$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa File: 220424c3-c5db-3d2c-a100-5eb2b338905a.roa (raw, json) Hash identifier: QwJ0081mywzzBRZhynhN3DEHX6ctwYJ39pUOhX8nXIk= Subject key identifier: 3A:A4:23:BC:DD:75:43:B5:A6:5D:72:5B:C2:CA:2F:E2:B3:B2:84:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183FBDA1940E4213135CD40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 396593 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:fb:da:19:40:e4:21:31:35:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=d12bacf8-1060-4abe-b541-b82391f890ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:95:9c:e3:f7:73:6b:d9:81:ff:49:af:39: ae:bc:6f:9b:b3:d2:fc:da:c4:e4:7e:db:20:5f:70: 78:7b:5b:f5:9a:dc:38:48:5c:70:e2:ae:11:a5:d5: fc:58:59:99:59:df:b5:8c:fd:74:02:38:b3:5f:9a: f4:2e:ab:60:93:02:f4:f6:17:bc:0d:54:de:5b:ee: 17:c6:fd:97:b8:bd:2a:f4:53:1c:0b:6a:4b:e0:7f: 81:1c:e2:1e:e0:0e:54:f7:66:28:a6:bb:be:4c:bb: e2:d6:24:0b:78:db:09:07:35:4c:c5:50:b7:3f:d4: 8b:f9:48:b6:bd:6a:ab:83:3f:d9:ff:61:81:d1:82: c4:8f:af:41:dd:c3:60:19:0f:8e:55:cd:bf:eb:96: 29:3c:cb:3b:d3:b9:4f:26:a3:c7:52:56:28:94:37: d3:d7:4b:b5:94:bc:3c:ce:cb:4e:94:9d:ff:df:46: 51:f4:76:22:81:d0:64:65:7a:93:57:46:35:26:9c: ba:e4:7d:96:8e:83:5e:63:cc:d6:04:7c:57:51:26: 66:e6:4a:a7:78:39:11:f3:10:08:9e:f0:bd:f5:8b: a0:59:41:1e:7f:2e:46:b0:c8:5e:5b:47:18:7d:9d: 24:c0:c2:dc:95:48:54:35:8c:27:0a:24:23:ed:33: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A4:23:BC:DD:75:43:B5:A6:5D:72:5B:C2:CA:2F:E2:B3:B2:84:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:ea:95:f3:77:7f:6b:70:2e:08:8c:93:5f:75:23:4c:64:38: ef:79:d3:35:6b:71:e3:ca:cb:2c:60:b2:fc:09:c1:e8:f1:b8: 6a:18:b5:68:27:2a:53:3b:97:3a:6f:b4:c4:4b:91:59:74:a1: 42:8e:3a:da:7e:72:0e:46:1a:8d:79:e4:0c:d6:fb:d2:1b:5b: 92:eb:84:60:5d:0e:53:10:e4:5b:e5:7f:f4:a5:f1:88:f2:59: df:42:38:81:3a:83:80:bd:b6:c3:77:9e:fa:a7:4f:c6:13:fc: 7e:10:bd:c1:8c:9b:ce:6b:fc:bd:74:88:2a:bf:3d:35:17:9c: 3c:a4:34:d4:16:8d:4e:c8:44:85:bd:d5:76:c8:8a:a8:ae:81: 5e:ae:48:f6:1b:16:81:c8:0c:34:dc:87:fd:c3:2d:1a:06:c1: 75:97:c9:07:b2:47:40:ff:c7:75:ca:b6:8c:8e:5f:81:84:6c: a9:24:84:f2:dc:0d:c5:c0:0f:d5:7e:79:fb:b9:a0:8d:26:66: 6d:87:aa:fc:e5:b7:2a:d5:c1:1e:1f:30:85:b8:b3:0a:ec:d3: 51:16:12:17:4f:aa:31:09:d7:42:d0:da:16:ef:9f:72:0f:61: b6:7b:8a:28:be:87:3f:93:01:a8:ed:7c:e1:54:5f:5a:be:21: 08:8f:f8:76 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg/vaGUDkITE1zUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZDEyYmFjZjgtMTA2MC00YWJlLWI1NDEtYjgyMzkxZjg5MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEGVnOP3c2vZgf9JrzmuvG+bs9L82sTkftsg X3B4e1v1mtw4SFxw4q4RpdX8WFmZWd+1jP10AjizX5r0LqtgkwL09he8DVTeW+4X xv2XuL0q9FMcC2pL4H+BHOIe4A5U92Yopru+TLvi1iQLeNsJBzVMxVC3P9SL+Ui2 vWqrgz/Z/2GB0YLEj69B3cNgGQ+OVc2/65YpPMs707lPJqPHUlYolDfT10u1lLw8 zstOlJ3/30ZR9HYigdBkZXqTV0Y1Jpy65H2WjoNeY8zWBHxXUSZm5kqneDkR8xAI nvC99YugWUEefy5GsMheW0cYfZ0kwMLclUhUNYwnCiQj7TO7eQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDqkI7zddUO1pl1yW8LKL+KzsoQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjIwNDI0YzMtYzVkYi0z ZDJjLWExMDAtNWViMmIzMzg5MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCV6pXzd39rcC4IjJNfdSNMZDjvedM1a3Hjysss YLL8CcHo8bhqGLVoJypTO5c6b7TES5FZdKFCjjrafnIORhqNeeQM1vvSG1uS64Rg XQ5TEORb5X/0pfGI8lnfQjiBOoOAvbbDd576p0/GE/x+EL3BjJvOa/y9dIgqvz01 F5w8pDTUFo1OyESFvdV2yIqoroFerkj2GxaByAw03If9wy0aBsF1l8kHskdA/8d1 yraMjl+BhGypJITy3A3FwA/Vfnn7uaCNJmZth6r85bcq1cEeHzCFuLMK7NNRFhIX T6oxCddC0NoW759yD2G2e4oovoc/kwGo7XzhVF9aviEIj/h2 -----END CERTIFICATE-----Generated at Sat May 10 23:02:21 2025 by rpki-client