$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e237f7-cf97-32c0-9501-75908a42ff31.roa File: e8e237f7-cf97-32c0-9501-75908a42ff31.roa (raw, json) Hash identifier: TCdFvNtfc6FTeiBUMsFBG5Thn6pyrV05YhPjgEeYwN8= Subject key identifier: 0C:80:0F:A1:45:92:F5:4C:7C:07:78:DE:01:4D:F6:89:52:C3:01:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848AC60D0C9004CF5A2850FE5C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e237f7-cf97-32c0-9501-75908a42ff31.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 36627 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:d0:c9:00:4c:f5:a2:85:0f:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=2663c44f-c74c-43b6-8c85-bb9bde504c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e9:8e:0d:8c:d0:e3:16:93:9c:7a:3e:fa:f3: 5b:a9:ab:5b:87:70:89:3b:1a:04:1d:3a:4e:97:26: db:57:35:aa:3a:78:4b:d1:b4:e4:ca:c4:80:c5:14: 4d:c5:18:b3:ad:c3:70:e3:8c:80:9a:cd:61:78:88: 09:76:10:8c:fb:51:e0:91:23:25:12:91:7a:31:c4: fc:da:1e:9b:7b:54:5b:f1:4b:94:25:e2:4c:47:fe: e4:c4:8b:43:e3:c1:45:2d:c2:e4:3b:ac:8e:50:be: 06:4e:63:4d:6b:1f:42:88:8b:13:39:e8:2c:31:fe: 5d:82:a2:57:c0:a0:ee:83:98:38:33:de:f0:79:8a: 90:e5:d4:3e:50:15:49:28:7d:17:5e:c6:cc:2a:5b: d9:67:25:c1:c7:e4:cb:3a:57:3b:d6:6e:9e:5b:5e: e8:a7:d0:6e:ef:c2:6a:13:a0:da:80:28:7b:22:de: fd:db:1a:17:f3:d7:b5:ce:b5:01:35:5d:c0:eb:27: 8c:7f:a5:74:91:94:ea:e1:a6:90:bd:99:ff:68:10: ba:6d:ca:e3:0d:79:e0:0d:9f:5e:fd:17:12:ff:bf: 63:1d:15:8a:ab:91:5b:3c:d5:da:1c:eb:3f:c9:8f: 78:53:c0:4c:2c:08:b8:d7:62:f3:62:a4:a7:3e:be: f8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:80:0F:A1:45:92:F5:4C:7C:07:78:DE:01:4D:F6:89:52:C3:01:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8e237f7-cf97-32c0-9501-75908a42ff31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a3:9a:ce:06:a2:9c:65:d4:5d:01:91:32:aa:8b:d8:4d:e1: 50:87:31:e9:dd:cf:98:11:97:b4:ac:7c:8f:4f:ad:35:73:e4: 3d:d2:25:c3:ad:86:f1:f2:65:24:f2:c8:c4:57:45:c8:7f:ae: ea:6f:5a:11:f6:d2:3f:c5:73:1f:b9:83:e3:53:74:30:be:5c: 7f:e7:2b:b1:bf:b5:80:a0:01:fb:88:ce:63:1b:9e:d5:27:db: 17:90:98:c5:f6:56:49:2f:55:30:69:20:f3:ab:ee:33:fe:3d: 65:68:3b:70:19:5c:9a:de:37:fc:8b:5d:91:88:93:25:c1:2e: d8:6f:35:43:08:77:17:2c:c0:64:2b:63:64:b1:f0:af:8d:fb: 1e:fc:5d:42:06:0c:c7:b6:78:70:61:4f:f4:91:b2:94:bd:89: b7:b0:0b:ff:fb:1b:fc:08:2d:b4:ba:e8:48:48:11:80:47:ec: ca:30:0f:6b:00:05:d8:a0:c3:b2:dd:2f:76:04:fc:0d:17:fa: 10:c8:50:a7:29:f5:fb:43:2d:05:5c:25:dd:ce:d5:15:26:e6: ba:a7:56:ea:9f:0c:a4:3a:c0:ee:cb:92:f7:87:f9:e0:79:ef: c0:31:39:bd:22:68:1c:a5:eb:d8:0d:88:fd:41:ab:9e:23:22: 30:fa:bf:40 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEisYNDJAEz1ooUP5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk MjY2M2M0NGYtYzc0Yy00M2I2LThjODUtYmI5YmRlNTA0YzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmumODYzQ4xaTnHo++vNbqatbh3CJOxoEHTpO lybbVzWqOnhL0bTkysSAxRRNxRizrcNw44yAms1heIgJdhCM+1HgkSMlEpF6McT8 2h6be1Rb8UuUJeJMR/7kxItD48FFLcLkO6yOUL4GTmNNax9CiIsTOegsMf5dgqJX wKDug5g4M97weYqQ5dQ+UBVJKH0XXsbMKlvZZyXBx+TLOlc71m6eW17op9Bu78Jq E6DagCh7It792xoX89e1zrUBNV3A6yeMf6V0kZTq4aaQvZn/aBC6bcrjDXngDZ9e /RcS/79jHRWKq5FbPNXaHOs/yY94U8BMLAi412LzYqSnPr74NwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAyAD6FFkvVMfAd43gFN9olSwwHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZThlMjM3ZjctY2Y5Ny0z MmMwLTk1MDEtNzU5MDhhNDJmZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAoo5rOBqKcZdRdAZEyqovYTeFQhzHp3c+YEZe0 rHyPT601c+Q90iXDrYbx8mUk8sjEV0XIf67qb1oR9tI/xXMfuYPjU3Qwvlx/5yux v7WAoAH7iM5jG57VJ9sXkJjF9lZJL1UwaSDzq+4z/j1laDtwGVya3jf8i12RiJMl wS7YbzVDCHcXLMBkK2NksfCvjfse/F1CBgzHtnhwYU/0kbKUvYm3sAv/+xv8CC20 uuhISBGAR+zKMA9rAAXYoMOy3S92BPwNF/oQyFCnKfX7Qy0FXCXdztUVJua6p1bq nwykOsDuy5L3h/ngee/AMTm9ImgcpevYDYj9QaueIyIw+r9A -----END CERTIFICATE-----Generated at Fri Apr 11 22:54:09 2025 by rpki-client