$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3efdaa-4860-3b3d-9d2d-623125457a04.roa File: 3c3efdaa-4860-3b3d-9d2d-623125457a04.roa (raw, json) Hash identifier: 1DTOMON1klBvzT+izG9/aN+Q4+qV1et95Y2Bu3xP3PE= Subject key identifier: 1D:D6:5D:2C:48:CB:0F:3E:F0:62:0A:D9:C9:1A:4B:8D:FE:16:28:F2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BA563846EBCE1E3E6E632A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3efdaa-4860-3b3d-9d2d-623125457a04.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 396613 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:38:46:eb:ce:1e:3e:6e:63:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=431ad89c-ad32-4872-a381-f580d777946b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6f:ee:73:b4:db:7a:59:18:99:3a:3c:37:7a: d9:b3:34:3d:69:60:04:17:c0:3f:3f:37:d5:14:54: 8a:00:de:f2:14:7c:e8:e8:8b:fe:2d:40:cd:ce:01: 2d:8d:97:54:ea:e7:91:fe:a1:6a:7a:88:1d:dc:dd: 7f:a0:a3:cc:12:eb:68:77:3e:a7:3d:0c:a8:75:ed: c0:9c:98:b6:ed:22:18:0d:bf:7c:53:e8:53:0c:85: fc:ec:bf:f9:72:00:c5:eb:1c:f1:1c:65:dd:d7:5d: 7d:13:2b:01:39:df:7b:2c:cd:ec:84:5b:fa:d8:c7: 67:1a:17:12:98:5b:7f:fa:42:80:c2:96:57:6d:42: 2e:bc:76:3f:14:a3:c2:9f:47:3a:db:05:79:40:4b: 97:1c:b5:3d:5d:7c:df:2e:76:e6:31:41:68:72:df: 2d:55:e3:f4:18:53:b0:3b:54:55:8f:56:71:8f:b3: 05:b2:65:27:e9:1a:b4:b0:6a:b0:69:3b:c6:70:e2: 8e:23:c2:09:48:44:ff:40:46:3b:1c:0e:d9:d0:12: f4:fd:1c:4b:90:69:3f:39:23:3d:47:95:80:66:0c: 7d:50:76:de:61:f4:42:39:70:88:09:99:fd:3c:48: 6c:21:32:0b:cc:47:98:b8:f5:97:70:b9:c8:e1:24: 1f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D6:5D:2C:48:CB:0F:3E:F0:62:0A:D9:C9:1A:4B:8D:FE:16:28:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c3efdaa-4860-3b3d-9d2d-623125457a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:64:2c:d5:f2:cd:6a:46:b4:f9:59:4c:91:f4:99:9f:53:cb: 66:74:16:16:29:03:ac:96:64:fe:48:78:df:58:53:de:74:28: 08:6a:d1:89:f6:2b:65:2b:c5:35:42:d1:98:e9:3a:c1:9a:23: 5d:0b:21:58:bd:67:40:78:1b:e9:c7:35:a4:27:86:fb:dd:85: 2c:0c:86:f9:0b:6b:eb:33:11:90:ab:39:10:ad:50:f9:4b:05: 53:22:8c:3b:45:6a:50:ee:0c:fc:96:ad:ea:d1:29:a6:52:5f: d3:5d:52:b4:9b:fa:b7:44:e4:7e:53:d2:a4:25:17:41:de:e7: eb:70:0a:a1:d0:81:f3:ed:a9:3a:09:6c:2f:44:c5:fc:73:23: f4:c2:aa:56:4c:65:63:8f:db:8e:a3:d5:49:fa:03:e2:cd:77: 8d:9a:d5:29:5c:7e:5c:d7:31:1b:b0:03:bb:1c:29:19:38:fe: 7e:10:e4:5c:ae:a8:95:3a:04:05:bc:10:76:6e:1a:c9:90:21: b2:c3:48:4d:08:4e:bc:81:72:20:e9:7d:37:c3:33:de:f0:12: 84:e1:1a:66:7d:cd:d5:7f:ab:05:77:cb:5c:94:aa:1f:ac:f7: da:6f:b8:79:01:8d:1d:1f:34:1c:5a:65:5a:42:04:b9:99:c4: 98:c8:1a:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjhG684ePm5jKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk NDMxYWQ4OWMtYWQzMi00ODcyLWEzODEtZjU4MGQ3Nzc5NDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22/uc7TbelkYmTo8N3rZszQ9aWAEF8A/PzfV FFSKAN7yFHzo6Iv+LUDNzgEtjZdU6ueR/qFqeogd3N1/oKPMEutodz6nPQyode3A nJi27SIYDb98U+hTDIX87L/5cgDF6xzxHGXd1119EysBOd97LM3shFv62MdnGhcS mFt/+kKAwpZXbUIuvHY/FKPCn0c62wV5QEuXHLU9XXzfLnbmMUFoct8tVeP0GFOw O1RVj1Zxj7MFsmUn6Rq0sGqwaTvGcOKOI8IJSET/QEY7HA7Z0BL0/RxLkGk/OSM9 R5WAZgx9UHbeYfRCOXCICZn9PEhsITILzEeYuPWXcLnI4SQfOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFB3WXSxIyw8+8GIK2ckaS43+FijyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2MzZWZkYWEtNDg2MC0z YjNkLTlkMmQtNjIzMTI1NDU3YTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCQZCzV8s1qRrT5WUyR9JmfU8tmdBYWKQOslmT+ SHjfWFPedCgIatGJ9itlK8U1QtGY6TrBmiNdCyFYvWdAeBvpxzWkJ4b73YUsDIb5 C2vrMxGQqzkQrVD5SwVTIow7RWpQ7gz8lq3q0SmmUl/TXVK0m/q3ROR+U9KkJRdB 3ufrcAqh0IHz7ak6CWwvRMX8cyP0wqpWTGVjj9uOo9VJ+gPizXeNmtUpXH5c1zEb sAO7HCkZOP5+EORcrqiVOgQFvBB2bhrJkCGyw0hNCE68gXIg6X03wzPe8BKE4Rpm fc3Vf6sFd8tclKofrPfab7h5AY0dHzQcWmVaQgS5mcSYyBpW -----END CERTIFICATE-----Generated at Fri Apr 11 22:37:05 2025 by rpki-client