$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52eec508-cf73-3c1a-bdbf-63e919287f3c.roa File: 52eec508-cf73-3c1a-bdbf-63e919287f3c.roa (raw, json) Hash identifier: tPDDplIcrkqofiBLllHoJLg6JVJhEioGcR/4BBdUilo= Subject key identifier: EF:2E:F3:18:9E:49:09:E2:15:8D:A8:7F:36:A4:FE:16:8E:D3:BC:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849244E97A5D19F9555D65EC080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52eec508-cf73-3c1a-bdbf-63e919287f3c.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 396594 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:97:a5:d1:9f:95:55:d6:5e:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=123e8a4f-b91d-4c2b-b8c6-347eeb405064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:6a:bb:f0:aa:63:8d:a2:17:19:95:93:ab: 37:d6:79:a7:ee:e3:44:72:01:dc:96:d1:ba:dc:d6: 96:74:59:77:82:d5:a6:0d:5a:32:28:06:76:53:8e: 9f:44:67:12:c9:b4:52:99:99:cc:c0:9f:28:d5:1c: 59:c5:ee:26:2e:f7:f7:69:de:67:a3:12:28:90:fa: 7a:ab:20:b4:b5:a2:92:45:18:68:5e:87:43:1f:33: 15:ac:57:b4:49:4b:a3:25:7d:b7:03:52:de:2b:46: 9d:9b:46:42:98:11:20:84:47:3e:9f:78:da:1e:da: 72:e5:78:c6:6b:33:dc:ea:b0:a8:93:e8:92:de:55: 57:37:64:d2:ae:65:df:75:7e:a1:16:5a:a9:39:2c: 05:89:0d:a5:eb:5c:0c:f6:3b:23:1d:f1:a3:47:4f: 68:04:da:1d:38:dc:f7:6a:c0:c0:0b:a2:38:04:5d: 1b:38:11:8a:e7:05:91:ed:4f:8d:22:8d:66:4d:62: 17:0e:cd:52:2c:e2:1f:6e:e5:5b:cf:5f:40:c9:8f: 20:e6:1f:9f:ab:2e:97:d4:15:d8:c3:54:b1:dd:33: 83:f7:88:52:b7:fc:1b:df:ce:01:c1:0c:c6:36:51: f3:f4:25:f3:a0:00:43:e3:0d:33:08:9e:34:64:e2: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:2E:F3:18:9E:49:09:E2:15:8D:A8:7F:36:A4:FE:16:8E:D3:BC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52eec508-cf73-3c1a-bdbf-63e919287f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:a9:59:78:78:f8:7a:65:0f:17:4b:f7:1c:b7:02:44:2f:9e: f6:a7:bf:c5:b6:cf:56:a6:f4:bc:64:3a:2a:db:3b:4d:32:9b: 87:5f:2a:c5:d4:b8:32:b5:d6:a9:d8:7d:e3:63:c9:38:05:af: 09:b9:13:23:df:00:32:1d:99:49:7f:6e:cd:34:07:26:68:e5: c1:e5:ea:4c:2a:63:7d:73:10:2e:a4:01:1a:11:55:b7:24:61: aa:ca:fa:fa:85:fb:9c:29:41:88:40:22:8f:ad:5c:0d:29:f5: d2:a7:97:6b:2b:5b:01:10:a5:94:79:24:89:52:99:35:b6:c3: a1:3c:9e:83:70:a6:40:b7:31:d4:3d:53:5f:dc:9c:a3:fa:c5: 16:c7:b8:49:97:59:f9:e8:03:1b:68:92:7d:b3:6d:d8:4a:80: ed:14:10:8b:61:6d:e5:5b:b6:b5:90:ab:55:6a:34:af:fc:6b: 02:49:60:e8:8b:ae:43:be:e9:b6:d2:73:24:69:73:12:17:e1: 84:46:13:0e:a8:b1:81:5b:e3:cc:cd:69:2c:45:07:23:59:10: 18:a1:84:28:8d:58:3e:7d:b2:4a:11:85:84:03:66:13:6c:cf: dd:71:cf:cb:b0:0b:b5:3b:38:ac:8f:14:f8:1a:bc:4d:e8:e0: c5:d4:f0:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpel0Z+VVdZewIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk MTIzZThhNGYtYjkxZC00YzJiLWI4YzYtMzQ3ZWViNDA1MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Klqu/CqY42iFxmVk6s31nmn7uNEcgHcltG6 3NaWdFl3gtWmDVoyKAZ2U46fRGcSybRSmZnMwJ8o1RxZxe4mLvf3ad5noxIokPp6 qyC0taKSRRhoXodDHzMVrFe0SUujJX23A1LeK0adm0ZCmBEghEc+n3jaHtpy5XjG azPc6rCok+iS3lVXN2TSrmXfdX6hFlqpOSwFiQ2l61wM9jsjHfGjR09oBNodONz3 asDAC6I4BF0bOBGK5wWR7U+NIo1mTWIXDs1SLOIfbuVbz19AyY8g5h+fqy6X1BXY w1Sx3TOD94hSt/wb384BwQzGNlHz9CXzoABD4w0zCJ40ZOIoswIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO8u8xieSQniFY2ofzak/haO07yhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTJlZWM1MDgtY2Y3My0z YzFhLWJkYmYtNjNlOTE5Mjg3ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBuqVl4ePh6ZQ8XS/cctwJEL572p7/Fts9WpvS8 ZDoq2ztNMpuHXyrF1Lgytdap2H3jY8k4Ba8JuRMj3wAyHZlJf27NNAcmaOXB5epM KmN9cxAupAEaEVW3JGGqyvr6hfucKUGIQCKPrVwNKfXSp5drK1sBEKWUeSSJUpk1 tsOhPJ6DcKZAtzHUPVNf3Jyj+sUWx7hJl1n56AMbaJJ9s23YSoDtFBCLYW3lW7a1 kKtVajSv/GsCSWDoi65Dvum20nMkaXMSF+GERhMOqLGBW+PMzWksRQcjWRAYoYQo jVg+fbJKEYWEA2YTbM/dcc/LsAu1OzisjxT4GrxN6ODF1PAs -----END CERTIFICATE-----Generated at Sun May 11 00:58:35 2025 by rpki-client