$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c811144d-9dfb-34c6-8258-0e002d9e75f2.roa File: c811144d-9dfb-34c6-8258-0e002d9e75f2.roa (raw, json) Hash identifier: O0A5Xxs8z7oqmZ/PwYLTFXClfTrqiPGoeVLXHFSZN+Y= Subject key identifier: 97:5F:23:B3:97:43:92:F5:08:EE:AA:FF:35:C7:EC:4C:6A:49:C0:F6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BA56399EA2C8653D1F235680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c811144d-9dfb-34c6-8258-0e002d9e75f2.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 36627 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:39:9e:a2:c8:65:3d:1f:23:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=18aa6da7-a741-45e2-b4b3-1c619eb0aa86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:17:37:7c:f1:4c:17:1d:66:4e:b0:48:74: b4:ed:c3:da:4d:17:00:47:cc:59:e4:a9:d5:ba:35: ad:29:a5:62:3f:66:a0:26:f9:2b:f3:fc:8d:30:9a: d8:3d:a3:cd:13:fc:7d:7a:2f:04:af:cf:76:57:5a: 66:74:48:27:40:82:95:53:0c:b8:f9:b9:4c:a4:99: 29:91:26:33:70:69:97:29:09:b1:61:eb:b9:aa:11: 2e:2b:76:57:f5:a3:d7:0b:39:5e:80:0b:47:f7:02: f4:69:21:4c:c0:37:82:b5:bc:cd:1e:9f:d1:76:02: 6d:98:9b:a9:91:b2:8c:11:89:09:8f:d9:3e:dd:18: 92:a5:09:84:42:bb:db:c2:30:65:3a:e7:d7:81:11: 87:ca:95:4d:c7:51:e1:62:53:07:8e:9e:a2:33:09: 16:90:0d:9e:c9:40:fd:c8:04:2a:ab:ce:5d:36:4e: 7a:0a:91:60:83:2b:96:4d:78:91:32:0a:24:3a:6a: fa:aa:be:4e:f0:11:8d:5e:22:8d:b9:ba:23:69:22: 0f:4c:b1:c6:64:54:58:ba:47:d8:08:06:7e:6b:9a: 54:8c:91:a6:84:f1:30:ac:d3:91:6e:2d:1a:bb:18: 7e:21:58:5b:94:27:80:60:4c:9b:59:48:23:c7:69: 88:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5F:23:B3:97:43:92:F5:08:EE:AA:FF:35:C7:EC:4C:6A:49:C0:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c811144d-9dfb-34c6-8258-0e002d9e75f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c0:d3:8f:0e:de:76:a8:b7:ed:5a:a6:84:b9:81:eb:88:ec: fe:b8:5b:60:e6:b2:8e:e2:b5:11:12:a5:27:31:46:e2:18:2d: f0:0e:5c:4c:07:42:ef:9a:c9:cf:4b:ec:97:d9:f4:aa:5c:d5: cb:5a:c5:51:8a:7f:80:bf:d1:fb:33:51:c4:00:2f:ae:11:5d: c6:2e:fc:6c:dc:7c:a7:dd:3e:3c:8f:12:fd:b8:6c:ed:25:06: c5:84:c1:d5:a3:08:78:5c:ff:d6:06:70:32:cc:8e:42:45:dc: b4:6a:70:d9:bb:b9:8c:b9:ae:31:c8:bf:e8:a9:c7:02:bc:24: 39:5c:d1:b6:20:0b:37:78:b8:54:25:91:f1:af:6e:39:e2:10: 35:c0:94:fb:66:a1:c6:7e:fb:96:d4:4e:b3:14:08:94:7d:53: ca:b3:e4:ec:4e:80:b7:51:d7:d0:e1:b4:e7:d7:52:52:5b:0c: 2e:e4:b8:47:8b:46:a8:7f:aa:a5:09:a4:72:e4:09:bf:96:89: f8:51:c4:e8:f2:95:33:97:a8:06:de:08:b2:22:33:8f:24:e5: f1:a1:a1:08:f4:dd:b4:07:78:32:5e:98:fb:57:a0:17:6e:c4: f3:d8:a9:19:02:5e:06:a5:28:79:53:b5:c9:11:6f:98:ba:ce: c9:65:3b:6c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjmeoshlPR8jVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk MThhYTZkYTctYTc0MS00NWUyLWI0YjMtMWM2MTllYjBhYTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJEXN3zxTBcdZk6wSHS07cPaTRcAR8xZ5KnV ujWtKaViP2agJvkr8/yNMJrYPaPNE/x9ei8Er892V1pmdEgnQIKVUwy4+blMpJkp kSYzcGmXKQmxYeu5qhEuK3ZX9aPXCzlegAtH9wL0aSFMwDeCtbzNHp/RdgJtmJup kbKMEYkJj9k+3RiSpQmEQrvbwjBlOufXgRGHypVNx1HhYlMHjp6iMwkWkA2eyUD9 yAQqq85dNk56CpFggyuWTXiRMgokOmr6qr5O8BGNXiKNubojaSIPTLHGZFRYukfY CAZ+a5pUjJGmhPEwrNORbi0auxh+IVhblCeAYEybWUgjx2mIAwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJdfI7OXQ5L1CO6q/zXH7ExqScD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzgxMTE0NGQtOWRmYi0z NGM2LTgyNTgtMGUwMDJkOWU3NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCYwNOPDt52qLftWqaEuYHriOz+uFtg5rKO4rUR EqUnMUbiGC3wDlxMB0LvmsnPS+yX2fSqXNXLWsVRin+Av9H7M1HEAC+uEV3GLvxs 3Hyn3T48jxL9uGztJQbFhMHVowh4XP/WBnAyzI5CRdy0anDZu7mMua4xyL/oqccC vCQ5XNG2IAs3eLhUJZHxr2454hA1wJT7ZqHGfvuW1E6zFAiUfVPKs+TsToC3UdfQ 4bTn11JSWwwu5LhHi0aof6qlCaRy5Am/lon4UcTo8pUzl6gG3giyIjOPJOXxoaEI 9N20B3gyXpj7V6AXbsTz2KkZAl4GpSh5U7XJEW+Yus7JZTts -----END CERTIFICATE-----Generated at Fri Apr 11 22:29:36 2025 by rpki-client