2a:00:4a:cc:62:e9:27: 0a:6c:d6:a8:2a:15:e8:34:77:a5:57:c9:d5:da:90:db:b9:42: 1d:dd:75:ad:99:45:9c:ab:f8:fb:3e:41:61:83:3d:ef:f1:01: 7d:7e:b6:94:ac:2b:72:44:93:3f:46:c4:4c:6d:d6:be:30:7c: 0a:63:de:ae:ad:19:a3:00:c5:3a:a3:26:4c:3f:23:41:c5:66: 56:8d:3d:56:c4:98:0d:33:f9:44:3a:e6:7f:5b:15:a4:e9:47: b7:d2:96:bf:5a:39:de:7b:5b:54:2d:91:06:ea:c5:2d:fb:5e: 44:b7:a3:7c:c9:8d:b4:24:08:70:99:32:34:76:30:92:8f:a1: 78:5c:8f:1b:66:7f:34:50:b9:00:94:83:4b:98:81:d3:e3:58: a1:1d:f2:22:ba:ee:1f:f1:0f:3e:54:d1:bf:bd:8d:16:64:d2: 71:5b:d3:40:9d:e3:d5:3a:8b:7b:fa:86:1d:78:7c:3a:45:09: f5:49:7b:56:ef:58:05:9b:4f:59:48:6b:cd:be:e1:83:5e:c4: 65:7d:a4:64:6c:bb:3f:3d:a6:26:cf:4a:82:64:2b:6c:22:73: 92:fd:ad:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEk5Po+GKruX1AS/L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk YjljZGNiZWUtNzRlMS00OTg5LThlMGUtYjIzYTU4MTIxZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBW09tRBsR2a4uFT+DxV1fFwkg6ayelcA1wZ jNou392eBvbxkyiVnbDTFPuI6++8RC89Mnsf9JJ3e3P/3aW0LX+JV0Jw1Lp0Xlc7 4c4T72WPhYg+aG3dvzPWDAy9Y7OB61Wa5xui1ArrP/M0B+zroLkDxJIwJWxily5f SxXqRDWiltd4gPfWAnguT6E5HFUS9moEhUhMw/ql3Cc5GJJ18ylTk2l4JIAjlr7U wY3prNfjRWDYc3KvKH+9Icno4Uk4DllLDense30TFGwn9hStXrKyWsQNNJcVW5mQ rlvFltUeHy0mzQZnQmo9u7K1TFX6rIH4WN4+3D9MLSPsqP6zrwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCpKWD7pw0LkmuZjanehxQ0NxJ/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjU2M2MxNjktMTRhZi0z YmRjLWEyY2UtNzI3NTI2YzA1ZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBbhZTKut9VA/dI+nBJtZpPkVgqxH8CM9vUm0Tr pioASsxi6ScKbNaoKhXoNHelV8nV2pDbuUId3XWtmUWcq/j7PkFhgz3v8QF9fraU rCtyRJM/RsRMbda+MHwKY96urRmjAMU6oyZMPyNBxWZWjT1WxJgNM/lEOuZ/WxWk 6Ue30pa/Wjnee1tULZEG6sUt+15Et6N8yY20JAhwmTI0djCSj6F4XI8bZn80ULkA lINLmIHT41ihHfIiuu4f8Q8+VNG/vY0WZNJxW9NAnePVOot7+oYdeHw6RQn1SXtW 71gFm09ZSGvNvuGDXsRlfaRkbLs/PaYmz0qCZCtsInOS/a1G -----END CERTIFICATE-----Generated at Tue Apr 29 12:13:41 2025 by rpki-client