$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa File: 47d1cdc4-2974-3633-8fbc-02664a883456.roa (raw, json) Hash identifier: +dkLLNAlFsDQbbe5Oap8mR32Wi6u9GEAcDmuu+KKPVg= Subject key identifier: 41:FE:43:F2:BE:C9:69:22:78:60:9B:6F:4F:2C:67:21:0E:FB:41:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DAB64CA53177007B5C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396549 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:da:b6:4c:a5:31:77:00:7b:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=8d461a78-59f6-43ad-861f-4bed1fc8066a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:09:7d:38:db:d6:44:fa:33:38:24:6d:ac: ae:9d:18:ee:2d:3e:84:79:d6:a0:00:99:a0:33:91: 51:b4:2d:a2:a1:dd:6f:e0:5e:94:78:8a:da:3b:21: 73:fa:49:2a:17:4a:a4:51:66:f1:75:91:e0:6b:14: 13:5a:f0:06:2b:42:f0:f9:4f:fd:07:63:35:30:69: 3c:1d:61:23:5d:8e:fd:90:e8:39:02:9f:00:6e:a4: 13:21:c5:a1:a8:d6:6b:0b:d6:c4:d8:05:9c:42:b7: 86:70:a7:65:b1:8c:57:7b:f3:cd:f5:d3:02:1e:17: 71:8a:0d:22:f2:7e:93:dd:5c:f0:4a:51:c3:6b:48: 3e:80:88:c1:d2:98:15:dc:0f:ec:4f:28:a8:ab:b5: 7c:d6:76:54:74:ca:ac:7a:c3:84:c8:26:d5:ae:30: 3e:a6:f9:68:d7:08:a5:d6:9f:81:c5:de:e8:eb:01: a4:29:a8:02:25:a3:6c:bc:bc:40:21:03:49:4e:79: 46:c5:57:67:ff:20:83:f9:00:74:82:b9:33:ef:be: ee:41:ef:2c:b6:93:0d:41:9d:3b:77:6b:01:99:5a: 70:00:21:72:16:2b:19:f9:29:5b:dd:41:a1:52:87: dd:78:e4:41:75:d4:07:96:10:a8:08:1c:0e:17:c6: 04:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FE:43:F2:BE:C9:69:22:78:60:9B:6F:4F:2C:67:21:0E:FB:41:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47d1cdc4-2974-3633-8fbc-02664a883456.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:28:59:18:9d:6d:13:d3:39:88:b6:e4:36:e2:6b:b9:39:17: 37:23:38:9d:98:5c:10:19:51:71:f4:e9:f7:36:72:71:31:c5: 08:be:d6:82:b9:53:c7:d5:fc:5c:39:13:28:a3:b9:06:eb:21: 3a:52:3d:13:60:65:4e:93:05:a8:96:9b:c5:cd:ce:89:1f:cb: 24:5d:dc:9d:e6:d4:c2:0d:81:ff:a8:93:1d:35:96:e2:3c:7f: cf:cd:4c:b2:bd:43:19:83:e8:3b:e0:c9:1e:ff:a8:12:7a:af: 02:b8:1e:1c:8c:1c:aa:99:da:00:9b:90:35:41:e3:f3:3d:a2: 7c:71:b5:78:2c:fc:80:74:04:1c:8b:67:2b:41:8b:9b:bc:93: a9:5d:95:a4:71:78:dd:3b:cf:6c:9b:8f:95:27:bf:4d:0a:21: 0b:7a:40:20:22:dc:0e:1c:2e:82:28:56:77:d3:54:09:fc:cc: aa:c7:8e:5e:6b:2c:99:af:e8:80:dd:ac:da:d5:d8:54:97:9e: cd:73:73:eb:42:1c:52:1d:25:be:74:9d:24:34:e4:6c:43:10: 4b:d6:63:76:28:b8:98:bd:a5:4b:f4:39:c7:46:c3:0f:f6:95: f7:02:d0:57:d9:fe:b8:3b:bd:7e:db:b2:4b:a5:be:ec:f6:a3: 2d:8b:fa:7b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmdq2TKUxdwB7XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk OGQ0NjFhNzgtNTlmNi00M2FkLTg2MWYtNGJlZDFmYzgwNjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIQJfTjb1kT6MzgkbayunRjuLT6EedagAJmg M5FRtC2iod1v4F6UeIraOyFz+kkqF0qkUWbxdZHgaxQTWvAGK0Lw+U/9B2M1MGk8 HWEjXY79kOg5Ap8AbqQTIcWhqNZrC9bE2AWcQreGcKdlsYxXe/PN9dMCHhdxig0i 8n6T3VzwSlHDa0g+gIjB0pgV3A/sTyioq7V81nZUdMqsesOEyCbVrjA+pvlo1wil 1p+Bxd7o6wGkKagCJaNsvLxAIQNJTnlGxVdn/yCD+QB0grkz777uQe8stpMNQZ07 d2sBmVpwACFyFisZ+Slb3UGhUofdeORBddQHlhCoCBwOF8YEOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEH+Q/K+yWkieGCbb08sZyEO+0FHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDdkMWNkYzQtMjk3NC0z NjMzLThmYmMtMDI2NjRhODgzNDU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCiKFkYnW0T0zmItuQ24mu5ORc3IzidmFwQGVFx 9On3NnJxMcUIvtaCuVPH1fxcORMoo7kG6yE6Uj0TYGVOkwWolpvFzc6JH8skXdyd 5tTCDYH/qJMdNZbiPH/PzUyyvUMZg+g74Mke/6gSeq8CuB4cjByqmdoAm5A1QePz PaJ8cbV4LPyAdAQci2crQYubvJOpXZWkcXjdO89sm4+VJ79NCiELekAgItwOHC6C KFZ301QJ/Myqx45eayyZr+iA3aza1dhUl57Nc3PrQhxSHSW+dJ0kNORsQxBL1mN2 KLiYvaVL9DnHRsMP9pX3AtBX2f64O71+27JLpb7s9qMti/p7 -----END CERTIFICATE-----Generated at Wed Apr 30 19:02:13 2025 by rpki-client