$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa File: bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa (raw, json) Hash identifier: e2hrk79zCfzahgMKQynj5l3XlIc9XzjOZoKn62xlbGk= Subject key identifier: 9A:F1:B5:2F:E2:02:C4:83:34:59:F7:48:16:CF:FB:CA:A0:02:C8:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BFEB990AF5B47EA6C6693020 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396554 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:99:0a:f5:b4:7e:a6:c6:69:30:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=8da8b45e-072c-47ea-b141-d0b9cb064b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:1c:cd:0f:48:a5:ab:26:5b:62:43:b0:db: 38:f4:d9:ac:1c:f4:82:82:3b:d8:3e:4b:41:e7:ec: 9f:2a:7d:9e:20:4f:02:81:2c:c6:0c:95:72:26:bc: ff:39:05:72:c9:65:40:e8:a4:9d:55:6a:0b:52:fd: b5:55:d9:ed:2f:5c:65:0e:af:16:d2:bf:bc:43:31: 0d:e5:d1:30:98:45:05:38:65:5b:dc:38:48:92:f1: 6b:35:ea:59:32:a1:b6:1e:f9:c2:5b:4e:c8:13:8a: 6b:11:37:33:e8:c7:5c:aa:eb:46:1b:10:52:03:6f: d5:de:74:84:be:a9:5f:67:10:5e:ee:91:1f:58:ca: dc:3c:93:19:68:13:43:ae:33:8a:e3:f0:fe:c9:3b: 61:91:4f:2e:9a:05:19:58:4d:e8:be:ad:39:0d:f1: 9e:45:0d:bc:b2:69:cd:24:9d:6e:35:32:5d:29:46: 7e:25:ef:45:18:5f:6e:8a:21:d3:e5:40:46:39:76: e8:13:89:05:42:7d:32:fe:ae:f7:d8:b8:92:48:ae: 2b:dc:4c:e7:e5:31:92:96:7b:45:54:d4:f3:e8:6d: 9d:57:51:02:69:c9:18:3d:66:a1:52:d9:10:c2:b5: a8:7a:f2:b4:3a:78:8a:ee:03:20:4a:a5:47:c7:27: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F1:B5:2F:E2:02:C4:83:34:59:F7:48:16:CF:FB:CA:A0:02:C8:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1a:2e:b6:39:bc:22:72:d6:cf:28:3e:b1:ea:8a:e7:64:16: 2d:3f:20:ef:f5:04:cf:eb:f3:f1:64:50:34:07:13:6f:39:84: ab:30:aa:fd:c8:3f:89:92:95:b9:1b:14:e5:c4:2d:a4:2a:7a: d6:9c:18:8b:08:e0:e0:84:50:6e:5d:dd:c1:b9:21:20:57:72: 95:e6:de:64:ba:c8:13:6a:8b:9e:c9:a8:bb:bf:37:9b:38:36: e4:32:f9:74:25:62:5f:0f:62:63:77:8d:8f:a2:03:6f:8c:ea: 89:bc:38:15:81:b2:77:39:89:19:0f:c9:ac:d5:66:92:3a:d2: da:42:3d:e8:86:01:81:34:87:cc:7c:a9:da:3b:82:4d:df:09: 93:c3:10:0b:8f:2e:d5:f6:59:79:a5:45:2b:6c:f9:89:20:01: f9:cc:52:03:6a:50:cd:ad:d2:74:21:8e:2c:7e:97:fb:b6:21: da:32:99:31:c9:32:c3:e9:7e:88:ed:42:ee:8a:1d:9f:62:b4: e0:8b:b0:2d:63:cb:cd:c2:9c:65:53:a0:90:7b:e5:68:8e:ce: bf:ca:b8:27:90:02:31:ec:da:0a:f8:d4:c8:cd:30:f4:8a:4f: 92:66:d0:08:17:4b:3e:bd:2a:38:2a:66:2d:ef:6f:06:e8:9a: 67:fd:8d:9a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/65kK9bR+psZpMCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OGRhOGI0NWUtMDcyYy00N2VhLWIxNDEtZDBiOWNiMDY0YjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXMczQ9IpasmW2JDsNs49NmsHPSCgjvYPktB 5+yfKn2eIE8CgSzGDJVyJrz/OQVyyWVA6KSdVWoLUv21VdntL1xlDq8W0r+8QzEN 5dEwmEUFOGVb3DhIkvFrNepZMqG2HvnCW07IE4prETcz6MdcqutGGxBSA2/V3nSE vqlfZxBe7pEfWMrcPJMZaBNDrjOK4/D+yTthkU8umgUZWE3ovq05DfGeRQ28smnN JJ1uNTJdKUZ+Je9FGF9uiiHT5UBGOXboE4kFQn0y/q732LiSSK4r3Ezn5TGSlntF VNTz6G2dV1ECackYPWahUtkQwrWoevK0OniK7gMgSqVHxyc6JwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJrxtS/iAsSDNFn3SBbP+8qgAsiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmIzYTJhNDctZmQ4MC0z YThiLTgzZTktNWZlOWJiNDNjOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBNGi62ObwictbPKD6x6ornZBYtPyDv9QTP6/Px ZFA0BxNvOYSrMKr9yD+JkpW5GxTlxC2kKnrWnBiLCODghFBuXd3BuSEgV3KV5t5k usgTaoueyai7vzebODbkMvl0JWJfD2Jjd42PogNvjOqJvDgVgbJ3OYkZD8ms1WaS OtLaQj3ohgGBNIfMfKnaO4JN3wmTwxALjy7V9ll5pUUrbPmJIAH5zFIDalDNrdJ0 IY4sfpf7tiHaMpkxyTLD6X6I7ULuih2fYrTgi7AtY8vNwpxlU6CQe+Vojs6/yrgn kAIx7NoK+NTIzTD0ik+SZtAIF0s+vSo4KmYt728G6Jpn/Y2a -----END CERTIFICATE-----Generated at Sat Apr 12 00:16:27 2025 by rpki-client