$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971856cf-40ad-3193-87b7-6d5098db916f.roa File: 971856cf-40ad-3193-87b7-6d5098db916f.roa (raw, json) Hash identifier: n5lAX8absm8WSVTHjxhIjc5Sp4mLQWlTTIT1vOFMiRM= Subject key identifier: 34:2D:36:20:69:4D:92:F5:B7:2C:13:BE:1A:91:F9:F7:9A:71:FC:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849998F484CEC260ED5F34E0980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971856cf-40ad-3193-87b7-6d5098db916f.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 397205 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:48:4c:ec:26:0e:d5:f3:4e:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=c0469e9e-8096-43bf-920f-f83b07aa5e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ac:54:59:91:57:5d:17:0d:3f:a7:82:15:81: f5:90:90:ce:07:f5:bb:34:8e:79:01:ba:5a:64:0c: 3c:3a:db:04:2e:b8:ab:81:08:b3:ae:29:22:e2:53: cb:68:55:1c:a4:46:c6:ce:97:0c:cf:b6:ea:ee:b2: 13:ee:da:14:c4:3c:4c:16:86:87:33:fa:6d:3b:7d: 33:88:c2:70:f7:32:80:e0:5d:32:39:a3:5d:ed:65: 6a:d3:d3:e2:65:6d:56:73:8d:20:cb:ab:9d:29:a5: ab:c0:08:99:89:a2:62:b0:67:df:11:d2:3a:b2:28: 4b:d6:71:14:59:b3:cd:0b:ef:0e:ee:38:79:4e:91: e8:72:30:c1:0a:6c:ec:a9:38:cc:31:2f:cd:30:ce: cb:57:0b:c7:d7:6b:26:6d:ad:b3:ba:d8:3b:87:5d: b4:1c:d3:4a:90:7f:6a:6c:e0:c5:57:68:90:8c:8a: 7f:af:00:62:5b:cb:28:dd:ac:fb:b8:67:1f:b2:2a: a2:0a:58:29:5e:be:f1:9b:01:7a:2f:89:9f:ca:b1: d4:bb:10:91:15:cc:c4:3a:7f:86:0b:74:d1:3e:db: 42:2d:64:5c:1a:56:fb:7b:32:00:2b:ce:cb:27:08: 3c:24:4c:6e:8d:1a:f4:aa:57:84:8b:85:a9:2b:d3: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2D:36:20:69:4D:92:F5:B7:2C:13:BE:1A:91:F9:F7:9A:71:FC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/971856cf-40ad-3193-87b7-6d5098db916f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a6:2e:0e:65:b6:7c:39:23:de:f5:4e:2c:c1:b3:e3:81:b7: 5c:a7:9a:a8:6f:d4:c9:4a:ca:03:5f:55:b9:a4:24:20:89:19: a6:d1:da:3c:32:ca:21:eb:1d:46:8d:35:48:f6:fb:db:4b:38: f4:74:d7:d5:55:ef:24:79:5e:e8:64:50:8e:8d:12:95:a9:62: b8:1e:5d:f7:50:41:c4:3d:cc:81:8a:08:9b:80:8f:41:53:b8: 47:d9:6f:74:8d:fb:30:0e:6a:d0:c0:62:46:7b:6a:ad:a5:91: 76:c2:1d:bb:d9:26:16:2f:b2:13:e5:0f:7a:1a:6d:e3:09:51: f6:26:ac:ea:22:10:70:fe:fa:ca:73:84:05:80:6b:a2:0a:b9: 5f:5b:a8:b4:17:34:d5:ac:4d:a9:7d:60:64:4d:ae:c2:c3:73: 5d:f8:1e:52:a0:68:8d:19:8d:68:3f:fd:9c:66:a0:1b:fc:d5: 48:4c:63:ac:48:25:2a:b9:dc:fa:e0:08:f0:59:52:23:89:9f: a9:c8:15:14:c4:74:a9:89:21:0a:00:3e:a1:90:00:fc:ee:98: aa:92:24:6a:d0:ca:d2:33:3b:39:40:d3:5f:ec:ff:8f:cb:6f: db:a2:41:31:09:e7:2b:5e:78:5b:97:cf:a7:83:ce:5a:e0:c3: 1c:cb:55:41 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0hM7CYO1fNOCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YzA0NjllOWUtODA5Ni00M2JmLTkyMGYtZjgzYjA3YWE1ZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qxUWZFXXRcNP6eCFYH1kJDOB/W7NI55Abpa ZAw8OtsELrirgQizriki4lPLaFUcpEbGzpcMz7bq7rIT7toUxDxMFoaHM/ptO30z iMJw9zKA4F0yOaNd7WVq09PiZW1Wc40gy6udKaWrwAiZiaJisGffEdI6sihL1nEU WbPNC+8O7jh5TpHocjDBCmzsqTjMMS/NMM7LVwvH12smba2zutg7h120HNNKkH9q bODFV2iQjIp/rwBiW8so3az7uGcfsiqiClgpXr7xmwF6L4mfyrHUuxCRFczEOn+G C3TRPttCLWRcGlb7ezIAK87LJwg8JExujRr0qleEi4WpK9MvowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDQtNiBpTZL1tywTvhqR+feacfwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTcxODU2Y2YtNDBhZC0z MTkzLTg3YjctNmQ1MDk4ZGI5MTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAFpi4OZbZ8OSPe9U4swbPjgbdcp5qob9TJSsoD X1W5pCQgiRmm0do8Msoh6x1GjTVI9vvbSzj0dNfVVe8keV7oZFCOjRKVqWK4Hl33 UEHEPcyBigibgI9BU7hH2W90jfswDmrQwGJGe2qtpZF2wh272SYWL7IT5Q96Gm3j CVH2JqzqIhBw/vrKc4QFgGuiCrlfW6i0FzTVrE2pfWBkTa7Cw3Nd+B5SoGiNGY1o P/2cZqAb/NVITGOsSCUqudz64AjwWVIjiZ+pyBUUxHSpiSEKAD6hkAD87piqkiRq 0MrSMzs5QNNf7P+Py2/bokExCecrXnhbl8+ng85a4MMcy1VB -----END CERTIFICATE-----Generated at Sat Apr 26 23:03:01 2025 by rpki-client