$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e24231-a2da-38cd-abb8-775a593788bd.roa File: 70e24231-a2da-38cd-abb8-775a593788bd.roa (raw, json) Hash identifier: PMJEPj1tHGJlHqF9gXs2TPrSnevoYtmgIPwyxlf/3G0= Subject key identifier: FD:18:20:1B:DC:53:A0:F5:C9:B6:EC:58:B8:CD:A6:51:12:FB:60:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BA563458CB183D2B7D646980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e24231-a2da-38cd-abb8-775a593788bd.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 396555 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:34:58:cb:18:3d:2b:7d:64:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=7a1f719c-31aa-4ef1-9392-2ee797354adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:90:e4:33:50:96:48:0c:8e:2c:56:3a:19: 28:64:99:fc:16:39:fa:bc:11:f4:45:eb:f5:9d:54: 49:6f:3a:37:e5:90:2d:e4:e9:b6:5f:61:08:df:9e: c9:26:6c:cb:94:49:a7:0e:5c:50:b1:52:45:cb:74: fb:bd:05:a3:2f:49:df:24:05:9c:2f:ae:59:95:66: 37:9e:78:2d:bb:f8:15:be:ca:41:e8:4a:64:1e:b5: 57:39:17:f9:2e:17:77:4a:c6:6a:fc:e1:30:1b:a9: 7b:6a:c5:15:09:c7:74:e5:ca:57:cc:18:99:b3:9d: d4:95:2e:9f:b8:30:74:d8:df:ca:7d:eb:29:29:4b: 8b:78:fc:b5:8d:ff:98:4b:9c:69:8a:3c:40:58:f2: 89:72:c0:78:99:96:db:d4:27:1b:43:a3:f6:11:18: 54:65:c0:7c:7a:5b:a1:0a:15:4e:79:e8:12:5a:a2: 02:42:ca:7f:76:23:d7:2d:0c:e5:9c:14:a2:72:09: 14:7a:dc:43:bc:30:69:41:7b:38:93:01:bd:bb:9f: ac:74:ac:84:57:a6:b5:08:e3:ad:13:13:bf:3c:65: bc:75:89:b0:42:c4:ee:46:98:42:7b:58:31:18:21: 3a:06:aa:3e:a0:61:7d:91:b0:f5:d0:ff:31:7e:bc: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:18:20:1B:DC:53:A0:F5:C9:B6:EC:58:B8:CD:A6:51:12:FB:60:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e24231-a2da-38cd-abb8-775a593788bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:57:98:16:b7:5a:44:a8:8a:e8:41:c0:5d:a8:ce:be:71:9a: 57:29:d8:d2:58:16:e7:9f:7d:88:35:1e:5c:85:ca:03:fd:03: 50:6c:6d:cb:e6:4c:6f:62:06:a8:83:3c:54:1d:91:13:c9:67: fe:a8:75:54:87:13:1f:a3:f8:3a:10:df:b1:0f:6f:e4:8a:1c: a1:b8:65:51:79:57:da:c1:e9:86:d6:a1:df:e9:f4:bd:a6:4d: 8b:94:85:14:27:01:01:f9:1e:9d:a8:70:e3:da:36:13:e0:14: 8d:fa:8e:ba:19:8a:1e:ca:4a:75:06:04:57:f0:76:d0:aa:d5: 22:94:70:b3:68:ab:84:90:c4:fa:c8:d6:57:57:7a:89:c4:ef: 09:fa:ef:88:5b:c6:66:be:a9:aa:87:8b:d0:a5:f6:e4:5d:cd: 54:d3:ea:8d:94:46:95:57:de:01:de:f3:38:32:3e:d4:68:73: 2c:fa:c9:be:3e:30:91:b6:5d:be:9f:64:0b:a4:29:d0:55:f9: 72:a5:93:88:bb:0d:3e:de:64:77:c2:b9:3a:64:9d:b4:97:57: 89:37:a1:06:f7:06:d9:0e:49:07:08:f9:63:17:2c:79:06:81: 4c:5e:a5:25:6d:fd:ad:4b:56:19:5c:8f:8c:84:1a:cb:3f:0f: fe:bf:fb:23 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjRYyxg9K31kaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk N2ExZjcxOWMtMzFhYS00ZWYxLTkzOTItMmVlNzk3MzU0YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUqQ5DNQlkgMjixWOhkoZJn8Fjn6vBH0Rev1 nVRJbzo35ZAt5Om2X2EI357JJmzLlEmnDlxQsVJFy3T7vQWjL0nfJAWcL65ZlWY3 nngtu/gVvspB6EpkHrVXORf5Lhd3SsZq/OEwG6l7asUVCcd05cpXzBiZs53UlS6f uDB02N/KfespKUuLePy1jf+YS5xpijxAWPKJcsB4mZbb1CcbQ6P2ERhUZcB8eluh ChVOeegSWqICQsp/diPXLQzlnBSicgkUetxDvDBpQXs4kwG9u5+sdKyEV6a1COOt ExO/PGW8dYmwQsTuRphCe1gxGCE6Bqo+oGF9kbD10P8xfrwNzwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP0YIBvcU6D1ybbsWLjNplES+2BAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBlMjQyMzEtYTJkYS0z OGNkLWFiYjgtNzc1YTU5Mzc4OGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCCV5gWt1pEqIroQcBdqM6+cZpXKdjSWBbnn32I NR5chcoD/QNQbG3L5kxvYgaogzxUHZETyWf+qHVUhxMfo/g6EN+xD2/kihyhuGVR eVfawemG1qHf6fS9pk2LlIUUJwEB+R6dqHDj2jYT4BSN+o66GYoeykp1BgRX8HbQ qtUilHCzaKuEkMT6yNZXV3qJxO8J+u+IW8Zmvqmqh4vQpfbkXc1U0+qNlEaVV94B 3vM4Mj7UaHMs+sm+PjCRtl2+n2QLpCnQVflypZOIuw0+3mR3wrk6ZJ20l1eJN6EG 9wbZDkkHCPljFyx5BoFMXqUlbf2tS1YZXI+MhBrLPw/+v/sj -----END CERTIFICATE-----Generated at Fri Apr 11 23:20:32 2025 by rpki-client