$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/475936e2-d108-3d61-a990-8bc00c0ec48f.roa File: 475936e2-d108-3d61-a990-8bc00c0ec48f.roa (raw, json) Hash identifier: gjtz1f8YL+yFkrRA91pz2DV60vjytB3tEZvMvfB/ZWE= Subject key identifier: 4B:5E:7F:FC:C3:A2:A7:36:39:D9:B2:B2:76:2F:A8:08:2A:71:9C:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C21072A7ECC83D4F4900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/475936e2-d108-3d61-a990-8bc00c0ec48f.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396579 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c2:10:72:a7:ec:c8:3d:4f:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=2f8a57aa-1f6c-43f1-9d57-c33fed608d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:49:ff:2d:ac:81:49:4e:83:b0:bf:6e:41: 02:dd:ed:1d:fb:20:46:dd:2c:e3:d9:7a:7a:48:91: 3c:90:09:3d:3b:9d:e6:3a:5b:47:32:49:47:45:c8: cf:d2:4a:d6:12:bf:bb:f4:96:ff:52:28:4f:f9:45: 08:82:0c:00:5a:83:a0:11:fa:c9:a9:b6:18:4e:94: 83:57:b6:e3:53:52:fe:35:00:ed:14:48:de:a4:69: 38:93:38:48:30:d9:e1:85:5f:90:62:04:a9:60:84: 8c:73:b6:2d:55:4f:24:b0:1b:87:5d:d1:be:6a:92: 8f:1b:81:74:d4:15:99:f8:6f:d9:46:56:42:34:43: 25:33:4c:27:85:7b:5e:6e:a8:45:a6:2c:9e:dd:6c: cc:09:33:d4:c7:67:b3:38:93:97:7e:9a:5c:f2:b8: df:1b:65:45:66:e7:26:82:47:b0:2f:c6:bb:b7:b5: 42:8b:9c:07:6d:65:f6:d5:f8:91:91:14:26:c5:fc: 88:71:07:93:98:c2:3e:ef:3a:cc:8c:36:e7:ef:ec: ef:25:3d:8e:9a:2c:fc:83:31:cf:2b:68:aa:2b:26: 45:1d:e7:dc:2b:34:29:5b:a5:76:7e:bc:d9:a8:7f: b3:56:4b:22:d7:17:af:e4:5d:46:b3:1d:7d:89:4d: 9d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5E:7F:FC:C3:A2:A7:36:39:D9:B2:B2:76:2F:A8:08:2A:71:9C:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/475936e2-d108-3d61-a990-8bc00c0ec48f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:1a:e8:a4:cf:37:cf:1b:ad:69:82:17:e4:4d:d0:28:3d:f8: 87:0e:b0:b1:6a:08:6b:7d:da:43:bc:03:30:5b:da:8e:98:32: 26:40:29:0f:6b:74:df:42:24:3d:8f:3d:c2:26:3d:90:42:4b: 17:5d:84:8d:9f:56:25:2f:8c:18:a5:47:72:0a:1d:ae:49:5c: 42:4d:1f:fa:0a:85:48:77:b8:25:2c:d2:36:ea:59:2b:5b:1b: 17:e9:0d:da:91:93:e8:76:c7:58:88:44:38:2f:fc:a4:04:10: a8:60:88:88:0c:7b:79:24:3c:36:e5:67:e8:49:27:e7:84:40: 82:e3:07:1a:4f:f0:b3:7f:6f:d7:62:0c:9e:f6:93:0c:3e:c8: 48:e0:ee:8b:5a:c3:45:0b:16:f5:c9:3a:62:36:ed:b0:62:ad: 66:0b:1b:09:c3:c8:a0:32:49:11:40:fa:e5:95:0a:1b:ed:76: da:e5:cd:80:15:2a:21:72:92:b1:87:4f:f0:a6:5b:fd:dc:48: 77:1c:76:cf:55:61:e5:7d:f7:3f:97:2d:4a:e0:46:4a:02:1b: c1:32:5b:32:5e:53:b9:e8:20:fc:5d:e7:53:1f:59:27:ab:3b: cc:7e:2a:23:ee:5c:51:a0:bc:1e:33:b6:d9:4d:a1:30:26:59: 7e:18:0f:7a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMIQcqfsyD1PSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MmY4YTU3YWEtMWY2Yy00M2YxLTlkNTctYzMzZmVkNjA4ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgVJ/y2sgUlOg7C/bkEC3e0d+yBG3Szj2Xp6 SJE8kAk9O53mOltHMklHRcjP0krWEr+79Jb/UihP+UUIggwAWoOgEfrJqbYYTpSD V7bjU1L+NQDtFEjepGk4kzhIMNnhhV+QYgSpYISMc7YtVU8ksBuHXdG+apKPG4F0 1BWZ+G/ZRlZCNEMlM0wnhXtebqhFpiye3WzMCTPUx2ezOJOXfppc8rjfG2VFZucm gkewL8a7t7VCi5wHbWX21fiRkRQmxfyIcQeTmMI+7zrMjDbn7+zvJT2Omiz8gzHP K2iqKyZFHefcKzQpW6V2frzZqH+zVksi1xev5F1Gsx19iU2d9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEtef/zDoqc2OdmysnYvqAgqcZxzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDc1OTM2ZTItZDEwOC0z ZDYxLWE5OTAtOGJjMDBjMGVjNDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCTGuikzzfPG61pghfkTdAoPfiHDrCxaghrfdpD vAMwW9qOmDImQCkPa3TfQiQ9jz3CJj2QQksXXYSNn1YlL4wYpUdyCh2uSVxCTR/6 CoVId7glLNI26lkrWxsX6Q3akZPodsdYiEQ4L/ykBBCoYIiIDHt5JDw25WfoSSfn hECC4wcaT/Czf2/XYgye9pMMPshI4O6LWsNFCxb1yTpiNu2wYq1mCxsJw8igMkkR QPrllQob7Xba5c2AFSohcpKxh0/wplv93Eh3HHbPVWHlffc/ly1K4EZKAhvBMlsy XlO56CD8XedTH1knqzvMfioj7lxRoLweM7bZTaEwJll+GA96 -----END CERTIFICATE-----Generated at Mon Apr 28 02:50:35 2025 by rpki-client