$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0e91b1f-6124-3622-ac72-6e333e7da03f.roa File: c0e91b1f-6124-3622-ac72-6e333e7da03f.roa (raw, json) Hash identifier: QGN6v6t4G+zhOi8LKenUDYA9PQsGkGOZCnSPEnhsGvQ= Subject key identifier: 67:0E:3A:54:32:10:AE:DF:CF:AE:1A:85:DC:9D:FB:14:BB:BE:5C:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848A3F58DF00BA9AB2C42813800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0e91b1f-6124-3622-ac72-6e333e7da03f.roa Signing time: Thu 23 Jan 2025 13:38:25 +0000 ROA not before: Thu 23 Jan 2025 13:38:25 +0000 ROA not after: Wed 23 Apr 2025 12:38:25 +0000 asID: 396568 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:f5:8d:f0:0b:a9:ab:2c:42:81:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 23 13:38:25 2025 GMT Not After : Apr 23 12:38:25 2025 GMT Subject: CN=44972bce-d08c-4464-b6df-fe6182606f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:ce:f6:3a:f7:69:3b:a8:38:c6:57:85:20: d7:90:1e:15:99:93:97:34:f0:89:9e:8b:57:17:07: ef:c1:5f:7d:26:5b:b0:d6:5a:1c:2f:46:24:9a:ac: 6c:f3:02:da:a1:89:f9:02:85:a6:11:91:04:25:fa: 09:95:0d:85:7b:60:b9:85:82:2b:08:28:c5:d1:b3: 21:da:01:6f:98:35:ba:a1:d6:7e:7c:66:3b:be:37: 41:a2:3c:c1:f7:3f:d3:11:c4:43:3c:a6:56:a9:3b: da:3a:dc:91:cc:28:71:e5:48:18:17:08:b7:14:93: 3a:33:c2:2e:9c:db:29:bf:b8:34:93:a4:91:d8:f1: d9:72:e7:d2:fc:76:33:be:89:4d:71:df:4e:e9:51: 5e:a4:a0:af:e7:22:2e:07:0c:9b:70:f6:ba:47:2a: 99:7d:0b:c9:cb:80:34:f4:5f:0e:9b:a5:18:93:4e: 7b:8e:94:e2:de:21:38:14:55:58:b5:94:d9:51:c9: 35:dd:04:73:75:9a:08:16:66:df:80:0e:1a:5e:22: 95:50:9c:31:27:77:c8:23:0a:48:30:89:c4:03:53: 88:a1:c5:2b:3e:88:43:05:93:ca:c5:48:0d:66:cc: 5c:69:d6:d5:13:bf:ae:e5:3f:17:68:17:47:de:ad: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0E:3A:54:32:10:AE:DF:CF:AE:1A:85:DC:9D:FB:14:BB:BE:5C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0e91b1f-6124-3622-ac72-6e333e7da03f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ac:3d:42:9b:64:b0:5c:31:ef:1a:72:65:2f:63:ac:e1:bc: b5:bd:e7:a1:06:50:1b:39:1a:61:29:8e:60:e2:ad:ac:7b:ea: 68:4d:35:48:d1:17:64:b5:db:6c:42:94:72:63:3a:d9:fb:1c: 07:5a:43:f0:03:8f:c9:ea:42:e7:5a:53:84:2f:ba:d8:85:ff: 5f:c8:ee:11:44:59:c1:30:4e:c9:de:95:d7:bc:1f:55:ce:30: dc:10:ed:ed:d6:a1:71:a8:d0:bf:5d:78:05:8f:6f:ce:4a:c7: bb:3c:5c:1b:c9:09:72:0c:e8:8c:8f:46:c6:c5:37:e9:b2:33: af:33:ce:f8:26:e5:b8:e9:b6:e0:04:57:3c:05:06:cc:5e:24: ff:1d:57:27:e1:0e:09:1e:b2:6f:8c:59:92:8e:6e:b3:63:fd: f4:cb:07:97:ca:0d:b9:c2:d5:94:7c:d7:ff:0a:d3:fb:d7:4f: 46:8c:05:79:0f:da:bb:dc:69:58:d6:6b:fc:1c:f9:bd:9c:28: 57:61:65:6d:26:06:2d:6c:68:7b:dc:78:ec:a5:a7:3d:8a:d7: f5:05:49:88:41:eb:ef:46:cf:87:15:75:31:0e:47:1e:00:65: 58:5c:a7:e8:78:17:2c:95:c0:32:27:9d:10:53:bb:92:6c:aa: 10:71:7c:39 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9Y3wC6mrLEKBOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyMzEzMzgyNVoXDTI1MDQyMzEyMzgyNVowLzEtMCsGA1UEAxMk NDQ5NzJiY2UtZDA4Yy00NDY0LWI2ZGYtZmU2MTgyNjA2ZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ7O9jr3aTuoOMZXhSDXkB4VmZOXNPCJnotX FwfvwV99Jluw1locL0Ykmqxs8wLaoYn5AoWmEZEEJfoJlQ2Fe2C5hYIrCCjF0bMh 2gFvmDW6odZ+fGY7vjdBojzB9z/TEcRDPKZWqTvaOtyRzChx5UgYFwi3FJM6M8Iu nNspv7g0k6SR2PHZcufS/HYzvolNcd9O6VFepKCv5yIuBwybcPa6RyqZfQvJy4A0 9F8Om6UYk057jpTi3iE4FFVYtZTZUck13QRzdZoIFmbfgA4aXiKVUJwxJ3fIIwpI MInEA1OIocUrPohDBZPKxUgNZsxcadbVE7+u5T8XaBdH3q0+NQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGcOOlQyEK7fz64ahdyd+xS7vlxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzBlOTFiMWYtNjEyNC0z NjIyLWFjNzItNmUzMzNlN2RhMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBarD1Cm2SwXDHvGnJlL2Os4by1veehBlAbORph KY5g4q2se+poTTVI0RdktdtsQpRyYzrZ+xwHWkPwA4/J6kLnWlOEL7rYhf9fyO4R RFnBME7J3pXXvB9VzjDcEO3t1qFxqNC/XXgFj2/OSse7PFwbyQlyDOiMj0bGxTfp sjOvM874JuW46bbgBFc8BQbMXiT/HVcn4Q4JHrJvjFmSjm6zY/30yweXyg25wtWU fNf/CtP7109GjAV5D9q73GlY1mv8HPm9nChXYWVtJgYtbGh73Hjspac9itf1BUmI QevvRs+HFXUxDkceAGVYXKfoeBcslcAyJ50QU7uSbKoQcXw5 -----END CERTIFICATE-----Generated at Sun Apr 13 00:25:13 2025 by rpki-client