$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/933724f1-647c-37e2-91de-a870f078a59a.roa File: 933724f1-647c-37e2-91de-a870f078a59a.roa (raw, json) Hash identifier: UNj0ybippHlWAi5UNI99rU30Us9Eb40rd8KC6W4jsvY= Subject key identifier: E7:F1:BE:C3:70:B6:9F:21:35:FD:73:EC:C8:06:D0:AC:94:18:4E:66 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F58C045671ABA73F1EFF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/933724f1-647c-37e2-91de-a870f078a59a.roa Signing time: Thu 23 Jan 2025 13:38:24 +0000 ROA not before: Thu 23 Jan 2025 13:38:24 +0000 ROA not after: Wed 23 Apr 2025 12:38:24 +0000 asID: 396567 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:8c:04:56:71:ab:a7:3f:1e:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:24 2025 GMT Not After : Apr 23 12:38:24 2025 GMT Subject: CN=2b126014-95de-4f64-b658-d58c0aca3e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:89:6b:07:78:dc:a4:55:75:bf:4e:32:c9:af: d8:f7:66:e8:84:37:8a:4c:43:9a:8c:98:fd:59:04: 5b:4e:52:8a:5e:c4:1c:26:96:e9:56:39:64:36:7c: 69:db:4c:5d:50:56:1e:a0:3b:23:34:18:04:76:c4: a4:57:d2:05:76:b1:66:e4:0b:ac:de:cc:9a:34:72: 9d:58:f5:37:5e:7c:0e:ce:63:f4:7d:2d:3d:59:74: 1e:df:0c:56:0e:f1:5a:b3:4e:5d:c6:af:24:c6:0f: 75:36:e4:68:4e:06:ce:6f:6e:a5:cd:d9:e5:62:7c: 2d:94:e4:da:23:cf:bc:65:f8:cf:f8:4e:ea:49:80: 62:3c:54:86:70:65:c8:13:53:1d:61:f3:74:f2:e9: 8c:b9:97:c5:50:73:86:79:eb:d8:55:c0:57:10:5b: 96:4c:55:2e:44:62:88:8e:04:38:e1:cf:33:c0:be: 8a:71:b0:75:85:b2:d3:d7:f7:cc:fe:a0:a7:75:08: 3a:d8:c3:fe:6d:50:ec:be:9f:08:59:bc:c4:32:99: 67:e0:92:6e:0a:cc:15:7e:a4:37:35:a7:ba:94:9a: 98:5c:b1:47:55:e3:de:4c:8b:2e:b7:e7:16:78:72: 49:bc:0e:cd:13:11:93:56:1b:4f:38:86:5a:45:9e: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F1:BE:C3:70:B6:9F:21:35:FD:73:EC:C8:06:D0:AC:94:18:4E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/933724f1-647c-37e2-91de-a870f078a59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:13:4f:a5:02:e7:63:7e:11:2a:e1:d2:a0:f3:36:46:4d:4b: b9:37:d3:fb:30:50:99:4b:eb:8d:71:1b:4b:c7:68:45:92:4d: 48:2d:5d:e0:7e:fb:99:2a:69:14:6e:2f:e7:5d:91:7f:81:dd: 47:23:6f:f9:33:20:72:53:32:d4:a3:2e:fe:28:83:fe:42:aa: 05:22:5b:f7:8f:9d:e2:00:bc:4a:2e:80:62:6b:ce:69:cc:f3: a5:70:69:b0:d4:c8:4a:8b:52:50:60:87:a4:6b:fb:76:cd:4a: aa:82:a0:d7:80:02:25:4f:11:59:eb:d3:3f:01:95:a2:0e:c9: ac:14:b6:29:f5:60:71:15:6c:49:ba:78:29:be:7d:17:d2:75: f3:82:a2:e6:f0:83:64:61:ca:74:fc:04:45:6b:40:2d:6c:41: 5a:ac:9d:4c:6b:a7:73:2b:fb:2e:d9:76:b2:35:0c:eb:3b:5c: 0d:28:f4:2c:4f:6d:da:54:3d:67:92:aa:bf:b4:8a:8d:90:d8: f5:4f:80:11:7d:3b:e4:8f:62:20:20:20:e8:eb:7c:18:ca:b0: cf:0a:6c:af:60:28:39:d7:f4:c0:21:43:ea:27:48:85:8c:0d: 0a:fa:3f:c0:90:4f:b9:34:c9:6f:38:f0:f6:42:5e:7c:77:01: 1a:9b:39:5e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9YwEVnGrpz8e/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyNFoXDTI1MDQyMzEyMzgyNFowLzEtMCsGA1UEAxMk MmIxMjYwMTQtOTVkZS00ZjY0LWI2NTgtZDU4YzBhY2EzZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4lrB3jcpFV1v04yya/Y92bohDeKTEOajJj9 WQRbTlKKXsQcJpbpVjlkNnxp20xdUFYeoDsjNBgEdsSkV9IFdrFm5Aus3syaNHKd WPU3XnwOzmP0fS09WXQe3wxWDvFas05dxq8kxg91NuRoTgbOb26lzdnlYnwtlOTa I8+8ZfjP+E7qSYBiPFSGcGXIE1MdYfN08umMuZfFUHOGeevYVcBXEFuWTFUuRGKI jgQ44c8zwL6KcbB1hbLT1/fM/qCndQg62MP+bVDsvp8IWbzEMpln4JJuCswVfqQ3 Nae6lJqYXLFHVePeTIsut+cWeHJJvA7NExGTVhtPOIZaRZ6cqwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOfxvsNwtp8hNf1z7MgG0KyUGE5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTMzNzI0ZjEtNjQ3Yy0z N2UyLTkxZGUtYTg3MGYwNzhhNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC6E0+lAudjfhEq4dKg8zZGTUu5N9P7MFCZS+uN cRtLx2hFkk1ILV3gfvuZKmkUbi/nXZF/gd1HI2/5MyByUzLUoy7+KIP+QqoFIlv3 j53iALxKLoBia85pzPOlcGmw1MhKi1JQYIeka/t2zUqqgqDXgAIlTxFZ69M/AZWi DsmsFLYp9WBxFWxJungpvn0X0nXzgqLm8INkYcp0/ARFa0AtbEFarJ1Ma6dzK/su 2XayNQzrO1wNKPQsT23aVD1nkqq/tIqNkNj1T4ARfTvkj2IgICDo63wYyrDPCmyv YCg51/TAIUPqJ0iFjA0K+j/AkE+5NMlvOPD2Ql58dwEamzle -----END CERTIFICATE-----Generated at Sat Apr 12 00:55:15 2025 by rpki-client