$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7efc9cb-db5c-3d69-9194-6bdb71df66e8.roa File: a7efc9cb-db5c-3d69-9194-6bdb71df66e8.roa (raw, json) Hash identifier: D0NjU809EfhZUWf0n7cSQDDdmTv8/gt8KTwh8O38KZ8= Subject key identifier: BE:C3:24:1F:0B:7F:B6:55:E3:96:41:22:A0:D4:41:B9:28:16:83:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F5859FC32B09914ACF9480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7efc9cb-db5c-3d69-9194-6bdb71df66e8.roa Signing time: Thu 23 Jan 2025 13:38:21 +0000 ROA not before: Thu 23 Jan 2025 13:38:21 +0000 ROA not after: Wed 23 Apr 2025 12:38:21 +0000 asID: 396605 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:85:9f:c3:2b:09:91:4a:cf:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:21 2025 GMT Not After : Apr 23 12:38:21 2025 GMT Subject: CN=c78573d4-5242-4773-8fd0-f6b3e8579d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:2a:b4:39:d1:da:7c:64:9c:ad:95:81:fb: 71:33:34:06:48:0c:7f:3e:d9:bc:d6:86:b7:d6:a1: 77:99:5a:e2:52:af:6a:f0:29:9f:37:53:08:6b:50: 41:f4:ba:91:82:6f:c1:fc:17:2c:d8:b5:16:6e:4e: 58:5e:e9:65:f6:95:e4:45:e1:c7:f2:8e:6f:eb:29: 44:da:93:a8:cc:d4:19:36:39:4d:ca:8e:4b:07:74: e0:1f:5d:5d:6f:e5:c6:b8:71:d2:78:50:9d:c1:82: fe:f8:13:5f:98:b2:91:c4:73:88:bd:56:43:f8:1a: 73:73:8e:7b:d4:9d:6a:10:c5:87:b8:d5:db:61:b2: a6:f4:df:ae:20:7e:05:4d:11:67:11:54:48:b9:f7: a7:f4:53:5e:75:f6:76:3c:8b:fd:0f:25:80:18:0d: e2:f2:11:58:0b:22:22:fe:80:42:5b:bf:0b:58:23: 11:9d:78:1b:52:cb:55:31:75:31:0e:f0:52:f7:b4: 61:76:1f:fd:52:af:24:76:79:d6:af:cb:be:2f:92: 30:a3:d0:9d:55:ee:07:46:ca:68:37:63:0f:f2:12: 12:5c:89:3c:97:38:44:8e:60:5c:d8:4d:c9:fa:5c: 84:65:c7:4d:95:6c:28:07:80:4b:29:4d:d6:44:2e: 4f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C3:24:1F:0B:7F:B6:55:E3:96:41:22:A0:D4:41:B9:28:16:83:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7efc9cb-db5c-3d69-9194-6bdb71df66e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:65:c5:6c:1a:9a:d3:c5:8f:de:8c:c2:d2:1b:ed:0b:c4:66: 49:97:88:7a:74:eb:56:ab:02:91:43:6b:af:38:6c:b2:d7:0d: 29:ef:58:bc:62:77:75:7b:94:79:bc:28:1e:3e:bc:3a:bb:ae: cf:fe:25:3c:87:6b:55:3b:81:9b:76:8b:c7:10:ae:5e:64:3b: a8:13:8d:d5:5b:0e:49:24:9c:fc:62:d4:cf:15:13:4b:fb:bf: 3e:db:56:88:18:21:ec:cc:61:c7:b6:87:91:56:27:51:7a:eb: 6e:6c:52:57:be:23:d6:a7:6c:db:37:3c:ff:b7:87:c5:ce:f0: 46:80:cf:05:f9:b7:1e:13:0d:12:42:c9:f5:a5:c7:76:d5:5a: 64:6a:0c:70:9d:e6:2f:88:19:4f:22:30:ab:cb:4c:15:c7:25: db:ad:de:13:70:a6:7a:ce:d6:d8:f1:21:6e:fb:e7:b0:57:95: 07:2d:9f:a0:0c:94:5f:c6:aa:37:70:6d:84:76:2f:5a:85:0e: 66:8f:05:5a:22:84:9b:e7:93:51:d1:5e:5f:89:47:1c:15:2a: 0e:7f:e3:63:c0:52:75:7d:87:4c:d1:97:78:28:15:7d:20:2a: dd:a8:4f:14:99:53:a1:af:7f:aa:b2:03:c0:56:c4:29:83:c8: 3d:e6:4b:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9YWfwysJkUrPlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyMVoXDTI1MDQyMzEyMzgyMVowLzEtMCsGA1UEAxMk Yzc4NTczZDQtNTI0Mi00NzczLThmZDAtZjZiM2U4NTc5ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlYqtDnR2nxknK2VgftxMzQGSAx/Ptm81oa3 1qF3mVriUq9q8CmfN1MIa1BB9LqRgm/B/Bcs2LUWbk5YXull9pXkReHH8o5v6ylE 2pOozNQZNjlNyo5LB3TgH11db+XGuHHSeFCdwYL++BNfmLKRxHOIvVZD+Bpzc457 1J1qEMWHuNXbYbKm9N+uIH4FTRFnEVRIufen9FNedfZ2PIv9DyWAGA3i8hFYCyIi /oBCW78LWCMRnXgbUstVMXUxDvBS97Rhdh/9Uq8kdnnWr8u+L5Iwo9CdVe4HRspo N2MP8hISXIk8lzhEjmBc2E3J+lyEZcdNlWwoB4BLKU3WRC5P6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL7DJB8Lf7ZV45ZBIqDUQbkoFoNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTdlZmM5Y2ItZGI1Yy0z ZDY5LTkxOTQtNmJkYjcxZGY2NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCyZcVsGprTxY/ejMLSG+0LxGZJl4h6dOtWqwKR Q2uvOGyy1w0p71i8Ynd1e5R5vCgePrw6u67P/iU8h2tVO4GbdovHEK5eZDuoE43V Ww5JJJz8YtTPFRNL+78+21aIGCHszGHHtoeRVidReutubFJXviPWp2zbNzz/t4fF zvBGgM8F+bceEw0SQsn1pcd21VpkagxwneYviBlPIjCry0wVxyXbrd4TcKZ6ztbY 8SFu++ewV5UHLZ+gDJRfxqo3cG2Edi9ahQ5mjwVaIoSb55NR0V5fiUccFSoOf+Nj wFJ1fYdM0Zd4KBV9ICrdqE8UmVOhr3+qsgPAVsQpg8g95ksy -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:50 2025 by rpki-client