$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdc60f0-e7c6-3e62-b73d-fdda5ca8c4bf.roa File: ccdc60f0-e7c6-3e62-b73d-fdda5ca8c4bf.roa (raw, json) Hash identifier: ymCOfZ1+5wDsUPykwm+gcVOTj9Sl5z260dmqFltK1HY= Subject key identifier: 0B:89:8C:AD:41:C5:09:E2:F6:4D:36:D4:28:1D:64:A7:4C:01:3C:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848AC60CCBF36D57D580A62AAC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdc60f0-e7c6-3e62-b73d-fdda5ca8c4bf.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 396575 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:cc:bf:36:d5:7d:58:0a:62:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=af72b834-5fb4-4950-ab66-72319bb9e341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:52:db:e8:63:9a:8e:8e:e6:48:8f:3d:c0: 89:d9:f1:c6:5c:bd:28:e4:11:97:00:9d:2a:38:e1: ee:10:87:7b:cc:86:7d:b4:e6:91:ec:dd:62:1f:71: ac:c0:be:08:30:d3:c7:6f:8f:5c:f5:83:f6:c3:12: 99:63:b3:ef:ab:f8:5f:36:2e:13:53:16:55:32:bd: 1a:80:af:ab:94:7c:a7:da:01:00:f5:4f:7c:1f:c7: e6:0d:45:9a:3c:4a:7f:1d:13:35:3a:6e:73:ee:86: a8:8a:2a:95:9d:de:c4:1d:83:3b:a6:07:98:f3:72: 85:8b:25:27:23:c4:06:83:9d:a4:d9:90:05:ec:ad: bb:77:00:8c:d5:39:23:db:2b:b4:fb:93:17:ec:0d: e7:cb:fb:a6:62:86:c4:0c:e2:65:d1:cb:d0:07:b5: 71:21:0f:06:20:bd:b9:27:69:0e:32:43:38:97:ba: 31:2e:24:fd:2a:7b:08:fc:1d:af:02:c8:f2:7a:f0: 4e:3f:aa:c5:01:06:0e:0c:21:20:a3:99:5a:ac:2d: 25:92:6b:87:1b:18:17:8f:6a:5f:c1:c0:a2:b6:e2: b7:a7:37:02:ea:98:d2:6d:3d:80:0f:d7:a3:e4:86: 16:e8:73:26:40:38:0c:0a:7f:2d:67:97:88:58:c8: 88:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:8C:AD:41:C5:09:E2:F6:4D:36:D4:28:1D:64:A7:4C:01:3C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ccdc60f0-e7c6-3e62-b73d-fdda5ca8c4bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:54:29:58:68:10:2b:24:c1:cc:bb:9a:07:e3:0e:a3:26:b2: 29:3b:bc:11:06:18:b8:0c:6a:43:43:3e:ca:6b:58:cf:c3:4f: 00:df:68:33:a6:58:46:8e:c1:f2:9a:ba:eb:11:c5:bd:ba:58: 04:aa:fb:ce:7f:f1:20:d6:01:73:cc:20:2d:52:6b:ad:3b:80: cf:19:02:aa:8b:78:ff:a1:bc:e1:48:24:c6:5a:5e:83:3f:e0: d3:c4:30:bc:da:ee:49:5c:68:ed:c1:80:9e:7a:ac:cf:0a:0e: de:f0:2f:58:6d:3c:0e:ea:3a:1b:03:e0:fb:b5:c2:81:b4:f3: 78:33:da:ac:45:f4:04:5f:b2:ed:70:44:73:a6:ec:d7:95:92: 2f:05:b1:85:07:79:96:6f:99:ab:a8:2f:ab:d4:78:c8:03:0b: 2f:5a:eb:51:d8:80:a7:3f:cb:e9:61:1d:d5:00:62:25:91:e5: 91:4a:f3:34:11:0e:4e:bb:a9:56:26:e7:1d:18:83:6a:02:cb: 22:5d:be:e0:73:9a:a0:74:bf:1d:86:d4:46:dd:16:11:8b:59: cc:13:d9:32:0e:35:c5:e4:f0:db:a3:53:32:93:da:40:28:87: fc:14:3a:c4:4e:9d:a9:83:3c:de:f4:1a:4b:10:db:23:56:87: 93:93:f7:a7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEisYMy/NtV9WApiqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk YWY3MmI4MzQtNWZiNC00OTUwLWFiNjYtNzIzMTliYjllMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSlS2+hjmo6O5kiPPcCJ2fHGXL0o5BGXAJ0q OOHuEId7zIZ9tOaR7N1iH3GswL4IMNPHb49c9YP2wxKZY7Pvq/hfNi4TUxZVMr0a gK+rlHyn2gEA9U98H8fmDUWaPEp/HRM1Om5z7oaoiiqVnd7EHYM7pgeY83KFiyUn I8QGg52k2ZAF7K27dwCM1Tkj2yu0+5MX7A3ny/umYobEDOJl0cvQB7VxIQ8GIL25 J2kOMkM4l7oxLiT9KnsI/B2vAsjyevBOP6rFAQYODCEgo5larC0lkmuHGxgXj2pf wcCituK3pzcC6pjSbT2AD9ej5IYW6HMmQDgMCn8tZ5eIWMiIcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAuJjK1BxQni9k021CgdZKdMATwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2NkYzYwZjAtZTdjNi0z ZTYyLWI3M2QtZmRkYTVjYThjNGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAoVClYaBArJMHMu5oH4w6jJrIpO7wRBhi4DGpD Qz7Ka1jPw08A32gzplhGjsHymrrrEcW9ulgEqvvOf/Eg1gFzzCAtUmutO4DPGQKq i3j/obzhSCTGWl6DP+DTxDC82u5JXGjtwYCeeqzPCg7e8C9YbTwO6jobA+D7tcKB tPN4M9qsRfQEX7LtcERzpuzXlZIvBbGFB3mWb5mrqC+r1HjIAwsvWutR2ICnP8vp YR3VAGIlkeWRSvM0EQ5Ou6lWJucdGINqAssiXb7gc5qgdL8dhtRG3RYRi1nME9ky DjXF5PDbo1Myk9pAKIf8FDrETp2pgzze9BpLENsjVoeTk/en -----END CERTIFICATE-----Generated at Fri Apr 11 23:46:22 2025 by rpki-client