$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f563e37-496b-38e9-b921-ad296cae4c5e.roa File: 7f563e37-496b-38e9-b921-ad296cae4c5e.roa (raw, json) Hash identifier: SNeIYmt1FU1BYoZ1XLSD6FGvY3wq3gAi5lm7+Epyu+s= Subject key identifier: D8:D8:42:8B:87:31:8A:E8:F8:F2:51:2B:F5:2D:53:D6:BC:51:55:00 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F5913251FC92607E2BEDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f563e37-496b-38e9-b921-ad296cae4c5e.roa Signing time: Thu 23 Jan 2025 13:38:26 +0000 ROA not before: Thu 23 Jan 2025 13:38:26 +0000 ROA not after: Wed 23 Apr 2025 12:38:26 +0000 asID: 36624 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:91:32:51:fc:92:60:7e:2b:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:26 2025 GMT Not After : Apr 23 12:38:26 2025 GMT Subject: CN=7de9d38f-99a1-4c33-9fd2-60a9b775ce25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:19:ba:5b:a8:a4:33:00:e5:2d:a5:20:c8: 9d:09:11:4d:df:f5:6d:e7:dc:23:80:8b:64:6d:ad: a4:b7:d7:11:51:0c:35:da:14:65:2e:e9:1b:62:36: 85:d1:2d:2e:62:ab:78:ea:a5:07:68:4a:e4:25:7b: eb:ad:6a:a3:8c:84:1d:88:6c:10:8f:52:a0:55:87: 6d:3f:a2:c6:00:83:f4:8b:18:d0:40:e8:c5:a6:64: a3:24:d1:77:df:cd:d0:5f:be:ba:21:8a:31:84:91: 57:b2:d3:eb:bf:c1:b0:68:14:b1:6e:f7:2a:52:28: ab:78:44:e7:18:15:e8:40:f3:22:1e:3e:6f:16:0a: f6:1e:81:ac:b6:57:04:b6:34:8e:f3:d0:23:30:ff: be:d7:53:f4:5e:4f:0c:c6:89:8c:15:a0:8a:e3:ea: db:a7:5c:b4:a2:27:41:95:21:61:23:9f:fd:24:49: 23:73:91:b0:82:79:88:d0:f9:e0:8a:ab:77:40:ca: 7d:d5:be:55:8a:dd:a3:a5:7e:ae:9b:8b:27:86:70: d1:de:5f:e0:e7:c3:0c:f0:31:ac:db:ac:f3:bd:b2: 35:54:b0:f6:af:e8:67:89:ee:ae:d9:bd:f1:e2:73: ba:f5:a8:c9:36:51:db:2d:fe:6a:97:b2:b1:bd:4d: 9a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D8:42:8B:87:31:8A:E8:F8:F2:51:2B:F5:2D:53:D6:BC:51:55:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f563e37-496b-38e9-b921-ad296cae4c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c2:84:b2:86:c4:dc:45:24:2d:9f:53:4e:ea:80:0d:17:00: f3:a9:1a:fa:87:99:20:25:55:ab:77:ea:8f:0e:0c:79:e4:92: ec:f2:11:fb:47:a3:30:4f:de:4b:b0:e4:85:53:74:a9:6e:8d: 16:03:da:ef:4c:96:27:27:a4:98:28:d7:13:5a:b5:14:3c:56: c1:27:b8:3f:e4:a3:36:41:fa:56:e3:e9:f9:a5:4a:be:f2:e8: 30:04:06:ec:28:dd:9f:18:0d:5c:68:a8:b3:08:7f:67:f7:b9: cc:32:c8:8b:84:2b:63:ee:96:2b:52:08:8d:90:45:cd:4c:26: 76:e6:17:e7:0b:44:49:b4:bd:37:c9:0d:cf:9e:77:36:93:b5: eb:28:69:a7:a4:dc:02:d1:7f:51:92:14:cf:11:6c:aa:e1:33: 4f:4a:7e:86:51:7c:cc:c8:99:35:f6:76:70:e8:5e:af:1f:aa: 0c:46:eb:b2:75:59:04:9c:09:3f:22:ad:de:46:ed:b7:7a:db: 4b:51:aa:ec:d2:93:33:af:80:e7:b6:86:fc:09:8b:3d:5c:74: fd:2e:95:82:8b:bc:57:fc:72:bd:dc:70:39:16:a2:e4:32:ec: 9b:16:4b:8f:bd:55:82:24:08:3e:64:5f:74:44:d0:ae:00:a2: ed:4b:93:c9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9ZEyUfySYH4r7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyNloXDTI1MDQyMzEyMzgyNlowLzEtMCsGA1UEAxMk N2RlOWQzOGYtOTlhMS00YzMzLTlmZDItNjBhOWI3NzVjZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiQZuluopDMA5S2lIMidCRFN3/Vt59wjgItk ba2kt9cRUQw12hRlLukbYjaF0S0uYqt46qUHaErkJXvrrWqjjIQdiGwQj1KgVYdt P6LGAIP0ixjQQOjFpmSjJNF3383QX766IYoxhJFXstPrv8GwaBSxbvcqUiireETn GBXoQPMiHj5vFgr2HoGstlcEtjSO89AjMP++11P0Xk8MxomMFaCK4+rbp1y0oidB lSFhI5/9JEkjc5GwgnmI0Pngiqt3QMp91b5Vit2jpX6um4snhnDR3l/g58MM8DGs 26zzvbI1VLD2r+hnie6u2b3x4nO69ajJNlHbLf5ql7KxvU2aywIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNjYQouHMYro+PJRK/UtU9a8UVUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2Y1NjNlMzctNDk2Yi0z OGU5LWI5MjEtYWQyOTZjYWU0YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxwoSyhsTcRSQtn1NO6oANFwDzqRr6h5kgJVWr d+qPDgx55JLs8hH7R6MwT95LsOSFU3Spbo0WA9rvTJYnJ6SYKNcTWrUUPFbBJ7g/ 5KM2QfpW4+n5pUq+8ugwBAbsKN2fGA1caKizCH9n97nMMsiLhCtj7pYrUgiNkEXN TCZ25hfnC0RJtL03yQ3Pnnc2k7XrKGmnpNwC0X9RkhTPEWyq4TNPSn6GUXzMyJk1 9nZw6F6vH6oMRuuydVkEnAk/Iq3eRu23ettLUars0pMzr4Dntob8CYs9XHT9LpWC i7xX/HK93HA5FqLkMuybFkuPvVWCJAg+ZF90RNCuAKLtS5PJ -----END CERTIFICATE-----Generated at Sat Apr 12 00:11:00 2025 by rpki-client