$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c9a6be-ca81-3932-84aa-42446f37f433.roa File: 65c9a6be-ca81-3932-84aa-42446f37f433.roa (raw, json) Hash identifier: sYsT6MOoEqsqW+BhzbxSMSrYKbbbXnzXSRLjHqclcRQ= Subject key identifier: 0A:A6:19:48:8F:0C:30:5F:A6:C2:DE:77:18:D0:58:51:A8:B7:D9:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24BFE440BB4272AD25C480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c9a6be-ca81-3932-84aa-42446f37f433.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 40717 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bf:e4:40:bb:42:72:ad:25:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=290b1a27-641e-4ff1-9422-3c6862b98a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:09:a0:50:56:68:49:f6:c2:e6:7e:2a:65:6d: 87:38:97:ca:86:7c:de:98:03:4d:11:bf:47:37:60: 74:c2:4f:2a:1f:ec:c5:fe:c3:71:31:88:f1:1c:ac: d1:39:13:43:1d:3f:ba:60:7d:82:4a:57:e6:14:87: 09:ee:b2:1f:3c:83:36:b3:e2:fa:81:18:2f:db:4c: e8:8f:d5:1b:2f:33:91:35:ab:a2:6d:4e:dc:50:cd: ab:60:38:92:a2:ac:76:4b:3b:4e:29:74:58:82:a1: 20:eb:77:74:2a:1a:b7:ce:8a:fd:a7:2b:d5:f9:8d: 09:7d:67:e3:79:42:e0:b2:5a:50:61:6d:1c:73:f1: 5f:bd:e6:2c:60:6f:5b:8d:53:75:5c:21:67:c1:7c: 84:e2:e6:e8:6f:ad:a9:dd:88:f3:49:16:92:68:cb: 40:c1:bd:b5:ef:d7:17:93:75:74:14:a9:4a:9a:e2: 87:02:c4:d5:f3:9d:d8:f7:c6:32:f9:3d:ac:18:a3: cb:22:e7:f3:1a:f8:32:8d:1e:d0:a8:ef:e7:5e:df: f8:16:07:a3:16:d6:d3:50:b1:23:d4:aa:a1:e4:f9: d8:ca:3c:b8:f1:59:14:74:6a:b5:7e:34:7e:de:09: 9e:39:83:c2:d6:3b:6d:8e:cc:6d:b7:6a:02:67:e0: fc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A6:19:48:8F:0C:30:5F:A6:C2:DE:77:18:D0:58:51:A8:B7:D9:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65c9a6be-ca81-3932-84aa-42446f37f433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e2:3b:34:d9:f1:21:cb:90:19:75:b1:66:39:c6:4b:58:30: 0e:98:ca:9b:05:e5:f6:20:14:b4:94:10:c0:6b:7e:40:c7:21: 56:e1:7c:d9:c8:06:b6:de:03:78:d6:d9:cf:76:68:a0:89:8c: 96:4a:b3:7d:9c:6c:17:73:63:79:0c:d2:60:d9:88:26:35:db: fe:70:c3:04:c2:1a:71:f0:f3:8c:80:24:4b:5a:aa:b9:eb:5b: fc:e2:d3:7a:20:4b:54:f1:48:2a:28:f4:e7:cf:0b:17:8b:6c: 29:71:75:5f:14:b7:37:0b:4b:a7:a4:f9:ef:f1:f6:56:a3:ce: bf:e6:b1:4f:7c:57:0d:ca:a9:4a:6d:37:7f:32:1d:68:76:13: 10:69:a8:7c:03:c0:9b:ea:0f:50:f6:db:32:34:c7:f6:c9:5a: e8:1e:d9:2a:29:52:7d:44:80:54:14:41:00:c2:ad:a5:3c:3e: 52:f5:fb:28:f9:8e:a3:c4:cb:f5:01:2a:bc:7d:29:75:43:38: cc:12:80:7c:80:21:df:32:66:ab:5f:53:c0:54:b0:b7:bd:66: 9f:6b:fd:b6:36:f0:e7:61:40:72:3a:88:6f:ee:00:f8:d7:93: 9b:5e:97:eb:a5:f6:ba:51:e4:d4:2c:a2:8a:64:a9:41:a2:54: 82:2f:0e:f1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJL/kQLtCcq0lxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MjkwYjFhMjctNjQxZS00ZmYxLTk0MjItM2M2ODYyYjk4YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgmgUFZoSfbC5n4qZW2HOJfKhnzemANNEb9H N2B0wk8qH+zF/sNxMYjxHKzRORNDHT+6YH2CSlfmFIcJ7rIfPIM2s+L6gRgv20zo j9UbLzORNauibU7cUM2rYDiSoqx2SztOKXRYgqEg63d0Khq3zor9pyvV+Y0JfWfj eULgslpQYW0cc/FfveYsYG9bjVN1XCFnwXyE4ubob62p3YjzSRaSaMtAwb2179cX k3V0FKlKmuKHAsTV853Y98Yy+T2sGKPLIufzGvgyjR7QqO/nXt/4FgejFtbTULEj 1Kqh5PnYyjy48VkUdGq1fjR+3gmeOYPC1jttjsxtt2oCZ+D8owIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAqmGUiPDDBfpsLedxjQWFGot9kqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjVjOWE2YmUtY2E4MS0z OTMyLTg0YWEtNDI0NDZmMzdmNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCc4js02fEhy5AZdbFmOcZLWDAOmMqbBeX2IBS0 lBDAa35AxyFW4XzZyAa23gN41tnPdmigiYyWSrN9nGwXc2N5DNJg2YgmNdv+cMME whpx8POMgCRLWqq561v84tN6IEtU8UgqKPTnzwsXi2wpcXVfFLc3C0unpPnv8fZW o86/5rFPfFcNyqlKbTd/Mh1odhMQaah8A8Cb6g9Q9tsyNMf2yVroHtkqKVJ9RIBU FEEAwq2lPD5S9fso+Y6jxMv1ASq8fSl1QzjMEoB8gCHfMmarX1PAVLC3vWafa/22 NvDnYUByOohv7gD415ObXpfrpfa6UeTULKKKZKlBolSCLw7x -----END CERTIFICATE-----Generated at Sat Apr 26 23:00:39 2025 by rpki-client