$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbecedcc-3dcc-3dcf-919c-2ed57b13ca0c.roa File: cbecedcc-3dcc-3dcf-919c-2ed57b13ca0c.roa (raw, json) Hash identifier: +pFuSOkvZBCAHoFdfh66Eq8xY3SwrW91EJq9pBAqiz4= Subject key identifier: BF:16:63:7D:4D:1F:11:42:1E:E7:B5:A2:0C:C5:F9:2C:7F:FD:12:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BA56355E0E393C9C224EB8D0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbecedcc-3dcc-3dcf-919c-2ed57b13ca0c.roa Signing time: Fri 31 Jan 2025 14:00:51 +0000 ROA not before: Fri 31 Jan 2025 14:00:51 +0000 ROA not after: Thu 01 May 2025 13:00:51 +0000 asID: 397196 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ba:56:35:5e:0e:39:3c:9c:22:4e:b8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 31 14:00:51 2025 GMT Not After : May 1 13:00:51 2025 GMT Subject: CN=bf611dab-96cd-4255-b187-7c890ace4a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ee:6a:78:99:97:f1:dd:72:d7:b3:cb:7f:e1: 96:e0:8e:62:a2:0e:7f:b8:60:7c:12:69:cf:0d:18: 71:55:e0:23:4c:98:b4:25:29:6e:8d:92:37:9b:0b: 18:d8:cf:97:20:e3:1f:f3:f7:20:59:f8:9d:fc:02: 05:2a:db:de:12:f7:7f:f5:80:57:bf:d2:d4:6c:c3: 7a:c3:4d:10:5c:77:25:28:fb:27:61:b1:57:d7:6d: 58:dd:b3:7f:9f:ae:90:68:26:7f:20:44:ed:6b:3c: 2a:a9:80:a5:a4:6b:e8:ee:1f:e1:22:2d:21:f1:c4: 2b:90:a8:64:42:ca:00:49:f7:2f:b9:33:7f:90:e0: c6:59:3c:2c:a1:d9:4d:b3:10:0e:d1:9b:f9:dc:37: 7f:26:32:69:41:8d:4d:62:80:3f:1d:48:7b:eb:84: 72:5a:d1:0f:e9:2a:f0:40:5d:a4:ef:2b:7a:93:7c: 14:90:e5:8e:b8:6b:6e:10:d9:10:46:51:ea:ab:39: aa:30:51:30:33:f0:de:fb:45:a1:e4:cb:a1:f4:a6: 46:f7:83:15:d0:0b:ab:da:38:3f:c7:13:9f:c2:51: 70:67:f2:69:59:2a:20:93:4d:19:ee:e4:a6:96:60: 0d:a9:9c:7b:a4:ea:db:5c:18:f1:8c:60:22:00:cd: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:16:63:7D:4D:1F:11:42:1E:E7:B5:A2:0C:C5:F9:2C:7F:FD:12:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbecedcc-3dcc-3dcf-919c-2ed57b13ca0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:25:3f:3e:63:be:8c:57:57:e8:c5:d9:f7:07:f4:f0:26:ea: b6:0e:b1:85:00:f2:13:02:03:64:4c:06:bc:4d:85:af:aa:08: 20:a2:55:53:2e:36:05:30:e1:4f:99:ec:4d:0c:b0:56:09:ad: 27:44:44:de:fc:f2:23:27:61:2f:18:06:6d:84:1d:25:ae:3d: af:68:d0:b0:5f:d7:ab:b6:0b:4e:2d:17:57:f6:65:f7:6b:f2: 19:29:dc:01:1a:50:ee:36:10:2d:55:0d:7c:8e:1a:82:c4:37: fb:f9:cf:79:4d:91:76:ec:bd:99:3e:2e:80:b1:e3:47:f8:99: 62:16:a1:8c:da:c2:d7:9c:bc:a2:2e:20:ef:d6:20:55:2b:34: bc:39:bd:1c:0c:03:9c:e6:60:6f:78:1b:bb:88:d8:84:40:69: f1:fd:f8:c0:ac:53:5f:22:83:90:0e:c3:e7:4d:2f:0f:a2:a9: 6b:9f:a3:34:35:1e:d5:f4:ab:ac:3d:ab:79:de:70:92:57:7b: d7:0d:c0:5d:85:5b:99:9a:a4:42:67:a9:48:c6:a6:31:0b:fa: 57:35:05:53:08:90:e0:83:57:44:0f:92:21:cc:d3:c1:bf:23: 3c:a1:e8:e8:b2:ea:e1:6b:75:85:b4:1e:d9:78:1c:8d:df:37: 8f:58:de:ca -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjVeDjk8nCJOuNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk YmY2MTFkYWItOTZjZC00MjU1LWIxODctN2M4OTBhY2U0YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe5qeJmX8d1y17PLf+GW4I5iog5/uGB8EmnP DRhxVeAjTJi0JSlujZI3mwsY2M+XIOMf8/cgWfid/AIFKtveEvd/9YBXv9LUbMN6 w00QXHclKPsnYbFX121Y3bN/n66QaCZ/IETtazwqqYClpGvo7h/hIi0h8cQrkKhk QsoASfcvuTN/kODGWTwsodlNsxAO0Zv53Dd/JjJpQY1NYoA/HUh764RyWtEP6Srw QF2k7yt6k3wUkOWOuGtuENkQRlHqqzmqMFEwM/De+0Wh5Muh9KZG94MV0Aur2jg/ xxOfwlFwZ/JpWSogk00Z7uSmlmANqZx7pOrbXBjxjGAiAM1MxQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL8WY31NHxFCHue1ogzF+Sx//RJHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2JlY2VkY2MtM2RjYy0z ZGNmLTkxOWMtMmVkNTdiMTNjYTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCqJT8+Y76MV1foxdn3B/TwJuq2DrGFAPITAgNk TAa8TYWvqgggolVTLjYFMOFPmexNDLBWCa0nRETe/PIjJ2EvGAZthB0lrj2vaNCw X9ertgtOLRdX9mX3a/IZKdwBGlDuNhAtVQ18jhqCxDf7+c95TZF27L2ZPi6AseNH +JliFqGM2sLXnLyiLiDv1iBVKzS8Ob0cDAOc5mBveBu7iNiEQGnx/fjArFNfIoOQ DsPnTS8Poqlrn6M0NR7V9KusPat53nCSV3vXDcBdhVuZmqRCZ6lIxqYxC/pXNQVT CJDgg1dED5IhzNPBvyM8oejosurha3WFtB7ZeByN3zePWN7K -----END CERTIFICATE-----Generated at Sat Apr 12 02:09:03 2025 by rpki-client