$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de146e7-eb04-31a6-af09-f638dbeed3d2.roa File: 7de146e7-eb04-31a6-af09-f638dbeed3d2.roa (raw, json) Hash identifier: E8nCqT0ZipYY6k5+khUcxlFnq/lql0+nnNlKmV7cBfI= Subject key identifier: C0:4E:E8:7E:A4:B7:92:20:B9:BB:F0:E0:4B:8D:52:98:D6:01:4E:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DDADBDD7EB3AD8981920 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de146e7-eb04-31a6-af09-f638dbeed3d2.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396571 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:dd:ad:bd:d7:eb:3a:d8:98:19:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=58e5e0d1-4923-4c01-86b5-c9c4d4b2848a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:23:71:0d:2a:c3:6b:70:ca:44:7c:47:08:6a: d3:f3:26:29:e4:a9:d1:6a:ef:40:34:95:2d:cc:8d: 11:f2:20:46:43:f8:39:d2:59:6a:11:da:eb:26:c3: ba:c3:5a:99:59:b3:1f:08:5a:73:34:94:e7:14:5f: 02:3d:e9:cb:31:4e:e0:21:5a:39:0c:73:26:b1:ef: 57:10:4f:69:97:6a:74:02:a4:fc:f9:08:7d:6c:38: e3:33:af:1b:20:80:f3:6e:48:28:aa:5d:af:40:95: 41:27:a1:1f:05:ce:a2:22:b3:51:25:f9:1a:02:23: d5:2f:4c:14:9d:53:d3:9b:72:e8:a2:9c:5d:43:0f: d2:80:0b:88:e9:84:5c:4c:be:1c:33:be:ab:ae:a8: c8:d7:d2:70:2a:55:d7:8d:bc:37:1c:07:9e:2d:4d: 6a:88:24:2c:92:a8:1b:30:6f:cb:8a:fe:dc:e1:7e: 81:3a:08:64:d6:b3:e8:8a:4c:5a:b0:7d:03:d9:6b: f6:ec:50:bb:d4:06:58:cb:46:46:83:4b:15:5a:08: 30:fa:31:93:e1:c2:85:2c:a9:94:d6:d4:9b:64:b8: ea:73:8c:15:0a:78:b5:67:97:31:bf:c4:a9:73:6d: f7:bd:a0:3c:5b:0b:a1:10:c0:fc:07:67:cd:77:0d: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4E:E8:7E:A4:B7:92:20:B9:BB:F0:E0:4B:8D:52:98:D6:01:4E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de146e7-eb04-31a6-af09-f638dbeed3d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:38:25:d5:f7:c2:db:0a:fe:ea:b9:d5:f3:dc:10:56:83:32: 5a:6d:9c:ba:51:58:02:78:26:b3:87:47:d1:22:a2:3f:9d:e3: 10:08:da:0f:56:9f:6b:d9:7e:ed:5a:92:b2:73:fc:19:de:bd: 78:81:5f:23:8c:8d:8f:ed:e4:9f:ab:52:16:90:db:34:ab:aa: 6f:fc:4a:1b:0e:8c:46:5b:8f:e0:4c:2f:ca:bc:33:11:0b:ea: df:33:2b:fd:aa:5b:d5:ca:75:17:cb:0a:8a:c3:4c:96:f7:64: 83:07:81:91:bf:99:7e:69:39:4c:87:e0:8c:7c:bd:a4:d2:53: 51:96:ea:94:7e:ec:4a:ae:03:3d:aa:d2:12:f1:9a:10:9f:6e: 80:72:91:66:c3:a7:37:0d:8f:7d:e3:a1:9d:ce:20:68:99:b5: e6:31:df:0f:e3:c3:bc:49:6c:c5:7c:c5:ec:9a:15:5f:b7:6c: b9:cb:de:bb:e3:05:63:05:73:e7:8b:72:f7:5a:5b:c9:37:f2: c9:10:1d:18:f9:54:3e:73:ef:81:ab:d4:3b:8b:7a:42:f5:dc: d0:52:ff:a4:ef:6f:60:2f:21:ed:41:64:cc:b0:be:57:ff:d2: 55:bb:d7:c3:00:b8:d7:2b:89:1b:fe:c9:ea:15:2a:e3:8c:da: 42:51:fa:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmd2tvdfrOtiYGSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk NThlNWUwZDEtNDkyMy00YzAxLTg2YjUtYzljNGQ0YjI4NDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiNxDSrDa3DKRHxHCGrT8yYp5KnRau9ANJUt zI0R8iBGQ/g50llqEdrrJsO6w1qZWbMfCFpzNJTnFF8CPenLMU7gIVo5DHMmse9X EE9pl2p0AqT8+Qh9bDjjM68bIIDzbkgoql2vQJVBJ6EfBc6iIrNRJfkaAiPVL0wU nVPTm3LoopxdQw/SgAuI6YRcTL4cM76rrqjI19JwKlXXjbw3HAeeLU1qiCQskqgb MG/Liv7c4X6BOghk1rPoikxasH0D2Wv27FC71AZYy0ZGg0sVWggw+jGT4cKFLKmU 1tSbZLjqc4wVCni1Z5cxv8Spc233vaA8WwuhEMD8B2fNdw1ARwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMBO6H6kt5Igubvw4EuNUpjWAU5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RlMTQ2ZTctZWIwNC0z MWE2LWFmMDktZjYzOGRiZWVkM2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBSOCXV98LbCv7qudXz3BBWgzJabZy6UVgCeCaz h0fRIqI/neMQCNoPVp9r2X7tWpKyc/wZ3r14gV8jjI2P7eSfq1IWkNs0q6pv/Eob DoxGW4/gTC/KvDMRC+rfMyv9qlvVynUXywqKw0yW92SDB4GRv5l+aTlMh+CMfL2k 0lNRluqUfuxKrgM9qtIS8ZoQn26AcpFmw6c3DY9946GdziBombXmMd8P48O8SWzF fMXsmhVft2y5y9674wVjBXPni3L3WlvJN/LJEB0Y+VQ+c++Bq9Q7i3pC9dzQUv+k 729gLyHtQWTMsL5X/9JVu9fDALjXK4kb/snqFSrjjNpCUfq2 -----END CERTIFICATE-----Generated at Sun Apr 27 01:04:02 2025 by rpki-client