$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43059a8a-ee23-3b94-8aa0-db590024a80b.roa File: 43059a8a-ee23-3b94-8aa0-db590024a80b.roa (raw, json) Hash identifier: U/o3TolO+PyGo4We/mDK+z6ZPgKoBshErnrGi0rIWZw= Subject key identifier: 8A:C9:1C:4E:DF:0B:46:29:C0:F6:39:2A:09:38:DB:56:7C:DC:CB:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848F22A826E07469ADB83111F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43059a8a-ee23-3b94-8aa0-db590024a80b.roa Signing time: Thu 20 Feb 2025 13:58:10 +0000 ROA not before: Thu 20 Feb 2025 13:58:10 +0000 ROA not after: Wed 21 May 2025 12:58:10 +0000 asID: 0 IP address blocks: 2001:500:4431::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2a:82:6e:07:46:9a:db:83:11:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 20 13:58:10 2025 GMT Not After : May 21 12:58:10 2025 GMT Subject: CN=2c088f0a-6980-43e2-af47-b847b2a1d3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:14:93:6f:18:9b:6f:84:74:58:59:86:9a: 84:24:c3:9d:72:fb:9f:3d:e6:42:73:a6:0f:71:2c: 5a:75:12:61:97:01:c8:26:04:4e:0f:bc:89:dc:64: 0a:2c:6c:81:14:bb:4e:91:25:40:f8:6f:09:cd:82: 01:43:e3:df:97:8d:ab:80:28:69:8f:b1:ca:8c:cd: 6a:84:85:a0:9c:3a:9c:f6:30:62:68:40:25:70:0d: 05:e3:de:4e:2c:60:b8:3e:21:57:81:27:bb:1f:f9: 4a:2b:26:37:01:92:d1:67:e3:46:bb:86:5d:79:bd: 32:d6:31:18:b1:d5:62:ed:02:4a:00:d4:11:59:69: ef:59:81:63:fe:08:c3:8a:86:fd:73:cb:3a:f3:53: b9:4e:f2:5e:56:5a:ee:36:45:9b:b1:bb:e2:6b:ca: eb:ab:a2:f1:a5:d2:63:9f:30:73:ea:60:7f:d8:43: 64:b9:47:9e:c6:d6:15:cf:c3:77:83:74:05:d2:71: ad:5b:1f:d6:87:d0:24:cd:82:ee:5b:30:4b:9c:3d: 63:7c:1a:1b:2e:43:cd:c8:ce:63:59:47:66:fd:7b: 2f:ac:40:b4:69:74:ab:6a:2e:d2:04:cf:8e:84:af: 23:f8:a5:68:49:be:12:6b:20:19:93:b8:2b:14:8a: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C9:1C:4E:DF:0B:46:29:C0:F6:39:2A:09:38:DB:56:7C:DC:CB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43059a8a-ee23-3b94-8aa0-db590024a80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4431::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:e8:6e:e4:ae:e4:87:83:ee:4b:40:1d:ec:33:4f:62:ee:92: 0b:f0:78:67:65:0e:e9:c3:fa:db:6d:88:e2:2f:d2:80:f7:04: c6:5c:f0:17:71:25:13:53:da:04:86:7b:9f:04:c0:14:45:81: 80:f4:d0:8b:7e:76:08:ef:b3:69:08:02:cc:dd:10:48:2f:06: 10:66:fc:4c:85:29:49:a3:da:74:73:4d:bc:d4:d4:87:39:f2: 0e:ca:03:ef:9a:85:9d:fa:36:d0:f9:11:60:8b:09:ec:42:61: 67:5e:74:24:7f:83:da:d2:93:32:86:fc:d3:f1:10:92:b2:79: 57:b3:ce:97:e6:c5:c3:82:2d:a1:3a:c6:69:fb:72:ab:3f:39: cc:57:d8:52:75:fc:4a:73:71:03:0b:90:80:74:9b:50:12:82: b4:ce:2a:ae:e6:de:0d:ea:32:de:65:e4:9c:40:0b:8d:3b:c9: eb:4b:28:3a:c8:07:1b:f8:5a:be:88:8b:3f:e3:b0:83:8e:d4: a1:14:22:05:e2:9d:c8:7e:da:a2:bb:cf:44:b3:31:64:ed:da: 0b:60:24:b1:57:58:fe:01:96:0a:1d:4b:6f:87:61:53:39:ee: 07:d4:e1:e9:35:08:69:a8:f9:65:eb:9a:ba:57:e4:86:0d:92: 61:9e:e6:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjyKoJuB0aa24MRHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIyMDEzNTgxMFoXDTI1MDUyMTEyNTgxMFowLzEtMCsGA1UEAxMk MmMwODhmMGEtNjk4MC00M2UyLWFmNDctYjg0N2IyYTFkM2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r4Uk28Ym2+EdFhZhpqEJMOdcvufPeZCc6YP cSxadRJhlwHIJgROD7yJ3GQKLGyBFLtOkSVA+G8JzYIBQ+Pfl42rgChpj7HKjM1q hIWgnDqc9jBiaEAlcA0F495OLGC4PiFXgSe7H/lKKyY3AZLRZ+NGu4Zdeb0y1jEY sdVi7QJKANQRWWnvWYFj/gjDiob9c8s681O5TvJeVlruNkWbsbvia8rrq6LxpdJj nzBz6mB/2ENkuUeextYVz8N3g3QF0nGtWx/Wh9AkzYLuWzBLnD1jfBobLkPNyM5j WUdm/XsvrEC0aXSrai7SBM+OhK8j+KVoSb4SayAZk7grFIqxZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIrJHE7fC0YpwPY5Kgk421Z83Mv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDMwNTlhOGEtZWUyMy0z Yjk0LThhYTAtZGI1OTAwMjRhODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAEQx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALnobuSu5IeD7ktAHewzT2LukgvweGdlDunD+tttiOIv0oD3BMZc 8BdxJRNT2gSGe58EwBRFgYD00It+dgjvs2kIAszdEEgvBhBm/EyFKUmj2nRzTbzU 1Ic58g7KA++ahZ36NtD5EWCLCexCYWdedCR/g9rSkzKG/NPxEJKyeVezzpfmxcOC LaE6xmn7cqs/OcxX2FJ1/EpzcQMLkIB0m1ASgrTOKq7m3g3qMt5l5JxAC407yetL KDrIBxv4Wr6Iiz/jsIOO1KEUIgXinch+2qK7z0SzMWTt2gtgJLFXWP4BlgodS2+H YVM57gfU4ek1CGmo+WXrmrpX5IYNkmGe5p4= -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:46 2025 by rpki-client