$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa File: 152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa (raw, json) Hash identifier: S+w/ope2zt3xbLEYKgyFPBg132PkhMlk6JkyHuDP77k= Subject key identifier: F3:F4:B4:6C:D1:A7:3C:6C:C7:14:E4:83:01:F0:E6:03:35:D8:8A:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BFEB9F7C119414D11DF6BC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 20431 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:9f:7c:11:94:14:d1:1d:f6:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=e721b836-dc62-4a95-a8f2-f1bb520af50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:a8:04:fb:3e:fc:e2:79:9e:25:28:09:4f: 0f:82:31:d5:23:55:79:65:f0:7d:ef:c9:ba:67:6e: 84:1d:b4:c6:00:62:cc:ad:f0:25:cf:6e:71:93:3b: 90:1d:01:68:47:69:9d:e1:3a:70:29:e9:eb:dd:c7: d9:b3:d9:a2:35:04:51:17:bb:82:b0:88:7e:ed:fe: 0d:cf:11:e2:c7:6c:c2:cd:fa:56:14:b8:a2:c7:bd: 42:98:76:cf:48:a8:eb:48:d6:6e:5d:03:3c:95:f9: 44:a0:de:dc:dd:e9:05:a7:9b:79:c0:21:1a:58:ad: 73:0d:68:c8:a4:0f:fb:d5:56:d6:c4:0c:3e:72:f8: 78:6c:27:82:06:5c:ea:89:cb:2b:0e:98:49:9e:dc: 80:95:bc:0f:3e:cc:a7:3d:34:5f:fd:8e:14:00:a8: 37:dd:c0:f0:b3:31:70:e2:f7:70:a2:e4:e5:e3:5a: 2a:2c:0d:4c:6a:6e:e2:eb:a0:e0:9a:24:2b:3d:7a: 50:15:8d:f0:c6:fb:dc:03:c9:ea:a9:2a:e1:15:d4: 60:a6:cf:d6:b2:ab:a6:d0:55:7d:4b:4d:e5:b5:4c: 26:9b:4e:0e:2a:31:16:49:d4:0c:80:d4:39:17:ec: d4:b7:9a:8b:d4:3f:22:61:7b:5e:ef:55:e1:af:59: 41:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F4:B4:6C:D1:A7:3C:6C:C7:14:E4:83:01:F0:E6:03:35:D8:8A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:35:45:e1:59:6c:9b:35:d6:83:35:58:19:32:2f:c1:3a:e1: 6a:e9:fb:df:43:72:e7:06:ea:e8:b1:c5:8e:0e:ee:9f:5b:d3: 3c:d3:cb:e4:29:9c:2a:b2:9f:3f:9d:6c:9f:5a:c2:74:79:b4: c5:c1:2c:20:cc:38:32:1d:98:70:4d:cd:43:f0:d8:ad:8e:31: 65:d9:a1:a0:3d:a2:aa:e5:05:78:70:1a:db:66:fa:d9:05:5d: ea:33:80:06:24:4a:4f:33:d4:ad:59:e4:30:d4:6f:54:b4:7d: a5:ae:0a:91:62:73:94:a4:d4:2b:d9:80:52:d7:69:1b:77:3d: e9:ad:db:f2:49:fa:46:5f:76:1b:20:b9:3b:4a:2e:49:26:35: 92:8b:3f:44:1e:a1:ea:7c:09:0a:13:1a:16:ea:02:7d:49:cd: 45:8e:21:7e:ba:67:8f:32:16:73:ba:25:89:a6:c7:64:8d:a5: ad:56:da:71:95:2e:c4:4f:a8:da:e0:29:4f:69:d4:67:ab:8c: 81:07:38:1e:34:b1:32:1c:77:47:e5:ab:e3:5b:64:c1:c0:8d: e0:cd:f6:d5:aa:d5:5f:12:38:63:50:cf:b0:8b:9c:c4:2e:d4: 71:55:4a:be:bc:16:d7:04:18:3b:84:00:8e:5a:9e:f0:2d:fc: 20:eb:3b:06 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/6598EZQU0R32vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZTcyMWI4MzYtZGM2Mi00YTk1LWE4ZjItZjFiYjUyMGFmNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAOoBPs+/OJ5niUoCU8PgjHVI1V5ZfB978m6 Z26EHbTGAGLMrfAlz25xkzuQHQFoR2md4TpwKenr3cfZs9miNQRRF7uCsIh+7f4N zxHix2zCzfpWFLiix71CmHbPSKjrSNZuXQM8lflEoN7c3ekFp5t5wCEaWK1zDWjI pA/71VbWxAw+cvh4bCeCBlzqicsrDphJntyAlbwPPsynPTRf/Y4UAKg33cDwszFw 4vdwouTl41oqLA1Mam7i66DgmiQrPXpQFY3wxvvcA8nqqSrhFdRgps/Wsqum0FV9 S03ltUwmm04OKjEWSdQMgNQ5F+zUt5qL1D8iYXte71Xhr1lBCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPP0tGzRpzxsxxTkgwHw5gM12IoxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyYzhhZmYtZDBiNC0z ZDc3LTlkZWEtZWRiZGMzNjUzZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCrNUXhWWybNdaDNVgZMi/BOuFq6fvfQ3LnBuro scWODu6fW9M808vkKZwqsp8/nWyfWsJ0ebTFwSwgzDgyHZhwTc1D8NitjjFl2aGg PaKq5QV4cBrbZvrZBV3qM4AGJEpPM9StWeQw1G9UtH2lrgqRYnOUpNQr2YBS12kb dz3prdvySfpGX3YbILk7Si5JJjWSiz9EHqHqfAkKExoW6gJ9Sc1FjiF+umePMhZz uiWJpsdkjaWtVtpxlS7ET6ja4ClPadRnq4yBBzgeNLEyHHdH5avjW2TBwI3gzfbV qtVfEjhjUM+wi5zELtRxVUq+vBbXBBg7hACOWp7wLfwg6zsG -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:27 2025 by rpki-client