$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0df2aa-b2e6-3d9d-a59f-f37cc5f9d53e.roa File: 4b0df2aa-b2e6-3d9d-a59f-f37cc5f9d53e.roa (raw, json) Hash identifier: fWBlf+wrU5UPdu46TWN6OalxgSu4AJ+kdReQrn7S3RM= Subject key identifier: 85:8A:95:AB:45:82:3F:B0:D7:BC:91:74:8E:D7:34:A6:94:12:4E:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858492183EC0560680D6D2E364880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0df2aa-b2e6-3d9d-a59f-f37cc5f9d53e.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 36622 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:ec:05:60:68:0d:6d:2e:36:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=fb7e805e-21a1-4fa3-9de9-9805ac0e8be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:46:24:d4:f7:ce:1f:ad:28:52:52:f0:ab: 2e:f3:3b:16:e6:1c:53:c3:34:17:9d:8d:72:9c:34: 15:f4:1f:88:bf:77:7c:2f:3c:c1:4c:14:fc:f2:99: 99:6a:04:8f:17:5f:f0:ff:87:2f:bc:57:60:51:c0: ee:7d:86:36:a4:01:42:75:32:f5:11:0c:58:ff:20: c0:05:49:31:0e:5e:2a:93:b0:cf:80:53:fb:9e:1b: 93:68:ad:2b:38:db:64:35:7f:82:af:36:a3:3c:03: f4:35:db:50:6b:2e:ad:e0:48:db:61:e3:92:b9:0c: 40:8e:56:46:b4:9c:72:a9:80:c2:94:e0:2d:2d:69: 29:8f:26:f6:80:31:d8:53:79:3e:f1:32:e7:c9:8a: 3b:63:31:20:05:47:41:55:b2:7b:aa:76:dc:7e:8d: bf:07:c0:ee:d9:62:2f:7e:0c:22:40:6a:ad:51:7b: 25:36:ca:24:3b:c4:63:fd:de:35:07:68:de:eb:ab: fc:6f:b6:ee:a7:6a:60:05:54:3f:51:26:d1:2a:7e: 4c:0b:10:d8:a6:15:29:1f:51:c7:ea:0d:04:88:ff: 85:49:be:b2:c3:73:86:1e:86:33:1c:02:5a:29:43: 65:de:32:4d:78:a3:f5:da:f3:ea:f7:be:14:ef:30: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8A:95:AB:45:82:3F:B0:D7:BC:91:74:8E:D7:34:A6:94:12:4E:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0df2aa-b2e6-3d9d-a59f-f37cc5f9d53e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:91:ac:00:36:b5:6f:c9:69:cc:3e:8c:a7:22:f3:7e:c5:c9: 99:4d:fa:cb:05:be:7b:ba:61:64:10:69:1a:c2:18:4a:e8:81: 01:cd:17:25:7a:6a:cf:b0:56:02:0f:6d:5e:31:72:4a:ac:2b: 38:47:13:e0:f2:00:1a:d7:51:cd:2f:9b:27:ba:a3:fb:0d:c7: 88:e0:5d:2e:0e:26:9f:2a:b6:62:27:9b:66:0d:fc:11:44:44: 09:62:d6:4d:96:70:d1:80:12:93:ec:b0:e9:83:5d:d9:04:54: b4:b9:89:1d:a5:aa:e2:58:ab:68:34:af:b6:39:c3:2e:bd:5f: 3e:65:f4:bc:34:5d:0e:6b:1d:97:a4:58:9b:27:c2:02:6d:16: d3:97:9f:c6:a1:bc:64:f7:b4:b2:7d:a8:d7:0e:a7:6c:83:d8: 0c:54:24:a9:80:63:61:80:34:f8:f5:c6:4d:6e:89:f4:31:dd: 14:cf:8c:df:59:f7:2f:c7:4b:2e:c5:c0:56:40:e4:02:25:12: f6:11:b8:a0:21:99:3e:0f:71:f8:fe:d6:1c:c1:da:65:c4:75: 7d:b2:53:d7:15:d0:0e:d0:cb:e0:8e:d8:35:3a:dc:5d:ef:dd: d3:ae:64:9f:f6:89:76:ae:69:a3:f6:9e:26:9e:28:d1:ab:84: 27:c0:c5:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg+wFYGgNbS42SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk ZmI3ZTgwNWUtMjFhMS00ZmEzLTlkZTktOTgwNWFjMGU4YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+FGJNT3zh+tKFJS8Ksu8zsW5hxTwzQXnY1y nDQV9B+Iv3d8LzzBTBT88pmZagSPF1/w/4cvvFdgUcDufYY2pAFCdTL1EQxY/yDA BUkxDl4qk7DPgFP7nhuTaK0rONtkNX+CrzajPAP0NdtQay6t4EjbYeOSuQxAjlZG tJxyqYDClOAtLWkpjyb2gDHYU3k+8TLnyYo7YzEgBUdBVbJ7qnbcfo2/B8Du2WIv fgwiQGqtUXslNsokO8Rj/d41B2je66v8b7bup2pgBVQ/USbRKn5MCxDYphUpH1HH 6g0EiP+FSb6yw3OGHoYzHAJaKUNl3jJNeKP12vPq974U7zCMlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIWKlatFgj+w17yRdI7XNKaUEk76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGIwZGYyYWEtYjJlNi0z ZDlkLWE1OWYtZjM3Y2M1ZjlkNTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBekawANrVvyWnMPoynIvN+xcmZTfrLBb57umFk EGkawhhK6IEBzRclemrPsFYCD21eMXJKrCs4RxPg8gAa11HNL5snuqP7DceI4F0u DiafKrZiJ5tmDfwRREQJYtZNlnDRgBKT7LDpg13ZBFS0uYkdpariWKtoNK+2OcMu vV8+ZfS8NF0Oax2XpFibJ8ICbRbTl5/Gobxk97SyfajXDqdsg9gMVCSpgGNhgDT4 9cZNbon0Md0Uz4zfWfcvx0suxcBWQOQCJRL2EbigIZk+D3H4/tYcwdplxHV9slPX FdAO0Mvgjtg1Otxd793TrmSf9ol2rmmj9p4mnijRq4QnwMUz -----END CERTIFICATE-----Generated at Sat May 10 23:25:33 2025 by rpki-client