$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c811144d-9dfb-34c6-8258-0e002d9e75f2.roa File: c811144d-9dfb-34c6-8258-0e002d9e75f2.roa (raw, json) Hash identifier: 9asTgyVRnzNmNc+MTVyNYbJJyF1riaEuvYoCts/Yg64= Subject key identifier: 42:94:C1:0E:8D:1A:57:FA:73:DA:96:FF:30:E0:52:9F:C7:18:E8:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849998F4A813555A0AF5E8605C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c811144d-9dfb-34c6-8258-0e002d9e75f2.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 36627 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:4a:81:35:55:a0:af:5e:86:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=c1d6b6e6-f826-4469-8720-6794fc65a85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:9e:da:6d:0b:a2:19:cc:3a:03:2f:49:71: b3:57:f7:b9:08:31:31:e6:dc:a2:ae:8b:52:fc:3c: bb:3e:e9:c5:ab:58:b5:ce:2c:ba:8f:b5:3e:06:2f: e4:42:b6:65:7a:60:e9:ce:b2:3b:ac:68:3c:03:99: 86:d3:f2:e6:f8:92:c4:9f:6d:82:d2:e6:07:c8:90: 6d:05:d1:5b:78:cd:06:33:43:24:c2:db:9e:0c:9f: c5:b4:5b:5a:77:a3:71:73:45:37:24:79:db:b9:06: d4:d3:8b:e9:db:8b:30:8c:c4:62:40:65:58:c5:16: 02:bb:77:a2:0e:9f:8b:95:06:47:99:c4:f5:34:2f: 72:6b:b3:f3:ac:0e:03:7d:fa:78:6b:a4:bc:c2:79: 20:73:48:61:06:02:f5:d5:ff:a5:28:91:5e:ff:db: 0b:fb:f3:67:9a:fd:7d:1b:85:17:22:02:d6:f3:68: 45:75:82:bb:19:98:7c:3d:c8:29:0f:f7:ce:4f:aa: 92:a9:90:90:ef:95:9c:33:b2:24:d8:89:f9:a2:48: cb:b0:5a:9b:78:d3:16:de:71:d8:2e:e1:86:d1:3c: 8e:7e:e4:ac:9f:d1:73:98:74:da:d2:ad:e5:12:af: f0:69:36:59:29:17:18:b3:1f:f6:f9:35:19:79:5a: 2c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:94:C1:0E:8D:1A:57:FA:73:DA:96:FF:30:E0:52:9F:C7:18:E8:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c811144d-9dfb-34c6-8258-0e002d9e75f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b9:b6:95:58:3d:0c:ef:f6:f4:c3:a4:db:ca:fe:ad:1d:a8: 1d:18:b1:89:be:a6:33:93:92:f9:d1:54:3b:07:42:f5:9e:dd: b7:4c:15:19:65:ef:8a:51:f6:66:8f:c2:c8:53:84:1d:e8:9f: 93:2a:4c:e5:49:7c:b9:c1:08:96:25:15:30:46:77:73:b0:19: dd:b9:5d:0a:82:f2:af:aa:b6:41:31:f1:6f:81:56:88:b4:64: 0a:cd:34:c4:96:ef:62:4a:a8:1f:3a:89:0b:2e:d7:56:4b:24: 7d:2d:9e:de:40:d4:12:74:cd:ac:b3:a8:79:a1:f0:5e:98:ff: 9f:e0:b5:c6:7a:7c:a2:fc:c6:3d:24:43:20:ca:d6:de:08:71: 70:96:4a:48:ca:5e:10:0c:6e:ed:e6:f3:f8:d2:c1:c3:f7:2e: 4d:ba:21:80:c5:e8:77:f6:0c:ad:33:51:94:c3:3f:0a:8b:6e: 0a:a5:f2:e3:b7:aa:ed:47:ca:3b:9d:c3:b1:ed:ac:72:2a:cd: aa:5e:87:12:88:41:cc:c1:fb:e7:85:1b:0d:d6:3f:ae:89:3b: 3f:d8:1c:27:9e:ba:80:f7:83:1b:05:8d:7c:b9:ad:bc:46:58: 61:08:79:bb:42:2d:b1:b3:93:24:77:88:dd:1b:d6:5b:29:a6: 40:53:21:e9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0qBNVWgr16GBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk YzFkNmI2ZTYtZjgyNi00NDY5LTg3MjAtNjc5NGZjNjVhODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7We2m0LohnMOgMvSXGzV/e5CDEx5tyirotS /Dy7PunFq1i1ziy6j7U+Bi/kQrZlemDpzrI7rGg8A5mG0/Lm+JLEn22C0uYHyJBt BdFbeM0GM0MkwtueDJ/FtFtad6Nxc0U3JHnbuQbU04vp24swjMRiQGVYxRYCu3ei Dp+LlQZHmcT1NC9ya7PzrA4Dffp4a6S8wnkgc0hhBgL11f+lKJFe/9sL+/Nnmv19 G4UXIgLW82hFdYK7GZh8PcgpD/fOT6qSqZCQ75WcM7Ik2In5okjLsFqbeNMW3nHY LuGG0TyOfuSsn9FzmHTa0q3lEq/waTZZKRcYsx/2+TUZeVos+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEKUwQ6NGlf6c9qW/zDgUp/HGOgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzgxMTE0NGQtOWRmYi0z NGM2LTgyNTgtMGUwMDJkOWU3NWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBRubaVWD0M7/b0w6Tbyv6tHagdGLGJvqYzk5L5 0VQ7B0L1nt23TBUZZe+KUfZmj8LIU4Qd6J+TKkzlSXy5wQiWJRUwRndzsBnduV0K gvKvqrZBMfFvgVaItGQKzTTElu9iSqgfOokLLtdWSyR9LZ7eQNQSdM2ss6h5ofBe mP+f4LXGenyi/MY9JEMgytbeCHFwlkpIyl4QDG7t5vP40sHD9y5NuiGAxeh39gyt M1GUwz8Ki24KpfLjt6rtR8o7ncOx7axyKs2qXocSiEHMwfvnhRsN1j+uiTs/2Bwn nrqA94MbBY18ua28RlhhCHm7Qi2xs5Mkd4jdG9ZbKaZAUyHp -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:41 2025 by rpki-client