$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa File: b391d9a3-be6a-3e10-b3b4-5de58481660e.roa (raw, json) Hash identifier: Ta4L/YRytNGjjHoxuIHlRfZ8Q3eoGw2s8Zvp9XvIl+U= Subject key identifier: DA:08:7F:06:41:E4:FB:D8:60:07:13:A4:95:56:77:8F:7F:81:CA:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C0FF4043A9628174A080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396567 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c0:ff:40:43:a9:62:81:74:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=6974f157-be4d-4a99-bbd4-b88badc91ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:60:b8:ef:70:82:a4:61:9c:b3:c1:9e:ca: f3:7c:6d:68:09:83:33:f8:f8:1f:87:77:29:5a:d5: 07:ef:f2:2b:fb:05:ec:5c:4f:21:74:ac:8e:f4:c7: cd:75:f2:f0:08:96:81:49:f4:61:8e:3b:0d:b3:dd: 27:5b:b0:ab:05:8c:94:14:7c:2f:b3:8c:24:4e:b1: 5d:0a:db:4b:23:c4:35:f0:88:36:2d:aa:01:07:e1: 67:0b:a6:ea:08:aa:0c:04:ba:40:9f:14:2e:77:31: 49:4f:9d:80:52:42:be:97:79:8c:69:56:07:64:74: a5:fa:0c:d8:9e:ab:c3:77:50:1a:c4:86:13:a8:53: c7:42:ec:76:03:10:8c:d0:90:ad:ea:a5:a9:7f:f0: a0:bd:2c:26:43:e0:21:f7:56:03:11:a6:3a:20:ed: 74:30:11:93:bf:84:86:59:ef:36:35:ed:72:43:09: cb:5e:5f:2f:14:39:a9:9a:91:bd:2a:86:8a:f5:fe: 3b:d4:c8:c7:16:fb:d6:d2:65:34:61:4b:f4:31:3d: 96:ed:34:e1:1f:b9:53:8c:9b:95:29:2e:10:48:ed: 08:9a:e3:99:79:d1:b5:dc:cf:7b:fa:a8:39:db:95: 16:a9:85:d0:f0:98:ac:a8:e1:9a:8a:7c:5c:9f:47: b0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:08:7F:06:41:E4:FB:D8:60:07:13:A4:95:56:77:8F:7F:81:CA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b391d9a3-be6a-3e10-b3b4-5de58481660e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e6:e8:90:01:62:97:76:56:c5:f8:d6:99:63:13:0b:5e:31: 14:79:66:5d:a7:3b:bd:3b:e1:b8:48:0a:2c:b8:22:8c:f8:ee: c5:51:14:4b:05:b4:15:2c:f0:2c:e8:dd:53:b1:cd:d3:e5:dc: d2:7a:93:b5:e4:b7:fb:8d:99:e0:0b:df:87:9d:80:48:bd:df: 5c:1a:fb:85:2a:f7:d0:0a:d3:d8:ca:f2:84:40:d1:e9:95:ea: aa:42:bd:87:26:d6:3a:9b:26:3b:d6:1e:df:7f:bb:47:1b:f5: 27:2a:70:09:f7:bc:fc:6f:21:cc:ff:87:29:d6:ec:c0:d0:9f: 58:e9:4b:48:7f:f7:20:32:94:78:a5:7c:cd:7e:4a:0e:5a:12: d0:dd:99:ad:e3:20:21:5f:0b:88:2b:2b:81:73:52:ff:b3:96: ae:eb:60:c9:4d:10:21:e3:49:3d:47:cb:52:0d:99:11:03:1b: 7f:18:8d:ae:25:4a:e7:a5:aa:13:35:b0:bf:3c:73:07:6b:4c: 94:71:cc:f9:7a:aa:83:aa:ac:e8:87:de:31:53:db:b8:c2:86: 71:4a:9e:d7:36:88:c4:1f:37:94:0c:d4:e4:9a:48:73:b7:9b: 33:19:1e:e5:9e:bc:69:74:41:bf:da:b0:2b:3b:dc:ad:92:f7: e9:af:98:4c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMD/QEOpYoF0oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk Njk3NGYxNTctYmU0ZC00YTk5LWJiZDQtYjg4YmFkYzkxYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0hguO9wgqRhnLPBnsrzfG1oCYMz+Pgfh3cp WtUH7/Ir+wXsXE8hdKyO9MfNdfLwCJaBSfRhjjsNs90nW7CrBYyUFHwvs4wkTrFd CttLI8Q18Ig2LaoBB+FnC6bqCKoMBLpAnxQudzFJT52AUkK+l3mMaVYHZHSl+gzY nqvDd1AaxIYTqFPHQux2AxCM0JCt6qWpf/CgvSwmQ+Ah91YDEaY6IO10MBGTv4SG We82Ne1yQwnLXl8vFDmpmpG9KoaK9f471MjHFvvW0mU0YUv0MT2W7TThH7lTjJuV KS4QSO0ImuOZedG13M97+qg525UWqYXQ8JisqOGainxcn0ewQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNoIfwZB5PvYYAcTpJVWd49/gcrhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjM5MWQ5YTMtYmU2YS0z ZTEwLWIzYjQtNWRlNTg0ODE2NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAc5uiQAWKXdlbF+NaZYxMLXjEUeWZdpzu9O+G4 SAosuCKM+O7FURRLBbQVLPAs6N1Tsc3T5dzSepO15Lf7jZngC9+HnYBIvd9cGvuF KvfQCtPYyvKEQNHpleqqQr2HJtY6myY71h7ff7tHG/UnKnAJ97z8byHM/4cp1uzA 0J9Y6UtIf/cgMpR4pXzNfkoOWhLQ3Zmt4yAhXwuIKyuBc1L/s5au62DJTRAh40k9 R8tSDZkRAxt/GI2uJUrnpaoTNbC/PHMHa0yUccz5eqqDqqzoh94xU9u4woZxSp7X NojEHzeUDNTkmkhzt5szGR7lnrxpdEG/2rArO9ytkvfpr5hM -----END CERTIFICATE-----Generated at Sun Apr 27 02:01:03 2025 by rpki-client