$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4d2703-826a-35e2-bae1-c5ee4deb2c23.roa File: ab4d2703-826a-35e2-bae1-c5ee4deb2c23.roa (raw, json) Hash identifier: jFybP9hyqRaEOnENk979cugOkr8J6Rdk1R632jQw114= Subject key identifier: F6:AE:FC:62:36:3F:75:CC:64:5B:15:42:68:31:05:55:BF:82:2A:7B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848AC60C92A83A06CA1E16CED80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4d2703-826a-35e2-bae1-c5ee4deb2c23.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 396558 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:c9:2a:83:a0:6c:a1:e1:6c:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=36415547-d88d-414d-98e2-c6222eb0fa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:22:46:1d:3d:43:eb:00:43:a2:e0:ef:60:31: 66:45:c8:41:f4:ba:5e:d1:b0:30:33:bb:d3:55:69: 08:51:32:c3:62:e1:e7:0b:c4:f0:8d:02:2c:c4:60: 08:d5:d3:43:68:f0:39:c3:c1:a2:30:7c:e2:13:7c: 41:7c:c8:68:d4:eb:68:cc:86:75:49:80:14:1d:a9: d3:80:3e:9e:f2:c0:7c:32:5b:5a:61:49:13:17:32: ff:6c:4a:ab:8f:19:3a:51:60:20:b7:72:b4:2d:d4: 90:af:3a:e7:ff:f7:98:c8:2e:17:09:91:11:6d:4f: e4:ff:52:40:ed:b3:3c:8e:b3:99:f4:26:7a:d8:2f: 19:a4:6b:0f:39:e5:91:5c:a9:8d:79:09:3c:12:af: 1b:e3:82:eb:4c:2e:84:f7:c0:c0:98:bc:93:2b:08: 67:87:06:d1:d3:38:4e:7e:21:24:a4:79:60:c0:e8: 07:fa:2b:dc:b2:39:d9:50:b1:df:c5:45:b9:3c:e5: ea:57:11:da:bd:d3:de:ed:6d:9d:f6:b8:93:dc:68: 48:52:38:6a:8f:88:18:f3:b6:03:3f:5c:e9:05:33: 86:8c:60:f1:d7:1a:39:a8:37:be:77:dc:7a:03:aa: a4:91:a3:a9:1e:e1:fb:b1:cc:07:b8:ca:2d:0d:30: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AE:FC:62:36:3F:75:CC:64:5B:15:42:68:31:05:55:BF:82:2A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab4d2703-826a-35e2-bae1-c5ee4deb2c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:21:e5:54:2c:2a:39:b6:1e:9f:31:34:c9:6b:ea:3d:84:7b: 4e:f4:fc:87:7d:51:97:54:e0:0c:7c:10:f0:46:e7:97:b8:60: 06:64:c9:16:26:91:37:f7:e4:15:cb:6c:e0:2d:fc:37:5b:96: a9:0d:48:3e:88:08:84:f4:3f:2d:12:83:d1:71:68:9c:88:24: 99:65:f0:68:8f:9b:8e:2e:75:63:60:20:32:f7:12:50:80:b0: 78:6d:80:7b:39:e8:a7:5f:29:56:f9:18:b7:4d:fd:76:85:e5: 86:1e:f6:d1:c1:97:12:30:c5:a2:6c:b6:32:f7:96:e9:f0:82: 0c:68:79:c4:e4:14:bd:16:86:2a:7b:8b:2c:89:f1:b4:79:be: c2:d4:51:80:6a:15:18:65:52:c9:f7:43:32:11:37:23:f9:cb: 90:7b:49:04:c2:e0:8e:5c:b7:7f:b8:bb:1f:3a:38:03:c6:e8: 3b:c1:1c:e0:e9:43:d9:3a:25:50:2e:b0:0e:e9:e9:b4:58:36: 4a:3f:07:67:06:8e:23:53:22:79:37:4f:d5:0f:cd:25:c4:32: 59:d3:8f:73:40:27:ef:b0:db:51:a6:91:65:d8:f7:d3:77:b1: 97:03:fa:4d:2a:7a:96:78:41:ed:26:63:d7:61:ea:14:fb:f9: 55:f8:1e:d7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEisYMkqg6BsoeFs7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk MzY0MTU1NDctZDg4ZC00MTRkLTk4ZTItYzYyMjJlYjBmYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiJGHT1D6wBDouDvYDFmRchB9Lpe0bAwM7vT VWkIUTLDYuHnC8TwjQIsxGAI1dNDaPA5w8GiMHziE3xBfMho1OtozIZ1SYAUHanT gD6e8sB8MltaYUkTFzL/bEqrjxk6UWAgt3K0LdSQrzrn//eYyC4XCZERbU/k/1JA 7bM8jrOZ9CZ62C8ZpGsPOeWRXKmNeQk8Eq8b44LrTC6E98DAmLyTKwhnhwbR0zhO fiEkpHlgwOgH+ivcsjnZULHfxUW5POXqVxHavdPe7W2d9riT3GhIUjhqj4gY87YD P1zpBTOGjGDx1xo5qDe+d9x6A6qkkaOpHuH7scwHuMotDTCRoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPau/GI2P3XMZFsVQmgxBVW/gip7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWI0ZDI3MDMtODI2YS0z NWUyLWJhZTEtYzVlZTRkZWIyYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCqIeVULCo5th6fMTTJa+o9hHtO9PyHfVGXVOAM fBDwRueXuGAGZMkWJpE39+QVy2zgLfw3W5apDUg+iAiE9D8tEoPRcWiciCSZZfBo j5uOLnVjYCAy9xJQgLB4bYB7OeinXylW+Ri3Tf12heWGHvbRwZcSMMWibLYy95bp 8IIMaHnE5BS9FoYqe4ssifG0eb7C1FGAahUYZVLJ90MyETcj+cuQe0kEwuCOXLd/ uLsfOjgDxug7wRzg6UPZOiVQLrAO6em0WDZKPwdnBo4jUyJ5N0/VD80lxDJZ049z QCfvsNtRppFl2PfTd7GXA/pNKnqWeEHtJmPXYeoU+/lV+B7X -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:16 2025 by rpki-client