$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d0378e6-7a0e-36a9-9455-8b7014643e12.roa File: 9d0378e6-7a0e-36a9-9455-8b7014643e12.roa (raw, json) Hash identifier: nitMQWo7jurxJfa6k6KjrVigfD+80RkVSeBFSvo8Xbk= Subject key identifier: 55:BA:A9:C6:9A:C3:C7:E6:62:E7:D6:01:8E:A9:7C:65:72:D6:89:51 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849998F4BBBA03000DA06B7E130 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d0378e6-7a0e-36a9-9455-8b7014643e12.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 396568 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:4b:bb:a0:30:00:da:06:b7:e1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=b5df5c8f-8a86-41a2-b994-da63aececc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:56:2d:af:28:9d:63:71:77:5d:b8:46:23: b3:3c:96:1f:2e:f4:96:47:3b:71:25:f6:70:55:fa: 72:31:83:46:bd:f5:89:1b:22:b0:65:91:76:11:75: 1e:a3:51:b0:85:04:03:04:2d:db:c2:71:46:e1:61: eb:cf:2f:ef:30:a8:1c:4a:8f:f9:54:18:7f:6e:f3: e4:73:21:e6:9d:9e:e9:ca:67:27:20:c5:40:4c:0c: 2b:ee:ef:5b:fd:f3:89:f0:b4:97:0c:bf:bd:f6:8a: 8f:ae:52:c5:f5:f3:11:58:8c:a8:e6:2b:9e:d4:66: 97:96:4f:c4:c8:ec:b0:65:5d:40:1b:b1:2e:b7:ff: 96:a8:14:b9:f3:8f:f0:3b:2a:76:3b:ca:99:f5:c7: 73:97:a4:25:c6:6b:24:50:48:a7:74:3d:76:33:8c: 18:18:51:99:c3:37:f1:a2:b2:b5:f2:6a:c2:bd:73: 53:24:e7:60:46:aa:cf:2b:b2:82:a5:a6:19:0d:63: 28:2a:7a:42:f7:cc:b7:bb:b9:85:4b:f7:16:26:16: 14:f7:17:d2:1f:cd:44:56:94:41:78:9f:78:77:68: 08:63:36:63:6d:42:6b:57:27:16:87:00:18:36:8c: b0:cf:74:71:9a:7d:7f:fc:22:02:f6:a8:6d:13:38: 64:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BA:A9:C6:9A:C3:C7:E6:62:E7:D6:01:8E:A9:7C:65:72:D6:89:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d0378e6-7a0e-36a9-9455-8b7014643e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5a:b8:bc:d5:f4:27:38:08:50:07:77:bd:29:32:83:25:52: c7:6c:86:bf:a0:92:ca:f4:d4:db:ab:47:ab:d8:50:bb:1d:90: 95:f5:a4:73:eb:3d:ad:2e:87:e7:ff:d8:a2:e2:5b:11:6f:b8: 8f:b6:19:7a:01:a9:43:c9:0d:d6:d1:63:20:d2:64:cb:73:5a: f5:b7:41:6d:14:88:a6:2b:a7:29:e6:3b:7c:f3:8e:8a:9e:11: 0e:07:2e:7f:ab:a3:30:d0:e8:0b:b7:bb:e5:b8:bc:29:00:33: 81:af:b1:b4:e6:31:ab:e5:84:06:99:eb:c9:90:67:6c:fe:45: c1:63:99:33:c6:6e:97:db:88:51:96:04:f0:b5:f3:f1:54:05: 91:65:6b:5e:7f:db:6e:c4:51:13:54:8a:ba:35:72:d1:8a:f4: cb:f4:1b:0e:b6:c7:1a:c5:92:c8:f0:2e:44:45:8c:10:67:7a: 9a:20:f5:9c:14:fe:75:1e:c7:e1:a5:87:1c:16:e2:41:1b:1e: 8b:e5:8f:b9:ae:49:ed:b3:81:3d:32:c4:3a:6e:64:2d:80:72: 60:8a:7d:34:db:58:2a:d9:3a:e5:31:61:e3:d7:ee:99:f2:96: 17:1c:c2:23:f9:78:74:e4:f3:f3:01:34:88:75:53:31:4a:5c: 07:9e:56:cd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0u7oDAA2ga34TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YjVkZjVjOGYtOGE4Ni00MWEyLWI5OTQtZGE2M2FlY2VjYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ZWLa8onWNxd124RiOzPJYfLvSWRztxJfZw VfpyMYNGvfWJGyKwZZF2EXUeo1GwhQQDBC3bwnFG4WHrzy/vMKgcSo/5VBh/bvPk cyHmnZ7pymcnIMVATAwr7u9b/fOJ8LSXDL+99oqPrlLF9fMRWIyo5iue1GaXlk/E yOywZV1AG7Eut/+WqBS584/wOyp2O8qZ9cdzl6QlxmskUEindD12M4wYGFGZwzfx orK18mrCvXNTJOdgRqrPK7KCpaYZDWMoKnpC98y3u7mFS/cWJhYU9xfSH81EVpRB eJ94d2gIYzZjbUJrVycWhwAYNoywz3Rxmn1//CIC9qhtEzhkUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFW6qcaaw8fmYufWAY6pfGVy1olRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWQwMzc4ZTYtN2EwZS0z NmE5LTk0NTUtOGI3MDE0NjQzZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBkWri81fQnOAhQB3e9KTKDJVLHbIa/oJLK9NTb q0er2FC7HZCV9aRz6z2tLofn/9ii4lsRb7iPthl6AalDyQ3W0WMg0mTLc1r1t0Ft FIimK6cp5jt8846KnhEOBy5/q6Mw0OgLt7vluLwpADOBr7G05jGr5YQGmevJkGds /kXBY5kzxm6X24hRlgTwtfPxVAWRZWtef9tuxFETVIq6NXLRivTL9BsOtscaxZLI 8C5ERYwQZ3qaIPWcFP51HsfhpYccFuJBGx6L5Y+5rknts4E9MsQ6bmQtgHJgin00 21gq2TrlMWHj1+6Z8pYXHMIj+Xh05PPzATSIdVMxSlwHnlbN -----END CERTIFICATE-----Generated at Sun Apr 27 10:40:51 2025 by rpki-client