$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa File: 152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa (raw, json) Hash identifier: uF74LP2H1lvip66mZYvs6JORP1+X/HDtMxOEr4mnUe0= Subject key identifier: 27:62:91:A3:27:31:B9:72:1A:52:21:A6:70:99:06:69:7A:71:AC:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C4F8334292A4F3A303B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 20431 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c4:f8:33:42:92:a4:f3:a3:03:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=e03d3fb4-feff-4ce9-b6c6-041efe2ac338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:19:11:0d:e5:d8:5f:85:64:b2:88:b3:e2:95: 09:84:71:3b:14:6c:32:a7:8f:4f:d8:14:b5:c1:a7: 1c:85:f5:a0:97:2c:cc:48:aa:1c:22:90:98:1a:cb: fc:94:87:7c:13:81:6b:ef:99:e7:1b:fc:ab:5b:6e: 90:1a:19:5c:83:dd:9f:79:ad:62:d2:f6:dc:a1:62: 25:55:5b:fd:39:54:55:8c:42:60:74:14:15:cb:79: b1:45:73:8d:bb:81:f1:f4:af:3e:ed:1d:b5:a6:9c: cd:e8:66:d0:81:5a:d4:10:01:2b:3c:08:ab:3b:cd: 15:59:95:57:82:a3:14:8b:ce:27:b9:16:93:c2:f3: 69:91:77:a1:49:d4:46:01:ef:35:c2:fd:9d:73:a2: 31:92:fd:d2:77:da:00:58:62:7c:9e:30:2a:ba:22: cc:bc:78:47:ac:0c:b1:d7:e3:8a:86:c4:c4:e6:92: 68:b9:ae:09:3a:d0:5d:24:87:e3:46:7e:27:bd:8e: f8:f1:f9:f6:2f:1e:04:f2:b3:b8:43:4a:0e:44:57: 70:d9:17:e9:e5:ad:34:b3:08:a6:d6:d5:66:31:2f: e9:cf:19:c9:62:dd:a2:47:1a:27:e8:cc:45:bf:d7: ee:ac:0d:c2:f7:2d:9b:4a:d1:46:0a:62:aa:b8:80: d1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:62:91:A3:27:31:B9:72:1A:52:21:A6:70:99:06:69:7A:71:AC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152c8aff-d0b4-3d77-9dea-edbdc3653e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:3d:2a:b7:ff:f1:45:16:a8:2c:65:33:0c:58:06:c6:71:af: 81:2b:6c:36:9e:2a:68:20:d9:bd:99:ce:b0:7d:3c:1a:97:66: 2b:a5:16:63:3f:0e:ba:f6:a3:f1:3d:f8:37:c6:07:b1:94:e1: 4b:44:f3:bb:a4:74:88:12:a3:41:64:35:10:7a:e6:31:03:28: 6d:b1:2e:c3:14:59:ce:ce:7a:34:02:da:e4:0b:c5:ad:ef:93: 22:07:dd:a9:88:7d:7f:79:69:8d:d3:37:af:36:7d:58:94:56: c7:a6:68:ab:70:db:98:82:07:16:2c:60:40:10:be:d2:48:d2: 83:08:e9:a4:e0:c0:53:74:24:91:3c:62:60:64:b3:70:75:8e: ef:39:f6:5c:2a:36:ab:5c:f8:57:c0:fd:f4:04:f5:32:f7:96: c9:f3:fb:fc:3d:4d:d9:48:20:28:7e:a4:0a:08:8d:13:a7:2e: 4e:c4:ce:b0:41:8c:bd:97:aa:75:06:b5:4e:c4:5f:ae:fc:0d: 48:ae:92:90:33:c7:69:13:08:a5:c3:5f:72:8b:7e:30:b8:37: 08:82:f8:02:e2:aa:0c:8f:56:c5:ab:21:77:41:00:0f:4c:f6: 82:a2:b9:3f:5e:02:6b:6a:fe:3f:20:21:40:dd:c0:ab:3e:64: 9d:bf:4e:e3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMT4M0KSpPOjA7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTAzZDNmYjQtZmVmZi00Y2U5LWI2YzYtMDQxZWZlMmFjMzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxkRDeXYX4Vksoiz4pUJhHE7FGwyp49P2BS1 wacchfWglyzMSKocIpCYGsv8lId8E4Fr75nnG/yrW26QGhlcg92fea1i0vbcoWIl VVv9OVRVjEJgdBQVy3mxRXONu4Hx9K8+7R21ppzN6GbQgVrUEAErPAirO80VWZVX gqMUi84nuRaTwvNpkXehSdRGAe81wv2dc6Ixkv3Sd9oAWGJ8njAquiLMvHhHrAyx 1+OKhsTE5pJoua4JOtBdJIfjRn4nvY748fn2Lx4E8rO4Q0oORFdw2Rfp5a00swim 1tVmMS/pzxnJYt2iRxon6MxFv9furA3C9y2bStFGCmKquIDRhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCdikaMnMblyGlIhpnCZBml6cayZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyYzhhZmYtZDBiNC0z ZDc3LTlkZWEtZWRiZGMzNjUzZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRPSq3//FFFqgsZTMMWAbGca+BK2w2nipoINm9 mc6wfTwal2YrpRZjPw669qPxPfg3xgexlOFLRPO7pHSIEqNBZDUQeuYxAyhtsS7D FFnOzno0AtrkC8Wt75MiB92piH1/eWmN0zevNn1YlFbHpmircNuYggcWLGBAEL7S SNKDCOmk4MBTdCSRPGJgZLNwdY7vOfZcKjarXPhXwP30BPUy95bJ8/v8PU3ZSCAo fqQKCI0Tpy5OxM6wQYy9l6p1BrVOxF+u/A1IrpKQM8dpEwilw19yi34wuDcIgvgC 4qoMj1bFqyF3QQAPTPaCork/XgJrav4/ICFA3cCrPmSdv07j -----END CERTIFICATE-----Generated at Sun Apr 27 12:48:10 2025 by rpki-client