$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e237e84-6a61-363f-8f54-18625e8ff8ac.roa File: 0e237e84-6a61-363f-8f54-18625e8ff8ac.roa (raw, json) Hash identifier: 17hAYbI6UhFBx9E08aam92DpKhq8udb8ZCop3v5IJ+w= Subject key identifier: 70:84:FF:D5:FB:32:D7:E5:29:BF:80:79:EE:64:D9:D9:F6:98:6C:48 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24BF92EE0B2856BEE2E020 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e237e84-6a61-363f-8f54-18625e8ff8ac.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396552 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bf:92:ee:0b:28:56:be:e2:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=7b890ca7-eca2-427f-977a-48abad8a94b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:bc:da:20:7d:c2:e4:8f:21:e1:2f:06:61: f5:67:53:c9:8e:0d:a2:8c:f5:a0:55:60:8f:cd:52: dd:6a:59:54:83:f4:e7:04:e4:c0:46:6d:ec:a9:78: 0c:d7:98:c5:dc:2a:25:a2:9d:c8:9a:5d:46:06:3b: 15:b8:02:81:f0:93:f9:f1:21:f2:2f:a5:73:4a:77: 95:7b:b3:56:ce:0f:60:8d:b0:fb:64:85:8c:80:b1: b9:32:93:0b:44:f9:c0:2a:bd:6f:83:6c:fc:fd:54: d8:50:71:30:85:59:4a:dc:96:b9:b1:cb:ee:35:b7: 3b:2c:54:37:fd:b9:67:b7:d7:76:7e:40:e8:6a:10: 74:a6:55:e5:6e:0f:40:89:d7:6c:b7:ab:4b:d6:9b: 45:3a:7a:fb:5b:c1:34:81:ff:f2:06:a6:65:32:db: be:ee:8e:0f:ca:ee:63:a4:22:9e:65:7b:d5:09:c5: 62:d8:2f:ac:23:43:1c:28:86:4f:98:4f:08:84:d5: 7b:3c:e0:42:b0:2e:fb:94:97:1e:97:34:5b:16:51: 4f:3d:76:a0:8f:f8:ef:3e:db:d5:94:31:84:4a:ec: 6a:4a:fa:01:7d:d5:16:0d:79:d7:2b:17:66:16:f7: 20:be:63:c1:4a:63:5f:3c:72:17:13:60:48:d9:b0: d7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:84:FF:D5:FB:32:D7:E5:29:BF:80:79:EE:64:D9:D9:F6:98:6C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e237e84-6a61-363f-8f54-18625e8ff8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c3:9c:e0:5c:d1:c9:73:d5:fd:c4:dc:ef:03:00:7c:6c:68: 26:63:11:aa:35:0e:26:9c:48:cc:24:32:6c:08:29:d0:3e:0b: 5d:ff:0c:2e:ca:50:ef:0f:09:65:da:69:28:a1:67:cd:58:49: de:36:9c:f4:6d:c4:d5:e1:37:af:4c:c2:f3:d5:9e:30:9d:b5: 3e:99:f5:cc:a1:22:f7:06:d1:d6:ed:32:7d:99:41:c2:83:ea: f1:79:79:ed:65:bf:e6:2c:e5:5b:4b:1f:a7:9c:fc:02:b1:11: b0:60:a4:3c:42:bd:a1:21:e8:c2:ad:e1:f4:a8:7c:54:ec:60: 2c:52:09:4b:fc:e0:de:57:6f:a5:98:b2:77:aa:fd:35:f2:dd: 75:11:26:85:b1:ad:4a:f4:b4:cf:73:c3:be:d3:50:ed:21:55: 88:a3:20:80:55:a8:f7:fe:2c:27:41:62:07:ab:49:0b:8b:5f: 41:55:1a:40:1b:06:97:b6:dc:d7:ff:5d:a7:cc:59:cf:0a:8e: c7:5f:d2:7d:ba:c2:36:34:44:3e:0b:78:4e:3b:5b:64:59:14: ce:2f:a4:bc:41:31:dc:2e:d4:7f:b9:3a:d0:78:5d:03:52:c0: bc:d4:c1:bb:99:71:b0:44:54:80:b4:06:ac:86:21:3c:05:14: cb:12:8c:48 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJL+S7gsoVr7i4CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk N2I4OTBjYTctZWNhMi00MjdmLTk3N2EtNDhhYmFkOGE5NGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBe82iB9wuSPIeEvBmH1Z1PJjg2ijPWgVWCP zVLdallUg/TnBOTARm3sqXgM15jF3Colop3Iml1GBjsVuAKB8JP58SHyL6VzSneV e7NWzg9gjbD7ZIWMgLG5MpMLRPnAKr1vg2z8/VTYUHEwhVlK3Ja5scvuNbc7LFQ3 /blnt9d2fkDoahB0plXlbg9Aiddst6tL1ptFOnr7W8E0gf/yBqZlMtu+7o4Pyu5j pCKeZXvVCcVi2C+sI0McKIZPmE8IhNV7POBCsC77lJcelzRbFlFPPXagj/jvPtvV lDGESuxqSvoBfdUWDXnXKxdmFvcgvmPBSmNfPHIXE2BI2bDXNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHCE/9X7MtflKb+Aee5k2dn2mGxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGUyMzdlODQtNmE2MS0z NjNmLThmNTQtMTg2MjVlOGZmOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBPw5zgXNHJc9X9xNzvAwB8bGgmYxGqNQ4mnEjM JDJsCCnQPgtd/wwuylDvDwll2mkooWfNWEneNpz0bcTV4TevTMLz1Z4wnbU+mfXM oSL3BtHW7TJ9mUHCg+rxeXntZb/mLOVbSx+nnPwCsRGwYKQ8Qr2hIejCreH0qHxU 7GAsUglL/ODeV2+lmLJ3qv018t11ESaFsa1K9LTPc8O+01DtIVWIoyCAVaj3/iwn QWIHq0kLi19BVRpAGwaXttzX/12nzFnPCo7HX9J9usI2NEQ+C3hOO1tkWRTOL6S8 QTHcLtR/uTrQeF0DUsC81MG7mXGwRFSAtAashiE8BRTLEoxI -----END CERTIFICATE-----Generated at Sun Apr 27 02:35:45 2025 by rpki-client