$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f96b971-e3b9-3667-8455-f6ff81543d1a.roa File: 9f96b971-e3b9-3667-8455-f6ff81543d1a.roa (raw, json) Hash identifier: CUaeO3TVEoKKLxujQ6dVb4bgPku6gUf6+hEVkUTlmUs= Subject key identifier: 6E:B8:32:AC:5A:16:6D:92:50:EE:6F:2F:C0:92:0C:1D:AA:BE:23:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24BF5EE59F915A5B399400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f96b971-e3b9-3667-8455-f6ff81543d1a.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36623 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bf:5e:e5:9f:91:5a:5b:39:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=90fd6724-58c3-4dcf-ae07-1f846bb9c3ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:27:3c:43:eb:37:1e:ee:35:ea:92:26:d6:bf: 5b:0a:73:a5:a5:a6:ab:a4:81:9d:10:f0:54:d7:26: a7:ae:6a:5c:de:a0:7c:dc:ce:b6:fd:cf:29:60:2b: e2:9a:59:10:eb:a8:e5:78:dc:cf:23:ce:95:fa:48: 58:1a:46:9f:a5:e2:01:6a:08:fb:24:01:e9:25:68: b0:97:cf:3a:6c:86:b6:76:82:15:26:49:41:77:a3: 5b:c6:95:72:1a:bc:d0:b8:66:a4:05:32:16:4c:75: 4a:99:55:5b:cb:a6:d3:2b:6f:61:0c:72:91:fa:85: 58:cb:f1:3e:c1:84:bd:58:af:07:49:f5:cc:0f:51: 0a:84:dc:df:06:7a:16:2c:6f:bb:4a:80:f6:9e:24: 4c:57:6d:52:07:3d:9f:fc:c7:f6:04:9a:3e:9c:f3: 2a:78:c1:0e:20:d9:34:bd:b3:54:b8:e1:d0:07:38: 3c:d8:10:d5:7e:48:f4:54:b9:a4:1b:ac:b4:55:ad: 67:2c:d1:28:08:5d:13:49:18:e6:21:d5:40:a5:b8: ae:ce:0d:f7:bf:bb:26:05:32:02:df:02:af:c7:73: f5:3e:09:46:b1:e4:5b:a8:f7:35:65:97:f3:50:b6: 88:85:70:b6:6a:d5:a9:d0:06:c0:97:9b:23:4c:30: 8f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B8:32:AC:5A:16:6D:92:50:EE:6F:2F:C0:92:0C:1D:AA:BE:23:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f96b971-e3b9-3667-8455-f6ff81543d1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:83:07:31:70:b9:c9:43:3b:48:ca:21:c4:a4:5c:6c:aa:c0: 38:73:01:3e:7e:49:9a:25:3f:e6:18:5e:2f:f0:73:e3:0c:e1: 4f:89:2d:cd:a8:cf:97:a8:4f:3f:9a:d0:8d:ba:63:f7:ba:7e: 18:db:77:2b:8d:f3:03:da:a8:00:46:7e:cc:bd:7f:ff:98:e7: db:9f:bc:fd:09:e4:e7:ce:70:7a:5a:76:f0:cc:61:8a:1d:7b: 18:e4:03:54:dc:2e:aa:0c:20:03:e1:49:eb:d9:fc:e7:8d:ec: 4c:10:e8:bc:28:20:d6:fc:08:d1:b4:18:9a:d3:95:06:23:20: 55:3a:3b:5c:b7:6a:f3:3b:a8:19:f6:1f:c6:d0:c6:d9:ea:4a: 29:16:52:77:14:b1:d0:4c:fa:1b:b0:26:53:f3:5f:72:90:77: 9d:46:10:3a:ad:c0:4b:14:b0:24:39:56:cd:25:17:b0:5c:16: 49:c7:b4:3c:a6:6d:b9:db:8b:8c:7b:9c:5d:33:84:50:d1:e5: 38:77:6b:3f:8e:21:37:61:06:99:f1:53:b9:54:fd:9c:03:e9: 67:de:7f:d7:c2:2e:86:6a:67:8a:e3:4c:f3:cf:06:29:d8:48: 19:05:89:f8:71:76:97:cc:e5:49:94:2d:33:66:1d:25:37:d9: 25:fe:d9:5f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJL9e5Z+RWls5lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTBmZDY3MjQtNThjMy00ZGNmLWFlMDctMWY4NDZiYjljM2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Cc8Q+s3Hu416pIm1r9bCnOlpaarpIGdEPBU 1yanrmpc3qB83M62/c8pYCvimlkQ66jleNzPI86V+khYGkafpeIBagj7JAHpJWiw l886bIa2doIVJklBd6NbxpVyGrzQuGakBTIWTHVKmVVby6bTK29hDHKR+oVYy/E+ wYS9WK8HSfXMD1EKhNzfBnoWLG+7SoD2niRMV21SBz2f/Mf2BJo+nPMqeMEOINk0 vbNUuOHQBzg82BDVfkj0VLmkG6y0Va1nLNEoCF0TSRjmIdVApbiuzg33v7smBTIC 3wKvx3P1PglGseRbqPc1ZZfzULaIhXC2atWp0AbAl5sjTDCPoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG64MqxaFm2SUO5vL8CSDB2qviMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWY5NmI5NzEtZTNiOS0z NjY3LTg0NTUtZjZmZjgxNTQzZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAdgwcxcLnJQztIyiHEpFxsqsA4cwE+fkmaJT/m GF4v8HPjDOFPiS3NqM+XqE8/mtCNumP3un4Y23crjfMD2qgARn7MvX//mOfbn7z9 CeTnznB6WnbwzGGKHXsY5ANU3C6qDCAD4Unr2fznjexMEOi8KCDW/AjRtBia05UG IyBVOjtct2rzO6gZ9h/G0MbZ6kopFlJ3FLHQTPobsCZT819ykHedRhA6rcBLFLAk OVbNJRewXBZJx7Q8pm2524uMe5xdM4RQ0eU4d2s/jiE3YQaZ8VO5VP2cA+ln3n/X wi6GameK40zzzwYp2EgZBYn4cXaXzOVJlC0zZh0lN9kl/tlf -----END CERTIFICATE-----Generated at Sat Apr 26 22:19:55 2025 by rpki-client