$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7b4e5db-d0aa-3994-80f3-094e49a1c52a.roa File: b7b4e5db-d0aa-3994-80f3-094e49a1c52a.roa (raw, json) Hash identifier: jeExWSfmiIYgPgR1m7FBeOd+4N1ywvUOmbK2+Y+rSA4= Subject key identifier: 54:6B:DE:EB:E1:F0:96:54:89:A4:1B:4F:4F:D9:43:59:68:08:9B:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DF83381301949D1A9140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7b4e5db-d0aa-3994-80f3-094e49a1c52a.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396608 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:df:83:38:13:01:94:9d:1a:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=4dc4dade-3bd1-4759-92c3-d4f69e16b331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:83:d1:ab:97:cf:87:46:23:62:f9:d6:2c:31: ca:43:8f:fa:92:42:64:8a:44:87:46:e4:31:b5:58: 61:b3:0c:e6:71:ca:54:ed:51:dc:97:4c:d8:96:57: af:80:18:6f:47:1b:6f:6b:7c:42:b8:fa:fd:3f:19: 71:2d:05:a9:ca:8a:fc:c3:4b:9a:0b:a2:15:6a:e1: 22:dc:4a:75:19:d6:06:6f:3b:3d:34:f0:54:f9:c4: 1b:36:fa:e5:a4:bc:d5:08:e8:9d:66:64:fd:0f:fd: 29:f0:f0:ae:72:a1:ea:23:24:28:30:13:9f:cc:2c: a8:de:e6:85:24:bc:76:19:4f:f2:f4:f0:5f:bc:c3: 82:05:24:9e:3c:04:2e:29:e1:1b:55:62:74:87:ca: 51:b1:d0:31:e2:39:4c:b9:42:ed:c3:0f:c1:99:a1: 83:a8:b2:c5:5b:63:43:a2:8e:22:61:1f:bf:d8:70: 68:58:51:e7:6e:cd:42:d1:ea:01:08:4a:aa:55:d0: 1a:86:b2:11:b7:74:07:7a:be:9c:93:c5:1e:9c:72: 30:7d:87:6e:76:11:22:07:e5:34:b2:14:c1:04:ba: 56:e4:30:60:e0:97:bb:fd:67:d1:6a:ea:09:d5:37: 02:db:36:b7:9c:66:e8:41:45:0c:17:2d:52:ba:e9: 4e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6B:DE:EB:E1:F0:96:54:89:A4:1B:4F:4F:D9:43:59:68:08:9B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7b4e5db-d0aa-3994-80f3-094e49a1c52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:8e:4a:3a:f6:8b:82:55:cc:11:79:f6:99:22:be:7a:0d:68: f3:c5:7c:8d:c9:12:af:9a:1d:9e:bc:4c:46:b6:2a:9d:be:d0: f4:d9:9f:bb:96:9b:4a:3b:59:da:a3:e4:26:96:4c:21:dd:47: 7f:cf:ad:42:dc:46:18:75:47:16:54:4b:41:68:59:b2:34:a8: ff:18:1f:a3:03:53:8f:a1:c0:cd:d1:63:e1:5b:b5:b2:d5:43: da:27:99:b0:ef:86:9e:d6:23:61:d1:2d:2f:6b:61:8d:71:f2: 3f:21:97:5d:e9:91:04:80:28:e6:fa:54:5b:8c:cd:b5:46:2e: 93:62:10:ca:fc:b5:ff:37:e8:45:a3:55:2d:28:ed:21:1d:da: d4:28:51:b8:a8:d6:a3:d9:33:07:b6:59:cd:7a:7c:bb:1c:7d: 3f:da:a3:24:9f:6c:6a:88:1d:ab:91:87:e7:42:ec:5a:62:ee: e2:3d:74:ec:88:ba:81:bb:64:d3:5e:13:e8:8a:ca:39:9f:81: 2a:61:98:7d:99:77:8f:85:a2:30:4b:74:ce:ba:77:12:d8:2c: fd:61:0e:2a:ad:2d:df:7d:2c:b8:f9:69:41:49:75:7b:16:cc: 84:46:5f:fa:b8:6e:22:0c:35:db:91:f2:43:aa:0c:ab:55:56: 2d:1c:fc:a9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmd+DOBMBlJ0akUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk NGRjNGRhZGUtM2JkMS00NzU5LTkyYzMtZDRmNjllMTZiMzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4PRq5fPh0YjYvnWLDHKQ4/6kkJkikSHRuQx tVhhswzmccpU7VHcl0zYllevgBhvRxtva3xCuPr9PxlxLQWpyor8w0uaC6IVauEi 3Ep1GdYGbzs9NPBU+cQbNvrlpLzVCOidZmT9D/0p8PCucqHqIyQoMBOfzCyo3uaF JLx2GU/y9PBfvMOCBSSePAQuKeEbVWJ0h8pRsdAx4jlMuULtww/BmaGDqLLFW2ND oo4iYR+/2HBoWFHnbs1C0eoBCEqqVdAahrIRt3QHer6ck8UenHIwfYdudhEiB+U0 shTBBLpW5DBg4Je7/WfRauoJ1TcC2za3nGboQUUMFy1SuulOCQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFRr3uvh8JZUiaQbT0/ZQ1loCJsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjdiNGU1ZGItZDBhYS0z OTk0LTgwZjMtMDk0ZTQ5YTFjNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQApjko69ouCVcwRefaZIr56DWjzxXyNyRKvmh2e vExGtiqdvtD02Z+7lptKO1nao+Qmlkwh3Ud/z61C3EYYdUcWVEtBaFmyNKj/GB+j A1OPocDN0WPhW7Wy1UPaJ5mw74ae1iNh0S0va2GNcfI/IZdd6ZEEgCjm+lRbjM21 Ri6TYhDK/LX/N+hFo1UtKO0hHdrUKFG4qNaj2TMHtlnNeny7HH0/2qMkn2xqiB2r kYfnQuxaYu7iPXTsiLqBu2TTXhPoiso5n4EqYZh9mXePhaIwS3TOuncS2Cz9YQ4q rS3ffSy4+WlBSXV7FsyERl/6uG4iDDXbkfJDqgyrVVYtHPyp -----END CERTIFICATE-----Generated at Sat Apr 26 23:48:45 2025 by rpki-client