$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa994d3b-076e-3912-acf0-98362aad8466.roa File: aa994d3b-076e-3912-acf0-98362aad8466.roa (raw, json) Hash identifier: qGauay5mtVcGkiG929S+Ed/RmSSzxPr1noAwMshXSck= Subject key identifier: FE:A3:EF:0B:09:53:26:7B:4F:43:2C:BF:B1:FC:65:B0:9D:60:0C:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848AC60C63875F3E4C04ED397C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa994d3b-076e-3912-acf0-98362aad8466.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 396543 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:c6:38:75:f3:e4:c0:4e:d3:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=91bab4a4-b904-4b2f-ad81-5ae9b81d01a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:4e:f1:df:04:74:d5:b0:ef:d5:e1:01:fd: 0f:2a:60:02:a6:45:96:20:f5:f4:c0:d9:16:17:de: 16:2c:42:76:e7:ed:75:06:fe:61:f1:fa:10:6f:a0: b2:b8:b3:c2:8b:15:1e:a9:10:29:d8:c5:0b:53:66: c8:fb:cb:c2:a7:b7:55:b5:d5:fc:65:d3:6f:40:b7: 03:79:72:f0:b5:1f:2f:b6:10:dc:b2:0e:e2:75:86: 62:94:dc:3a:1f:0d:b5:58:dc:1d:85:45:87:a2:6b: 19:e0:4f:f9:b9:1c:96:9c:7f:3b:b7:05:f2:6e:9a: 6c:3d:1b:a5:99:98:8a:53:18:d6:f6:6f:47:4f:b9: c6:8a:f6:65:37:73:1a:11:e8:90:29:05:fc:48:f6: 73:bc:5b:d4:fe:46:91:d9:18:4e:2b:54:92:33:ec: 64:21:49:ca:f1:7e:94:5d:52:79:d5:b4:cd:6f:59: eb:37:e2:c1:d1:50:48:0d:69:4a:0a:f8:83:1a:90: c4:ea:fe:6f:cd:27:d2:c7:a1:dd:a9:fd:cb:e7:43: b2:44:9a:93:86:55:68:72:f1:60:e0:36:ac:0e:60: e7:aa:48:99:26:28:bb:4e:f4:d7:03:ad:63:57:13: 03:3f:f9:09:de:20:8e:26:fd:b7:81:37:98:a6:06: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A3:EF:0B:09:53:26:7B:4F:43:2C:BF:B1:FC:65:B0:9D:60:0C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa994d3b-076e-3912-acf0-98362aad8466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:86:33:68:b5:73:ba:02:cf:09:71:f2:9d:62:01:76:3d:40: ee:e4:33:13:00:ff:14:27:f1:a2:58:95:c4:33:39:7b:90:8a: 91:fa:62:36:72:30:7f:0c:ba:36:52:1a:08:09:c4:f5:c7:e0: 44:81:67:9d:98:68:85:ce:65:de:2b:c4:82:78:fc:17:d8:43: a6:59:01:e6:61:18:ad:05:a9:df:92:24:63:f7:06:06:88:3e: e8:70:28:51:78:c8:1d:ec:c7:df:3d:27:b8:16:85:98:d8:ad: 15:f9:8e:e1:5c:07:d8:32:39:99:4d:1b:55:b7:98:14:60:49: 82:76:d5:7d:d0:c8:7b:95:0f:f0:52:14:59:76:38:05:c7:d2: b8:7b:30:d8:56:40:5c:bb:dc:4e:c9:75:2e:21:dc:ab:76:56: d7:d6:22:07:9d:59:45:36:e7:02:1a:7c:e0:7e:51:bc:88:0c: 3a:b2:a0:e8:7e:77:5b:4c:b6:c0:d0:c8:72:88:2b:cc:88:60: 63:ab:07:ad:e4:06:44:bb:0a:8d:08:36:84:15:b1:4b:47:72: 37:c5:53:7f:6c:e4:b3:65:5c:ff:07:da:94:c2:df:ae:cf:8a: ec:65:f1:87:2a:8c:e5:e4:a7:24:a7:18:9a:bf:e2:d9:ff:b2: d8:5a:0f:70 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEisYMY4dfPkwE7Tl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk OTFiYWI0YTQtYjkwNC00YjJmLWFkODEtNWFlOWI4MWQwMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYlO8d8EdNWw79XhAf0PKmACpkWWIPX0wNkW F94WLEJ25+11Bv5h8foQb6CyuLPCixUeqRAp2MULU2bI+8vCp7dVtdX8ZdNvQLcD eXLwtR8vthDcsg7idYZilNw6Hw21WNwdhUWHomsZ4E/5uRyWnH87twXybppsPRul mZiKUxjW9m9HT7nGivZlN3MaEeiQKQX8SPZzvFvU/kaR2RhOK1SSM+xkIUnK8X6U XVJ51bTNb1nrN+LB0VBIDWlKCviDGpDE6v5vzSfSx6Hdqf3L50OyRJqThlVocvFg 4DasDmDnqkiZJii7TvTXA61jVxMDP/kJ3iCOJv23gTeYpgZN5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP6j7wsJUyZ7T0Msv7H8ZbCdYAyAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE5OTRkM2ItMDc2ZS0z OTEyLWFjZjAtOTgzNjJhYWQ4NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBqhjNotXO6As8JcfKdYgF2PUDu5DMTAP8UJ/Gi WJXEMzl7kIqR+mI2cjB/DLo2UhoICcT1x+BEgWedmGiFzmXeK8SCePwX2EOmWQHm YRitBanfkiRj9wYGiD7ocChReMgd7MffPSe4FoWY2K0V+Y7hXAfYMjmZTRtVt5gU YEmCdtV90Mh7lQ/wUhRZdjgFx9K4ezDYVkBcu9xOyXUuIdyrdlbX1iIHnVlFNucC GnzgflG8iAw6sqDofndbTLbA0MhyiCvMiGBjqwet5AZEuwqNCDaEFbFLR3I3xVN/ bOSzZVz/B9qUwt+uz4rsZfGHKozl5Kckpxiav+LZ/7LYWg9w -----END CERTIFICATE-----Generated at Sat Apr 12 00:18:20 2025 by rpki-client