$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77e8e43-de90-3a24-9fdf-5cd6fa907580.roa File: f77e8e43-de90-3a24-9fdf-5cd6fa907580.roa (raw, json) Hash identifier: YcK8ZBed1y9mjiBLN8m0U98UFmbuxaxx2WqWJMwZ9zc= Subject key identifier: 87:13:1F:96:54:D4:57:48:C6:D0:F5:36:ED:9C:9F:09:AA:AB:A6:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848BFEB9CA85CBCE4BE00965B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77e8e43-de90-3a24-9fdf-5cd6fa907580.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 40647 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:9c:a8:5c:bc:e4:be:00:96:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=a8c77af3-f32d-4881-b091-6d12e235325c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0f:c3:6d:66:89:58:f5:a4:12:85:1a:ce:e1: 9e:5b:95:a3:0d:34:41:3e:a5:63:51:dd:53:a8:74: 09:67:2c:c3:8b:81:58:6e:0d:64:4e:7a:84:cb:2f: 28:dc:75:04:45:d5:57:7b:5c:2f:10:f4:32:44:9a: 34:21:c3:8d:f3:21:86:c8:96:e5:b9:32:34:c6:15: 5c:2f:fe:6e:ef:a4:44:11:cd:e3:a4:b3:bb:36:2a: 5a:c5:de:d5:0a:70:c5:33:cb:a0:e4:28:b2:1f:81: 1c:09:58:98:d0:b3:81:02:ab:e6:d8:31:55:b1:e6: 7b:ce:80:aa:8a:99:ec:78:fc:da:78:31:fe:ce:4b: c9:0d:52:6a:ba:da:41:83:8d:0f:e2:66:62:9b:bd: ee:bc:17:6e:06:9e:65:a5:e4:a9:20:94:c7:2d:b4: eb:4e:00:23:1d:60:f4:c1:06:f1:ab:3c:f2:52:d7: c6:0e:e2:98:56:67:87:47:26:5e:0e:98:2a:54:3d: 19:f3:8e:8f:e4:a5:78:8b:40:dc:39:a1:db:c7:52: a8:fc:fd:1e:56:88:12:9a:04:7c:19:a3:82:24:8d: f7:3e:09:31:ed:b2:09:34:0f:54:f5:9c:fc:87:f6: 75:30:23:60:e1:4f:ba:f6:01:2f:1a:86:10:a3:f2: 03:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:13:1F:96:54:D4:57:48:C6:D0:F5:36:ED:9C:9F:09:AA:AB:A6:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77e8e43-de90-3a24-9fdf-5cd6fa907580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ce:71:e4:b9:81:e2:39:35:4b:03:1d:d1:90:79:de:a5:ed: 4e:3f:79:75:ea:7f:39:10:e4:5a:1f:c0:06:43:a0:00:97:52: 20:b0:1f:09:5c:e8:6e:7c:ad:7a:3b:b4:2e:10:5f:8a:be:60: 05:4d:ac:35:d3:61:8d:0b:99:bf:82:c3:1e:17:b1:0f:22:4a: f3:54:1c:42:54:ff:f2:1b:ee:d6:e7:a5:19:a5:35:13:a1:03: e8:73:b7:7d:2f:0a:fd:97:c8:ab:3e:e1:be:e4:f3:f3:93:c6: 96:9b:f6:3c:ce:07:b6:09:5a:ca:b3:26:cc:5d:ff:78:bc:8a: 89:63:1a:ca:a2:e7:e2:47:df:21:27:56:fd:99:5d:89:9f:11: 42:f4:f2:0f:f7:0b:b1:2d:13:f4:57:96:41:d9:dc:73:5b:fe: be:19:60:d9:e4:cf:5b:ec:b6:69:cb:b9:49:99:96:45:1b:40: 3a:00:91:71:20:57:f8:d2:00:65:5d:df:61:67:77:05:cf:1e: a6:27:b5:0d:65:7d:e1:98:04:a7:4f:81:49:ba:ca:1d:78:0f: 5c:51:4c:97:84:db:04:d1:80:80:8a:27:01:85:0a:61:2f:d2: 39:19:24:75:c8:ef:66:e9:24:80:15:96:91:66:0d:dc:ac:7d: 92:65:1e:8c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi/65yoXLzkvgCWW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YThjNzdhZjMtZjMyZC00ODgxLWIwOTEtNmQxMmUyMzUzMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ/DbWaJWPWkEoUazuGeW5WjDTRBPqVjUd1T qHQJZyzDi4FYbg1kTnqEyy8o3HUERdVXe1wvEPQyRJo0IcON8yGGyJbluTI0xhVc L/5u76REEc3jpLO7Nipaxd7VCnDFM8ug5CiyH4EcCViY0LOBAqvm2DFVseZ7zoCq ipnsePzaeDH+zkvJDVJqutpBg40P4mZim73uvBduBp5lpeSpIJTHLbTrTgAjHWD0 wQbxqzzyUtfGDuKYVmeHRyZeDpgqVD0Z846P5KV4i0DcOaHbx1Ko/P0eVogSmgR8 GaOCJI33Pgkx7bIJNA9U9Zz8h/Z1MCNg4U+69gEvGoYQo/ID2wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIcTH5ZU1FdIxtD1Nu2cnwmqq6YeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjc3ZThlNDMtZGU5MC0z YTI0LTlmZGYtNWNkNmZhOTA3NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQADznHkuYHiOTVLAx3RkHnepe1OP3l16n85EORa H8AGQ6AAl1IgsB8JXOhufK16O7QuEF+KvmAFTaw102GNC5m/gsMeF7EPIkrzVBxC VP/yG+7W56UZpTUToQPoc7d9Lwr9l8irPuG+5PPzk8aWm/Y8zge2CVrKsybMXf94 vIqJYxrKoufiR98hJ1b9mV2JnxFC9PIP9wuxLRP0V5ZB2dxzW/6+GWDZ5M9b7LZp y7lJmZZFG0A6AJFxIFf40gBlXd9hZ3cFzx6mJ7UNZX3hmASnT4FJusodeA9cUUyX hNsE0YCAiicBhQphL9I5GSR1yO9m6SSAFZaRZg3crH2SZR6M -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:39 2025 by rpki-client