$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ec25ce0-ce72-33ad-bb5e-e4ef9185de3f.roa File: 5ec25ce0-ce72-33ad-bb5e-e4ef9185de3f.roa (raw, json) Hash identifier: xV2MopCoHeElN+N9YJ31yMAzsGwJBi5DJoKkwi0n/ZU= Subject key identifier: D8:DE:0A:20:FE:99:33:E8:E0:45:EC:4F:63:CF:70:D6:1A:37:93:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C057BDD5F12188CDCD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ec25ce0-ce72-33ad-bb5e-e4ef9185de3f.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396605 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c0:57:bd:d5:f1:21:88:cd:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=46f56072-a7ad-42ba-8bbb-8d46bcfd3bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1f:63:1f:4c:b1:60:c3:1e:9b:79:b0:47:19: 34:3e:64:b2:c1:03:52:6f:cc:5b:47:16:74:dd:ca: 19:ce:a5:7a:a4:7e:8d:dc:3c:97:58:d2:bb:46:6e: 95:b4:35:4b:ca:b3:17:f1:74:15:20:a3:03:fc:cc: cb:6f:22:8c:67:77:75:ef:3e:0e:76:d4:bb:4c:db: f2:b0:72:f1:20:ed:40:5e:19:5e:13:99:89:3f:13: 0f:33:44:a6:47:8a:f5:d8:14:92:01:5b:fe:11:33: 22:09:90:11:65:6a:c0:d3:62:5b:d4:8e:5c:84:7e: 2a:ca:02:84:b1:8c:a2:ab:d2:86:19:3b:48:38:79: 55:95:59:41:fd:25:9f:34:aa:53:82:45:04:1d:cb: b6:85:08:d7:5e:66:f3:26:17:6c:bc:f5:20:2e:ac: 20:de:16:25:e4:23:9b:a5:38:88:d9:be:e7:94:e4: 02:a9:93:d8:00:8b:13:3f:9d:0c:6e:be:d7:0b:20: 40:2d:6e:ea:0e:a8:71:e4:c8:7b:2b:76:82:0d:29: 9b:3b:42:24:f4:f8:4c:61:ea:e9:f9:00:97:96:0f: 31:3c:b1:b0:47:ab:cf:9a:42:54:16:f9:17:2d:d9: d7:38:22:c9:5f:bc:11:d8:73:21:4a:a6:df:57:9c: bd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DE:0A:20:FE:99:33:E8:E0:45:EC:4F:63:CF:70:D6:1A:37:93:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ec25ce0-ce72-33ad-bb5e-e4ef9185de3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:25:c3:53:37:9e:83:f5:d3:16:d1:0c:ca:bd:90:fb:66:39: a3:e4:d4:d3:e4:05:0d:a8:54:13:a7:d6:63:cc:bd:28:f6:1f: 72:2b:08:e1:5f:56:44:e0:a5:ef:2a:62:96:aa:88:83:41:39: d2:65:99:16:36:b0:ef:65:54:af:f3:e6:7b:b9:d2:fd:a0:cf: aa:0f:10:17:98:ae:a0:83:d5:e8:c5:17:b1:a8:dc:4a:0a:ca: 8a:11:4f:dc:ab:6f:c7:3a:04:88:e6:d8:d0:fb:ec:f4:7a:be: 96:b1:99:4d:a1:47:66:1c:86:9c:5a:97:27:fc:ca:4b:c4:99: b9:8a:65:1d:7c:ea:3e:56:48:21:64:e2:82:e9:46:4c:10:e2: cf:d8:25:31:fe:fb:d7:58:66:c9:27:b2:a8:1e:d6:ea:2b:97: c5:84:27:6e:01:a2:6c:0f:5d:0e:ce:f3:a1:52:f6:d8:a7:e2: c0:69:75:30:71:a1:41:b0:e0:f5:d6:99:32:03:88:70:df:8c: c2:0f:03:5c:22:b5:60:f6:ff:53:f8:1c:b2:df:a9:85:d8:fc: 4d:3b:0f:f5:aa:6f:ce:e4:ca:02:41:4b:18:56:8d:c2:3b:07: 1d:2e:40:44:96:c8:b4:f5:0d:15:96:cf:80:7b:28:b2:59:cb: 85:23:37:8c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMBXvdXxIYjNzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NDZmNTYwNzItYTdhZC00MmJhLThiYmItOGQ0NmJjZmQzYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR9jH0yxYMMem3mwRxk0PmSywQNSb8xbRxZ0 3coZzqV6pH6N3DyXWNK7Rm6VtDVLyrMX8XQVIKMD/MzLbyKMZ3d17z4OdtS7TNvy sHLxIO1AXhleE5mJPxMPM0SmR4r12BSSAVv+ETMiCZARZWrA02Jb1I5chH4qygKE sYyiq9KGGTtIOHlVlVlB/SWfNKpTgkUEHcu2hQjXXmbzJhdsvPUgLqwg3hYl5COb pTiI2b7nlOQCqZPYAIsTP50Mbr7XCyBALW7qDqhx5Mh7K3aCDSmbO0Ik9PhMYerp +QCXlg8xPLGwR6vPmkJUFvkXLdnXOCLJX7wR2HMhSqbfV5y9BQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNjeCiD+mTPo4EXsT2PPcNYaN5NoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWVjMjVjZTAtY2U3Mi0z M2FkLWJiNWUtZTRlZjkxODVkZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAbJcNTN56D9dMW0QzKvZD7Zjmj5NTT5AUNqFQT p9ZjzL0o9h9yKwjhX1ZE4KXvKmKWqoiDQTnSZZkWNrDvZVSv8+Z7udL9oM+qDxAX mK6gg9XoxRexqNxKCsqKEU/cq2/HOgSI5tjQ++z0er6WsZlNoUdmHIacWpcn/MpL xJm5imUdfOo+VkghZOKC6UZMEOLP2CUx/vvXWGbJJ7KoHtbqK5fFhCduAaJsD10O zvOhUvbYp+LAaXUwcaFBsOD11pkyA4hw34zCDwNcIrVg9v9T+Byy36mF2PxNOw/1 qm/O5MoCQUsYVo3COwcdLkBElsi09Q0Vls+AeyiyWcuFIzeM -----END CERTIFICATE-----Generated at Sat Apr 26 22:55:43 2025 by rpki-client