$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db17702-ed59-3f8f-b217-efd10c64677e.roa File: 8db17702-ed59-3f8f-b217-efd10c64677e.roa (raw, json) Hash identifier: Op67pwtLHISsClrBl0ry+1aoUVVLIUO9NIkJ7M1fHcQ= Subject key identifier: A0:34:96:13:9C:3E:4A:AE:18:E9:87:78:B4:07:50:E8:69:27:5D:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F58974EE202495EA5B9240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db17702-ed59-3f8f-b217-efd10c64677e.roa Signing time: Thu 23 Jan 2025 13:38:22 +0000 ROA not before: Thu 23 Jan 2025 13:38:22 +0000 ROA not after: Wed 23 Apr 2025 12:38:22 +0000 asID: 396579 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:89:74:ee:20:24:95:ea:5b:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:22 2025 GMT Not After : Apr 23 12:38:22 2025 GMT Subject: CN=e07582ab-ba3d-432f-8ad2-9b3fd5ccc6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:f8:cb:fd:2a:86:70:08:7b:03:77:5a:ce: 84:71:1d:99:c3:9c:45:b9:34:6d:96:a9:a9:fa:cd: 2b:6a:7d:a6:55:2b:33:3e:8f:e3:1b:f6:6b:f4:7f: 39:ce:4e:5f:b8:a3:10:8f:ab:26:86:62:57:7c:22: 32:72:e2:37:66:5b:c0:39:87:e0:b4:fe:77:9b:e9: 7b:92:55:60:8a:07:df:78:df:78:62:22:89:63:92: b2:8b:16:d8:18:4e:5b:87:e3:b3:8c:29:e3:b5:99: ee:96:6f:08:08:57:0a:eb:76:7d:f3:3d:57:bd:ef: 46:34:23:2d:b0:38:49:0c:b8:d7:2b:fb:db:0d:c3: e2:9d:84:11:7f:24:e9:28:0f:2b:d6:af:b2:de:51: 57:68:0f:86:eb:48:48:1b:3e:8e:f8:a1:67:4f:6e: 6a:55:02:1b:81:ea:12:21:80:9d:c2:5e:98:48:24: 78:f3:01:23:b5:d3:b1:2a:cf:15:48:c7:e0:c0:33: 48:32:96:64:dd:c0:8b:69:7d:e8:66:c7:a2:c8:db: 4b:48:db:f4:71:27:b5:61:94:14:23:03:9f:b2:0d: d6:76:87:71:ed:2b:22:e5:68:48:1a:4d:87:3b:02: 0e:5e:12:83:78:ab:91:87:68:d2:4f:e5:74:55:4c: 8d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:34:96:13:9C:3E:4A:AE:18:E9:87:78:B4:07:50:E8:69:27:5D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db17702-ed59-3f8f-b217-efd10c64677e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f3:c0:34:34:eb:90:48:b0:b1:14:1f:a8:52:52:a3:aa:01: ea:8a:b1:4d:5d:b7:24:2d:7d:0c:67:69:72:93:3c:e0:f5:d3: d4:a3:33:be:2d:84:a3:00:a3:45:5f:4e:c1:5d:f2:b5:a9:60: 9a:6d:a2:e2:59:72:0a:21:40:87:81:a9:b8:5a:f2:66:98:54: bf:fd:a1:ba:16:99:ee:90:18:0b:12:3f:b6:77:9f:cf:1a:db: d6:48:eb:e8:83:5e:63:3d:37:70:a4:ef:e5:fd:9c:1c:df:db: 74:f8:26:06:c5:56:cf:22:49:14:21:73:9a:4f:2a:66:c0:cb: e4:f6:f6:94:e5:35:75:38:42:76:fb:32:96:37:01:7c:16:cb: 5d:7c:e1:4f:f3:42:9c:94:4e:c8:d1:ff:3b:e4:f1:32:74:a1: ca:92:25:7d:54:45:aa:c0:da:fa:b1:87:bf:19:a6:44:85:f4: fa:a2:7d:5d:82:72:b4:bc:79:a6:8c:3e:49:3e:d3:04:a9:d4: d8:d5:72:76:ec:b5:60:52:0e:72:ca:24:68:c8:04:56:3c:2f: 57:55:71:d7:1e:c6:3f:7d:7a:15:f8:69:d7:4e:67:94:50:eb: 71:43:db:ee:39:d6:c4:56:35:51:6c:6e:1f:50:e0:7d:4d:c6: f2:e9:bc:ea -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9Yl07iAklepbkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyMloXDTI1MDQyMzEyMzgyMlowLzEtMCsGA1UEAxMk ZTA3NTgyYWItYmEzZC00MzJmLThhZDItOWIzZmQ1Y2NjNmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZD4y/0qhnAIewN3Ws6EcR2Zw5xFuTRtlqmp +s0ran2mVSszPo/jG/Zr9H85zk5fuKMQj6smhmJXfCIycuI3ZlvAOYfgtP53m+l7 klVgigffeN94YiKJY5KyixbYGE5bh+OzjCnjtZnulm8ICFcK63Z98z1Xve9GNCMt sDhJDLjXK/vbDcPinYQRfyTpKA8r1q+y3lFXaA+G60hIGz6O+KFnT25qVQIbgeoS IYCdwl6YSCR48wEjtdOxKs8VSMfgwDNIMpZk3cCLaX3oZseiyNtLSNv0cSe1YZQU IwOfsg3Wdodx7Ssi5WhIGk2HOwIOXhKDeKuRh2jST+V0VUyNbQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKA0lhOcPkquGOmHeLQHUOhpJ13vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGRiMTc3MDItZWQ1OS0z ZjhmLWIyMTctZWZkMTBjNjQ2NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAq88A0NOuQSLCxFB+oUlKjqgHqirFNXbckLX0M Z2lykzzg9dPUozO+LYSjAKNFX07BXfK1qWCabaLiWXIKIUCHgam4WvJmmFS//aG6 FpnukBgLEj+2d5/PGtvWSOvog15jPTdwpO/l/Zwc39t0+CYGxVbPIkkUIXOaTypm wMvk9vaU5TV1OEJ2+zKWNwF8FstdfOFP80KclE7I0f875PEydKHKkiV9VEWqwNr6 sYe/GaZEhfT6on1dgnK0vHmmjD5JPtMEqdTY1XJ27LVgUg5yyiRoyARWPC9XVXHX HsY/fXoV+GnXTmeUUOtxQ9vuOdbEVjVRbG4fUOB9Tcby6bzq -----END CERTIFICATE-----Generated at Fri Apr 11 22:54:07 2025 by rpki-client