$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa File: 99747e2f-7cb5-37a0-8664-f750f2bde505.roa (raw, json) Hash identifier: ++XIWR+vRQLVx6f8Z+YLd6WthBC2ZCr9TE+eiKYt8ao= Subject key identifier: 9C:D6:7F:F1:2D:AB:64:D4:72:AE:8C:4A:94:29:E5:C2:A5:24:BC:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F57F726AAF3B4D3E24F140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa Signing time: Thu 23 Jan 2025 13:38:18 +0000 ROA not before: Thu 23 Jan 2025 13:38:18 +0000 ROA not after: Wed 23 Apr 2025 12:38:18 +0000 asID: 396589 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:7f:72:6a:af:3b:4d:3e:24:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:18 2025 GMT Not After : Apr 23 12:38:18 2025 GMT Subject: CN=cdcbdb19-644a-42f2-9d20-4c7d56db0293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:81:c1:06:2a:9e:63:01:09:43:4a:37:bb: aa:82:b6:be:05:01:0e:bc:03:6f:de:8d:4f:b9:ec: 0a:8d:82:c4:71:a3:c0:e2:95:45:dd:4a:c5:57:9e: b5:c2:d3:b0:f5:32:4b:24:98:58:47:81:e1:61:a8: 72:6e:f4:7d:a6:e9:5a:8e:16:18:53:ac:cf:c9:fd: c2:bf:0e:cd:51:01:5a:13:38:59:6e:81:6f:41:d2: d7:23:14:3c:a9:d4:37:d1:6a:83:50:46:3b:93:6a: 90:90:4e:0a:67:f6:08:ea:8b:6f:36:71:58:2f:af: 05:b5:cf:75:09:c3:7b:54:b8:90:5d:fa:2c:6b:c2: cb:3c:8b:c1:91:c5:55:48:ac:d1:95:d8:2d:05:d8: 32:bb:4a:3f:aa:1d:09:c4:ec:7d:a4:27:d8:73:a9: 48:7c:f9:b1:2f:7d:d4:87:96:88:a6:0b:68:c0:d1: e8:e0:ef:71:44:1b:1f:11:39:47:db:27:cf:14:bf: 5c:72:a4:fd:bc:30:79:16:cd:44:96:63:1b:ea:59: fb:83:b2:9f:aa:cc:10:c0:a1:0e:c9:9a:f8:48:33: e7:c0:98:bb:60:87:59:a0:fb:17:37:5e:fe:05:01: 15:8d:66:23:99:84:29:da:71:bd:a2:69:e5:4d:51: 2f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D6:7F:F1:2D:AB:64:D4:72:AE:8C:4A:94:29:E5:C2:A5:24:BC:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/99747e2f-7cb5-37a0-8664-f750f2bde505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c1:8d:68:ed:35:aa:90:b8:40:6e:f5:98:55:b2:a4:5c:93: 7c:ea:18:49:18:e5:b6:d2:b2:58:d8:15:b8:04:9b:43:dd:ae: ae:25:d9:d2:3f:5b:96:da:4a:49:41:00:68:31:c0:62:c8:70: db:32:dd:03:2a:6f:e8:bc:ad:ff:47:f6:bf:b3:71:95:0e:40: 33:dd:82:5f:fa:9f:1b:ea:a3:86:fb:e4:7b:33:f4:03:6c:ed: 8a:ac:67:f9:00:e9:28:12:98:0f:3a:6a:28:fc:9e:91:02:f2: 89:c5:75:1d:b6:0f:83:7c:6a:56:c6:46:72:d1:47:19:bd:84: 27:72:e4:f7:72:86:0e:d2:6a:dd:f6:91:f2:00:71:f9:de:2f: 83:80:3c:29:bd:93:48:29:2b:5e:cb:59:2d:a9:d7:81:38:78: 8e:92:44:cc:be:b2:ae:17:a6:25:8e:52:dd:62:88:6e:54:f0: 80:94:5a:e7:bb:38:66:25:43:3d:75:d5:4b:2d:ec:a1:d7:25: 91:9a:1d:22:88:6e:7d:17:2b:0f:68:4d:a9:10:6f:53:13:27: 5d:14:ee:7e:39:54:f7:dd:97:60:9c:ef:7f:e8:96:d1:e1:ff: a3:ea:b5:87:87:e3:33:c9:da:5b:e9:33:c8:db:78:83:12:ac: 20:24:7f:84 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9X9yaq87TT4k8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgxOFoXDTI1MDQyMzEyMzgxOFowLzEtMCsGA1UEAxMk Y2RjYmRiMTktNjQ0YS00MmYyLTlkMjAtNGM3ZDU2ZGIwMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaSBwQYqnmMBCUNKN7uqgra+BQEOvANv3o1P uewKjYLEcaPA4pVF3UrFV561wtOw9TJLJJhYR4HhYahybvR9pulajhYYU6zPyf3C vw7NUQFaEzhZboFvQdLXIxQ8qdQ30WqDUEY7k2qQkE4KZ/YI6otvNnFYL68Ftc91 CcN7VLiQXfosa8LLPIvBkcVVSKzRldgtBdgyu0o/qh0JxOx9pCfYc6lIfPmxL33U h5aIpgtowNHo4O9xRBsfETlH2yfPFL9ccqT9vDB5Fs1ElmMb6ln7g7KfqswQwKEO yZr4SDPnwJi7YIdZoPsXN17+BQEVjWYjmYQp2nG9omnlTVEvcQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJzWf/Etq2TUcq6MSpQp5cKlJLz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTk3NDdlMmYtN2NiNS0z N2EwLTg2NjQtZjc1MGYyYmRlNTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBHwY1o7TWqkLhAbvWYVbKkXJN86hhJGOW20rJY 2BW4BJtD3a6uJdnSP1uW2kpJQQBoMcBiyHDbMt0DKm/ovK3/R/a/s3GVDkAz3YJf +p8b6qOG++R7M/QDbO2KrGf5AOkoEpgPOmoo/J6RAvKJxXUdtg+DfGpWxkZy0UcZ vYQncuT3coYO0mrd9pHyAHH53i+DgDwpvZNIKStey1ktqdeBOHiOkkTMvrKuF6Yl jlLdYohuVPCAlFrnuzhmJUM9ddVLLeyh1yWRmh0iiG59FysPaE2pEG9TEyddFO5+ OVT33ZdgnO9/6JbR4f+j6rWHh+Mzydpb6TPI23iDEqwgJH+E -----END CERTIFICATE-----Generated at Fri Apr 11 23:03:27 2025 by rpki-client