$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b412bf42-ff25-395a-9630-d00c43782b89.roa File: b412bf42-ff25-395a-9630-d00c43782b89.roa (raw, json) Hash identifier: 0+pFcMyX+aX08jBVQ7Zwf1KSQrJZYNXdaOFVGAcAj80= Subject key identifier: 7A:58:22:67:D9:B7:9C:83:49:B6:68:A2:EA:83:CF:10:31:DE:E5:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849998F49852311139418C55380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b412bf42-ff25-395a-9630-d00c43782b89.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 40647 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:49:85:23:11:13:94:18:c5:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=51dbd694-3117-4ff6-8fcd-43980e3bf8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:39:f3:57:7f:61:46:88:9b:e0:84:7b:68: f4:34:18:13:ae:ab:07:2c:12:bb:f6:ca:71:a4:ca: 00:cb:79:32:b6:61:c1:bb:a9:40:30:82:f3:1e:37: a2:f0:ed:37:43:7d:55:15:5a:76:19:58:fc:7b:bd: a2:da:03:3d:c5:41:bf:ab:22:6f:1b:98:dd:97:2a: db:6f:57:25:cd:93:ad:29:23:15:fa:7a:ab:62:64: 06:2a:7f:99:1f:3c:d2:78:06:a0:d2:80:27:6c:12: 03:8f:16:6e:51:c4:19:09:8b:6f:39:a8:5c:0f:61: b7:16:7d:c6:58:45:85:af:ad:6e:c8:33:fb:f9:5d: e1:21:ca:1b:cc:76:c2:24:f0:de:37:65:72:0f:1b: d1:eb:c2:21:da:16:f9:92:88:7e:ea:dd:8a:79:fd: 43:2a:9d:42:86:9b:8c:f4:72:2a:54:c5:3f:b1:ea: e0:3e:3b:07:b9:f7:7e:e3:30:52:40:78:70:1c:60: 0a:d7:69:1b:4f:0b:67:fb:d2:47:29:40:65:7b:d6: 72:01:89:7e:6b:6a:f9:25:02:a2:89:5d:81:05:f0: 37:3d:8d:23:b3:2e:b3:77:d7:2d:ae:8c:1e:ed:2e: fd:e2:16:88:4b:c1:23:7d:0c:a1:2f:7e:bb:35:e8: 8e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:58:22:67:D9:B7:9C:83:49:B6:68:A2:EA:83:CF:10:31:DE:E5:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b412bf42-ff25-395a-9630-d00c43782b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e4:da:e0:68:12:a5:06:7b:17:0b:a9:2e:03:0c:af:a5:18: b8:82:b2:fe:04:e7:c3:b5:97:65:d0:89:58:64:03:d8:02:98: 4f:ba:f2:12:5c:05:ac:03:d3:02:ee:8c:b8:a9:5e:aa:1d:25: cc:f1:c3:81:3f:31:8e:f1:94:31:32:39:d1:fd:26:0a:f2:f0: 88:06:19:9a:5f:cb:2e:9f:0a:de:8e:2e:13:ac:4f:76:67:46: 8b:f8:42:08:d1:6a:2d:1f:c9:e1:d3:1e:9b:82:1b:ae:02:a4: d9:ae:65:cd:b8:b2:3b:7e:42:96:be:a4:3e:14:05:28:9a:20: 3d:e6:a4:f5:74:27:ef:7b:45:e8:31:44:e7:25:a1:7e:4e:27: 51:2b:2c:18:10:7d:9c:a1:cf:f4:ac:45:b2:e2:8d:37:6b:77: ea:a7:2c:1d:0c:7d:92:d0:5c:86:f6:7f:ad:dc:2f:ca:7b:02: 4c:48:bf:ca:ef:95:ba:95:7a:38:80:be:85:62:6b:3a:8e:1e: 6f:6d:fd:58:03:dd:65:cf:ae:3f:08:98:94:b6:56:4c:e9:e0: a1:77:2a:90:bb:e0:c1:51:c9:9a:1a:75:45:4c:28:c8:09:2f: 0d:4f:81:9b:2b:13:25:52:f7:ee:7d:03:f5:3c:81:b4:81:72: 8f:73:ab:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0mFIxETlBjFU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk NTFkYmQ2OTQtMzExNy00ZmY2LThmY2QtNDM5ODBlM2JmOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse8581d/YUaIm+CEe2j0NBgTrqsHLBK79spx pMoAy3kytmHBu6lAMILzHjei8O03Q31VFVp2GVj8e72i2gM9xUG/qyJvG5jdlyrb b1clzZOtKSMV+nqrYmQGKn+ZHzzSeAag0oAnbBIDjxZuUcQZCYtvOahcD2G3Fn3G WEWFr61uyDP7+V3hIcobzHbCJPDeN2VyDxvR68Ih2hb5koh+6t2Kef1DKp1ChpuM 9HIqVMU/sergPjsHufd+4zBSQHhwHGAK12kbTwtn+9JHKUBle9ZyAYl+a2r5JQKi iV2BBfA3PY0jsy6zd9ctrowe7S794haIS8EjfQyhL367NeiOJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHpYImfZt5yDSbZoouqDzxAx3uVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjQxMmJmNDItZmYyNS0z OTVhLTk2MzAtZDAwYzQzNzgyYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA15NrgaBKlBnsXC6kuAwyvpRi4grL+BOfDtZdl 0IlYZAPYAphPuvISXAWsA9MC7oy4qV6qHSXM8cOBPzGO8ZQxMjnR/SYK8vCIBhma X8sunwreji4TrE92Z0aL+EII0WotH8nh0x6bghuuAqTZrmXNuLI7fkKWvqQ+FAUo miA95qT1dCfve0XoMUTnJaF+TidRKywYEH2coc/0rEWy4o03a3fqpywdDH2S0FyG 9n+t3C/KewJMSL/K75W6lXo4gL6FYms6jh5vbf1YA91lz64/CJiUtlZM6eChdyqQ u+DBUcmaGnVFTCjICS8NT4GbKxMlUvfufQP1PIG0gXKPc6u9 -----END CERTIFICATE-----Generated at Sun Apr 27 04:15:45 2025 by rpki-client