$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa File: bd3f39b1-225c-3a63-b362-46081ce30613.roa (raw, json) Hash identifier: qsj+pRMBFrvvYwrnf/qVDhchRhpseiV06LOEgrTh+vI= Subject key identifier: D3:0B:20:DB:BA:F7:DA:5F:76:F1:25:FE:6F:59:5F:26:47:EB:94:06 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C456B17B76E58E49C380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36626 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c4:56:b1:7b:76:e5:8e:49:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=d4c08a90-27ab-4f83-b559-d912fd1d212f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:79:0f:2e:0f:0b:73:09:38:9c:74:49:ca:dd: 15:8f:ba:63:e6:80:69:2f:bb:1b:df:fc:86:4c:b4: 90:62:b8:2f:be:a1:9d:54:f4:6c:7e:36:f1:44:1e: b1:3b:fb:8d:b4:7f:b0:d2:7f:85:46:30:5e:18:33: ba:50:b7:ef:82:8c:e0:6a:69:cb:3a:0a:3e:af:84: ef:0a:61:ee:0b:3a:46:c7:9d:7a:f0:c3:d1:f5:7c: 80:2f:f1:10:70:dd:77:96:aa:5a:bf:48:8a:e6:37: 75:e9:88:0c:43:4a:79:62:49:48:fd:ec:eb:54:05: 5a:50:4e:42:e3:75:e7:72:a4:c9:a0:01:4a:4e:74: 15:5a:9d:dd:b3:72:50:17:ad:b8:3e:68:1c:49:f8: 05:4a:07:b1:fe:18:e8:9a:0d:f0:f1:d3:f5:a9:a1: e6:95:5d:84:4b:20:c4:6b:b0:17:85:ec:d2:b7:44: 3b:67:c1:01:b3:01:67:6a:25:a2:6a:fa:3d:75:34: f9:c8:e4:cf:e3:d4:a1:4f:5a:20:40:5a:c2:6c:f2: 36:60:f7:ea:9a:8a:34:ec:e6:4f:e2:67:37:80:09: bc:4d:20:fb:b6:2c:de:50:b2:1b:68:0a:a0:f2:75: bd:b1:94:ab:a0:19:77:b5:f1:b5:64:e8:0c:75:0d: 4f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0B:20:DB:BA:F7:DA:5F:76:F1:25:FE:6F:59:5F:26:47:EB:94:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd3f39b1-225c-3a63-b362-46081ce30613.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:85:17:0d:2f:97:04:3b:69:18:76:a3:43:ec:2e:d2:c2:9d: b8:f1:df:02:e0:cf:10:3f:5a:f3:4b:26:61:10:4d:0d:6f:da: a1:f4:ac:b1:b8:28:80:38:93:60:16:b7:e6:34:01:29:32:d7: 4e:89:ce:82:82:88:88:46:22:57:13:cf:24:9f:56:1c:ec:dc: b4:6d:1a:e3:de:c8:71:99:0f:16:80:61:3f:a4:e1:27:bd:dd: ae:a2:4c:ba:66:f4:c6:1e:50:bf:cb:6e:e0:0f:6d:8b:27:11: 61:09:0e:ef:47:10:af:76:ed:72:5b:62:92:d4:5c:27:85:1f: b4:b0:15:60:ce:15:30:1c:c9:f7:70:67:2f:5b:7e:bf:7d:4c: 9e:bf:4d:b6:3c:10:d0:7c:57:18:55:e9:42:98:44:ef:3d:22: 8b:e7:47:94:32:37:01:3f:dc:e9:89:6d:40:0f:4e:f8:6a:d7: 8e:24:84:51:15:39:c2:55:14:5b:46:70:25:c0:97:e7:16:ca: 0e:fe:29:95:30:00:8c:97:1f:84:56:77:27:23:59:43:5f:12: 44:d1:c6:23:a3:9c:2e:cc:78:0f:f0:ac:f9:2b:77:14:e2:ae: 51:05:52:bc:0b:b4:2a:48:6c:f3:96:f9:e9:6b:a0:44:86:35: f0:3c:fd:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMRWsXt25Y5Jw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDRjMDhhOTAtMjdhYi00ZjgzLWI1NTktZDkxMmZkMWQyMTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHkPLg8Lcwk4nHRJyt0Vj7pj5oBpL7sb3/yG TLSQYrgvvqGdVPRsfjbxRB6xO/uNtH+w0n+FRjBeGDO6ULfvgozgamnLOgo+r4Tv CmHuCzpGx5168MPR9XyAL/EQcN13lqpav0iK5jd16YgMQ0p5YklI/ezrVAVaUE5C 43XncqTJoAFKTnQVWp3ds3JQF624PmgcSfgFSgex/hjomg3w8dP1qaHmlV2ESyDE a7AXhezSt0Q7Z8EBswFnaiWiavo9dTT5yOTP49ShT1ogQFrCbPI2YPfqmoo07OZP 4mc3gAm8TSD7tizeULIbaAqg8nW9sZSroBl3tfG1ZOgMdQ1PDQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNMLINu699pfdvEl/m9ZXyZH65QGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQzZjM5YjEtMjI1Yy0z YTYzLWIzNjItNDYwODFjZTMwNjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEhRcNL5cEO2kYdqND7C7Swp248d8C4M8QP1rz SyZhEE0Nb9qh9KyxuCiAOJNgFrfmNAEpMtdOic6CgoiIRiJXE88kn1Yc7Ny0bRrj 3shxmQ8WgGE/pOEnvd2uoky6ZvTGHlC/y27gD22LJxFhCQ7vRxCvdu1yW2KS1Fwn hR+0sBVgzhUwHMn3cGcvW36/fUyev022PBDQfFcYVelCmETvPSKL50eUMjcBP9zp iW1AD074ateOJIRRFTnCVRRbRnAlwJfnFsoO/imVMACMlx+EVncnI1lDXxJE0cYj o5wuzHgP8Kz5K3cU4q5RBVK8C7QqSGzzlvnpa6BEhjXwPP2l -----END CERTIFICATE-----Generated at Mon Apr 28 16:28:38 2025 by rpki-client