$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9136c130-a680-371c-b957-716f3f0ec81c.roa File: 9136c130-a680-371c-b957-716f3f0ec81c.roa (raw, json) Hash identifier: q/xAq/CUzPC2bSox/o0PdkCkz/LkJtzgasmYiiJiXDQ= Subject key identifier: 3B:3A:C6:F5:96:65:83:04:F1:55:8C:AE:E7:C6:06:EA:6C:F8:E4:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849998F477DD44ABB42E6ACC100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9136c130-a680-371c-b957-716f3f0ec81c.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 396563 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:47:7d:d4:4a:bb:42:e6:ac:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=3d71ce5a-daf7-4cc7-8829-05cc33923db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:98:49:6a:95:e6:bb:cc:13:5b:94:4c:85: b8:d0:a8:20:2d:5f:85:8e:43:f0:8e:95:91:0f:75: d0:a1:7a:59:98:b7:80:0c:f1:5f:55:52:2b:70:d2: 41:63:45:64:94:2e:33:86:d2:42:e3:64:9f:70:0c: 28:98:5c:ae:5b:82:c4:12:f7:40:00:33:df:14:d3: 2d:df:16:75:2e:8e:e6:a9:4e:4e:5d:38:a0:1d:da: 3a:11:bb:58:86:ac:25:01:c9:f4:28:6f:7f:d0:c0: 12:2b:05:77:ab:db:4c:63:94:16:04:29:d7:bd:ab: 0b:16:44:45:de:22:ce:19:b8:ac:48:26:22:80:7f: e6:c9:05:f7:16:00:d9:70:2d:e4:16:65:57:01:26: 80:fc:3c:2c:cf:50:8e:c3:b6:22:71:ba:36:01:28: 86:3d:01:ba:c1:a8:51:ed:92:86:a3:62:23:e9:18: 15:81:5c:ed:35:17:7e:cf:51:1d:f6:ce:b4:59:c0: 10:83:de:a9:60:76:1c:de:16:d2:1e:b2:aa:a7:8d: be:36:39:9d:95:a4:1b:2c:c3:85:9f:22:aa:35:50: 0c:ef:5d:1b:17:09:a8:c0:da:8a:02:69:7a:7b:b2: 01:1a:4d:60:0b:49:ac:82:c4:da:3a:6f:a1:87:4f: dc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3A:C6:F5:96:65:83:04:F1:55:8C:AE:E7:C6:06:EA:6C:F8:E4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9136c130-a680-371c-b957-716f3f0ec81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2d:f1:83:7c:a5:90:a9:39:c5:12:83:05:d0:e8:e7:4c:e6: e2:a0:3a:1b:40:da:3d:a4:d8:44:22:fe:5b:b7:f9:6a:05:86: 00:ca:5b:09:dd:e6:d7:f4:d3:7e:81:ac:5a:c6:c9:fa:2a:ac: 45:94:0c:70:4d:c1:9c:78:92:3c:c1:93:1d:82:b5:96:9a:2d: ae:57:81:2a:30:d0:bb:fb:9b:82:82:8a:05:08:9a:a7:1e:bd: bf:dd:10:e0:28:e7:ac:a0:82:af:4f:a1:b9:1b:ee:8a:09:68: 5d:45:24:5e:6f:84:56:a0:5f:7e:66:3a:59:fb:7f:93:9b:62: 38:a6:95:48:30:ef:14:09:75:92:bc:35:6d:c1:e6:01:e7:97: 53:de:2d:f1:4b:b0:3a:40:5e:d5:64:ba:9b:63:20:1e:26:f4: 50:f8:8c:ad:2c:72:0f:5c:19:8b:e5:88:2f:6f:a5:22:f2:f5: 67:56:28:d9:69:4f:96:af:b3:58:77:72:a0:a4:d1:de:4a:44: 70:1a:b5:81:68:9c:9b:dc:e1:fe:64:54:49:1c:3d:ad:82:f0: 28:2f:e6:a3:0f:f5:04:46:69:52:25:4a:fa:05:cb:75:19:69: 38:da:6e:7a:7b:23:6e:f1:bc:b4:58:e7:bf:81:22:67:d6:f1: eb:25:92:03 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0d91Eq7QuaswQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk M2Q3MWNlNWEtZGFmNy00Y2M3LTg4MjktMDVjYzMzOTIzZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2CYSWqV5rvME1uUTIW40KggLV+FjkPwjpWR D3XQoXpZmLeADPFfVVIrcNJBY0VklC4zhtJC42SfcAwomFyuW4LEEvdAADPfFNMt 3xZ1Lo7mqU5OXTigHdo6EbtYhqwlAcn0KG9/0MASKwV3q9tMY5QWBCnXvasLFkRF 3iLOGbisSCYigH/myQX3FgDZcC3kFmVXASaA/Dwsz1COw7Yicbo2ASiGPQG6wahR 7ZKGo2Ij6RgVgVztNRd+z1Ed9s60WcAQg96pYHYc3hbSHrKqp42+NjmdlaQbLMOF nyKqNVAM710bFwmowNqKAml6e7IBGk1gC0msgsTaOm+hh0/cvQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDs6xvWWZYME8VWMrufGBups+OQIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTEzNmMxMzAtYTY4MC0z NzFjLWI5NTctNzE2ZjNmMGVjODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAyLfGDfKWQqTnFEoMF0OjnTObioDobQNo9pNhE Iv5bt/lqBYYAylsJ3ebX9NN+gaxaxsn6KqxFlAxwTcGceJI8wZMdgrWWmi2uV4Eq MNC7+5uCgooFCJqnHr2/3RDgKOesoIKvT6G5G+6KCWhdRSReb4RWoF9+ZjpZ+3+T m2I4ppVIMO8UCXWSvDVtweYB55dT3i3xS7A6QF7VZLqbYyAeJvRQ+IytLHIPXBmL 5Ygvb6Ui8vVnVijZaU+Wr7NYd3KgpNHeSkRwGrWBaJyb3OH+ZFRJHD2tgvAoL+aj D/UERmlSJUr6Bct1GWk42m56eyNu8by0WOe/gSJn1vHrJZID -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:43 2025 by rpki-client