$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb01b3b-06f8-39de-9070-32b9c374ef61.roa File: cbb01b3b-06f8-39de-9070-32b9c374ef61.roa (raw, json) Hash identifier: VqY/Ru0f/kMr8ZsjFAlmQLBtG3ti7Nd7wHD5lI/msYw= Subject key identifier: B2:A6:2E:46:34:6F:E2:0B:9F:D6:03:42:DD:DD:D3:77:99:F1:73:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C064BE315C5FCB1F6500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb01b3b-06f8-39de-9070-32b9c374ef61.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396585 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c0:64:be:31:5c:5f:cb:1f:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=154fbb6d-68f9-4a86-aa1c-85736c0da194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:25:59:0d:f9:21:9a:5b:7b:b8:f9:f9:cc:8c: d3:96:b4:98:8a:31:f4:ec:20:be:93:67:0a:5d:b2: 87:e3:e0:86:92:6c:b5:ec:bb:2e:39:44:76:eb:27: 87:c5:e4:02:22:f6:25:0c:9f:94:43:2f:c5:29:cb: 71:00:c1:13:cb:0f:39:41:e6:a7:b6:1a:1f:ec:1c: f7:57:80:6f:9f:41:8d:64:d5:fa:9f:b7:cd:03:c7: 33:a2:f0:2b:f6:af:c0:a4:5e:9d:3b:41:f3:11:ec: 4c:54:09:62:73:0e:98:f0:da:65:9c:db:48:81:07: 92:a5:15:50:0a:27:cd:82:6d:fc:e4:e9:7b:13:d6: 67:1a:bc:16:f3:77:48:ee:c7:b9:91:3d:d5:89:da: 1e:a4:bb:75:36:4a:06:4f:2f:e8:f8:d9:ed:2b:36: 13:10:28:0d:c7:aa:90:64:d5:15:0b:c5:67:0f:1a: 06:44:50:7d:5d:ee:c4:26:7b:09:b7:63:dd:56:4e: b2:39:95:a0:41:90:0b:13:18:2b:7c:98:a6:75:2c: 3e:9b:b9:c4:00:1e:a8:d9:fa:21:fd:1d:e2:ca:80: bc:1f:81:df:d4:54:fb:39:48:18:f4:6a:6a:c6:ec: 70:f9:b2:de:9a:12:a6:8d:12:de:a0:37:55:24:e8: f6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A6:2E:46:34:6F:E2:0B:9F:D6:03:42:DD:DD:D3:77:99:F1:73:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbb01b3b-06f8-39de-9070-32b9c374ef61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:90:4a:a2:9d:a4:e0:71:9f:56:36:6a:c0:fe:24:d1:c2:3b: d3:74:3b:19:37:95:9a:0c:2a:9a:09:49:67:f4:3d:08:aa:93: cd:8f:44:24:b1:ee:1e:5b:5f:09:a2:85:f7:16:1d:e2:58:55: 0d:35:cb:d6:45:63:96:e2:60:fd:8e:d1:28:b0:aa:a0:d2:d2: 60:2e:5d:c8:fd:1a:21:70:38:41:f7:0b:a3:0e:88:76:d7:c5: a6:67:17:08:f0:6e:88:0e:c0:d4:33:eb:63:63:78:a6:12:ce: 01:1c:ef:5d:17:9e:15:09:65:4a:3f:e3:b3:67:bc:f0:1a:a0: fa:d2:b3:8c:11:76:e9:3c:ff:5a:0f:55:20:d2:4e:56:27:17: 0d:20:07:62:cf:ab:5a:89:b3:44:d6:19:87:ee:81:57:4e:f0: cd:04:d4:e1:85:b1:1e:53:9e:66:66:2d:97:1c:dd:0f:67:d6: a1:7f:ec:14:a6:de:0b:19:80:68:bd:dc:3a:c6:1e:57:95:38: 33:62:86:1a:90:dd:e2:c3:b0:e0:12:ad:95:02:e1:ff:20:00: 6f:6a:6d:1c:a0:f2:d3:97:06:08:61:4e:b9:e9:40:bc:2e:14: dd:ff:17:fb:10:b6:e0:0f:94:d3:00:76:fe:1f:12:fe:3b:f0: c9:26:e9:f6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMBkvjFcX8sfZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MTU0ZmJiNmQtNjhmOS00YTg2LWFhMWMtODU3MzZjMGRhMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyVZDfkhmlt7uPn5zIzTlrSYijH07CC+k2cK XbKH4+CGkmy17LsuOUR26yeHxeQCIvYlDJ+UQy/FKctxAMETyw85Qeanthof7Bz3 V4Bvn0GNZNX6n7fNA8czovAr9q/ApF6dO0HzEexMVAlicw6Y8NplnNtIgQeSpRVQ CifNgm385Ol7E9ZnGrwW83dI7se5kT3VidoepLt1NkoGTy/o+NntKzYTECgNx6qQ ZNUVC8VnDxoGRFB9Xe7EJnsJt2PdVk6yOZWgQZALExgrfJimdSw+m7nEAB6o2foh /R3iyoC8H4Hf1FT7OUgY9Gpqxuxw+bLemhKmjRLeoDdVJOj2pQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLKmLkY0b+ILn9YDQt3d03eZ8XOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2JiMDFiM2ItMDZmOC0z OWRlLTkwNzAtMzJiOWMzNzRlZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC5kEqinaTgcZ9WNmrA/iTRwjvTdDsZN5WaDCqa CUln9D0IqpPNj0Qkse4eW18JooX3Fh3iWFUNNcvWRWOW4mD9jtEosKqg0tJgLl3I /RohcDhB9wujDoh218WmZxcI8G6IDsDUM+tjY3imEs4BHO9dF54VCWVKP+OzZ7zw GqD60rOMEXbpPP9aD1Ug0k5WJxcNIAdiz6taibNE1hmH7oFXTvDNBNThhbEeU55m Zi2XHN0PZ9ahf+wUpt4LGYBovdw6xh5XlTgzYoYakN3iw7DgEq2VAuH/IABvam0c oPLTlwYIYU656UC8LhTd/xf7ELbgD5TTAHb+HxL+O/DJJun2 -----END CERTIFICATE-----Generated at Sun Apr 27 05:46:12 2025 by rpki-client