$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ffaae4-d8ae-3e33-bf4f-f02a325e09ce.roa File: 21ffaae4-d8ae-3e33-bf4f-f02a325e09ce.roa (raw, json) Hash identifier: 7v/RgBDuQeIFTv0U+5GM5K4RbEXIwK9Ib1dOVZsIkzg= Subject key identifier: 0D:C1:1B:6E:26:BF:4F:9B:B7:FE:FF:39:25:81:05:53:CF:EE:FF:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BA5635FB44B2E13B2EEB1EA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ffaae4-d8ae-3e33-bf4f-f02a325e09ce.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 20362 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:35:fb:44:b2:e1:3b:2e:eb:1e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=db2fc0fc-28ca-44e9-8253-cc9d4be24fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:26:77:88:70:11:67:e3:e0:58:cc:a4:60: 8e:ac:95:43:82:2b:a5:44:28:4d:e5:f3:d2:6f:8e: 8e:00:35:23:e8:6b:6f:35:25:e9:cc:2d:c4:e5:c6: 60:ec:b0:47:d5:61:c9:74:6c:bb:79:ef:fc:c5:37: bf:e1:d4:95:d5:29:e4:fb:c4:2d:de:84:d1:6a:a8: fc:50:95:ff:85:d0:5c:03:1e:1c:87:43:09:c3:e3: d8:87:47:e9:ec:67:b5:29:84:08:75:f6:c5:80:9d: fd:9e:9e:1c:ea:90:c7:a9:aa:6e:c0:b0:b3:96:fa: 86:2c:ec:c0:d7:d9:66:1b:6d:28:2e:e5:14:d0:b6: b0:5f:d5:1c:6d:1a:e3:6d:e8:de:f4:a3:3c:de:b4: 75:35:7d:b3:1f:5c:bb:b5:69:84:e2:c2:35:5a:da: 2a:fe:f3:2e:cb:0d:54:5d:c4:23:9e:ba:e3:d4:d0: 52:e5:61:f2:a1:a1:24:08:cd:78:86:15:a4:5b:93: 4e:0c:46:24:d6:5a:52:5a:39:d2:c2:5a:ec:44:7f: 9b:de:24:cf:28:fa:30:6c:b5:fc:17:9c:9a:44:bb: 4b:7d:57:4f:95:f6:e5:1e:7d:5f:b3:49:46:63:2e: 20:3d:47:39:1c:22:c0:d5:c0:15:eb:61:7b:c6:d1: 66:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C1:1B:6E:26:BF:4F:9B:B7:FE:FF:39:25:81:05:53:CF:EE:FF:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21ffaae4-d8ae-3e33-bf4f-f02a325e09ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:64:5d:ae:0c:61:1d:9b:4c:28:d4:46:0b:c9:10:4a:61:04: 8b:28:7a:07:bc:20:06:4a:e1:ab:a6:4e:8f:7e:8a:e3:11:c8: 50:bf:c2:0b:5d:80:89:9e:fb:42:12:66:52:58:f0:f7:d5:69: 19:7b:7f:ba:7c:b7:53:d2:e3:f0:12:96:62:16:fd:5c:28:d4: 83:85:0e:f9:35:d9:e6:12:1c:f9:cc:ab:4e:f8:68:0d:69:f4: c0:82:a3:2e:33:64:91:19:92:45:7b:94:98:86:37:42:4a:f5: 26:0d:66:fb:f2:6c:14:b0:48:dc:53:27:95:70:6f:c5:40:26: 99:e7:71:11:d6:67:42:12:5a:3d:de:56:10:63:e4:4d:12:0c: c3:ba:28:16:c2:bb:91:77:68:f4:c5:42:5a:7a:16:bf:43:8b: ef:3e:ea:bd:47:69:ec:09:7f:c6:7f:cc:3a:2e:0a:5a:74:41: d2:cb:23:cc:c8:7f:41:b7:9f:d6:b2:00:86:4e:59:f8:cf:22: 0b:d3:4c:c7:21:f7:a8:c2:71:a5:eb:d5:8d:8e:ef:be:7a:1e: 23:53:0a:e3:c2:5d:be:0d:10:15:d7:a6:9f:b8:a4:3f:42:27: a5:2a:be:b3:65:14:0d:62:8e:7f:33:a0:5a:23:91:20:80:83: cf:f9:17:a6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjX7RLLhOy7rHqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk ZGIyZmMwZmMtMjhjYS00NGU5LTgyNTMtY2M5ZDRiZTI0ZmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg00md4hwEWfj4FjMpGCOrJVDgiulRChN5fPS b46OADUj6GtvNSXpzC3E5cZg7LBH1WHJdGy7ee/8xTe/4dSV1Snk+8Qt3oTRaqj8 UJX/hdBcAx4ch0MJw+PYh0fp7Ge1KYQIdfbFgJ39np4c6pDHqapuwLCzlvqGLOzA 19lmG20oLuUU0LawX9UcbRrjbeje9KM83rR1NX2zH1y7tWmE4sI1Wtoq/vMuyw1U XcQjnrrj1NBS5WHyoaEkCM14hhWkW5NODEYk1lpSWjnSwlrsRH+b3iTPKPowbLX8 F5yaRLtLfVdPlfblHn1fs0lGYy4gPUc5HCLA1cAV62F7xtFmJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA3BG24mv0+bt/7/OSWBBVPP7v8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFmZmFhZTQtZDhhZS0z ZTMzLWJmNGYtZjAyYTMyNWUwOWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQZF2uDGEdm0wo1EYLyRBKYQSLKHoHvCAGSuGr pk6PforjEchQv8ILXYCJnvtCEmZSWPD31WkZe3+6fLdT0uPwEpZiFv1cKNSDhQ75 NdnmEhz5zKtO+GgNafTAgqMuM2SRGZJFe5SYhjdCSvUmDWb78mwUsEjcUyeVcG/F QCaZ53ER1mdCElo93lYQY+RNEgzDuigWwruRd2j0xUJaeha/Q4vvPuq9R2nsCX/G f8w6LgpadEHSyyPMyH9Bt5/WsgCGTln4zyIL00zHIfeownGl69WNju++eh4jUwrj wl2+DRAV16afuKQ/QielKr6zZRQNYo5/M6BaI5EggIPP+Rem -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:57 2025 by rpki-client