$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa File: 43df424b-8041-30e0-bf83-a35ba1b54f1a.roa (raw, json) Hash identifier: /mVeAcAK+3ACHVu+ciFuG49ESTjTEE9+S41/GoaZTxw= Subject key identifier: E3:2F:41:0A:C1:09:9F:1F:35:5F:8C:E9:6C:37:B3:29:19:8B:78:41 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24BDF66F412A58CADF0580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 397203 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bd:f6:6f:41:2a:58:ca:df:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=62175a2a-aa99-4277-a95a-3eaff9335522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:41:c8:5a:a0:5d:b5:3d:3a:93:94:89:5e:83: 5b:e4:f4:60:7f:d9:d2:09:ed:d3:88:80:a3:2e:e6: 22:76:14:d6:b3:90:0d:a5:c8:8c:23:7a:1d:69:23: b3:e1:f4:ed:98:e4:62:aa:de:c1:c7:20:fc:06:c7: bc:de:87:94:5d:34:89:fb:24:00:0a:f1:54:f5:de: ff:c7:77:b5:af:5a:7e:60:b4:fa:bc:6a:65:53:85: ac:ba:0b:62:be:3e:16:c9:0e:b5:e2:0c:a2:41:b5: e9:be:5e:cf:2a:a9:5b:d4:bd:d3:54:74:fc:8e:01: 78:66:5a:bb:49:7c:39:79:c4:29:fd:c7:8b:76:5f: 1c:ed:26:fe:2b:d9:f5:d5:3b:69:be:41:fc:39:7b: 2a:18:b0:e5:8a:ec:fe:e4:d5:bf:8f:e7:5d:c1:50: 67:93:20:12:d1:ba:0c:59:0d:bb:a8:1d:fa:fe:50: 0c:6e:6d:be:db:cd:f9:aa:fd:45:bd:ec:7f:5e:00: b5:c1:32:ff:cb:98:dd:4a:1b:ce:e6:26:36:ee:62: 79:48:48:82:1f:1f:53:19:24:26:21:65:30:c4:81: 81:0c:75:05:ca:b7:fd:14:73:de:e8:bf:30:ca:44: e4:db:f1:74:56:8a:60:a3:5e:96:1a:8a:7a:33:69: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2F:41:0A:C1:09:9F:1F:35:5F:8C:E9:6C:37:B3:29:19:8B:78:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:a4:b8:76:5c:0e:f1:55:37:1d:00:1b:2e:84:e1:9e:5a:65: 20:18:69:77:ef:16:2a:7c:b9:17:34:67:1b:ec:c0:f1:38:17: de:a3:57:8d:5d:ee:12:c0:df:ad:58:2a:04:b8:f8:6e:69:c4: c6:b2:7b:56:47:84:5c:36:e0:4d:2a:46:5a:69:eb:75:37:4e: 67:72:d1:6a:42:69:54:84:7b:ae:09:f7:59:90:d1:9d:44:e6: 2a:dd:15:a0:55:ea:58:70:a9:2f:1e:d7:f6:06:e3:89:b6:0f: 2f:53:f9:49:9e:a1:fb:bc:20:95:10:47:8e:a7:8c:d4:46:60: 2a:a1:e5:40:63:15:4c:5a:ff:29:8d:2a:88:68:3e:fa:e9:45: 4f:f0:26:16:d8:ad:b2:1b:db:98:00:de:3a:61:8f:20:b2:ce: 6b:d8:08:ac:6a:60:46:37:42:f8:20:45:3e:e4:06:9a:ca:51: 17:b7:62:1d:32:02:1b:e2:23:6b:de:5a:d3:53:89:2a:07:d3: 77:22:64:15:9f:b4:1d:c3:9a:60:0f:76:61:48:35:ce:9c:4a: 22:62:fe:df:33:65:8b:5d:2a:c9:20:f0:b7:5e:da:68:eb:ec: a0:31:b3:ac:84:64:48:92:01:1e:e0:b9:db:68:9b:8e:42:b7: 12:b2:72:fb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJL32b0EqWMrfBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NjIxNzVhMmEtYWE5OS00Mjc3LWE5NWEtM2VhZmY5MzM1NTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0HIWqBdtT06k5SJXoNb5PRgf9nSCe3TiICj LuYidhTWs5ANpciMI3odaSOz4fTtmORiqt7BxyD8Bse83oeUXTSJ+yQACvFU9d7/ x3e1r1p+YLT6vGplU4Wsugtivj4WyQ614gyiQbXpvl7PKqlb1L3TVHT8jgF4Zlq7 SXw5ecQp/ceLdl8c7Sb+K9n11TtpvkH8OXsqGLDliuz+5NW/j+ddwVBnkyAS0boM WQ27qB36/lAMbm2+2835qv1Fvex/XgC1wTL/y5jdShvO5iY27mJ5SEiCHx9TGSQm IWUwxIGBDHUFyrf9FHPe6L8wykTk2/F0Vopgo16WGop6M2nhtwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOMvQQrBCZ8fNV+M6Ww3sykZi3hBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNkZjQyNGItODA0MS0z MGUwLWJmODMtYTM1YmExYjU0ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAepLh2XA7xVTcdABsuhOGeWmUgGGl37xYqfLkX NGcb7MDxOBfeo1eNXe4SwN+tWCoEuPhuacTGsntWR4RcNuBNKkZaaet1N05nctFq QmlUhHuuCfdZkNGdROYq3RWgVepYcKkvHtf2BuOJtg8vU/lJnqH7vCCVEEeOp4zU RmAqoeVAYxVMWv8pjSqIaD766UVP8CYW2K2yG9uYAN46YY8gss5r2AisamBGN0L4 IEU+5AaaylEXt2IdMgIb4iNr3lrTU4kqB9N3ImQVn7Qdw5pgD3ZhSDXOnEoiYv7f M2WLXSrJIPC3Xtpo6+ygMbOshGRIkgEe4LnbaJuOQrcSsnL7 -----END CERTIFICATE-----Generated at Sun Apr 27 01:43:05 2025 by rpki-client