$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca8f5b7-b1e0-39bf-9706-2f9314feb3f2.roa File: cca8f5b7-b1e0-39bf-9706-2f9314feb3f2.roa (raw, json) Hash identifier: GIwyNoTXtxkAmoU1RqkHJ3HsqDFUUgrr3FTA1QqMhIk= Subject key identifier: 43:81:2D:6D:49:3C:7F:B9:D8:F2:5A:E2:D2:4B:5E:45:C0:AB:6D:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C3493B32A501B320D940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca8f5b7-b1e0-39bf-9706-2f9314feb3f2.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396586 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c3:49:3b:32:a5:01:b3:20:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=996e5f13-b454-4806-9e29-832e513bd9b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:92:db:88:05:7f:5d:06:a5:91:a4:7f:7c:6a: 93:f0:3e:30:03:b9:77:b2:86:31:66:16:cc:ad:a3: bc:fb:09:2c:60:d2:f5:3a:50:0c:cd:f9:d7:7c:a8: 54:31:f1:1a:2a:29:86:e6:22:5a:99:d5:9c:f2:2c: 67:d5:8e:a0:b4:10:38:67:8f:15:00:87:ac:74:f1: bc:ee:42:40:97:0f:ea:8b:04:3d:d0:20:1d:86:8b: d1:9e:4f:9c:35:2c:9d:49:9e:1c:06:d4:97:e1:3a: c4:f9:7e:2a:ca:33:fc:24:cb:18:a1:27:da:58:6a: e7:a9:45:cd:f0:de:e3:8c:fb:06:a3:b9:a0:34:36: 80:8a:0e:36:10:19:45:7b:c9:86:98:d0:56:76:d6: b7:17:a5:9d:24:7d:14:3b:97:02:bd:a3:72:2c:db: d0:2e:db:f3:f8:7f:96:1a:ae:de:b0:20:15:84:6b: 8b:50:5a:c9:f3:0d:5b:f6:1f:69:ec:d3:98:eb:38: f3:29:f0:f8:50:47:6d:93:0e:3d:ff:51:c6:b2:23: 52:b4:19:e8:f2:ff:f9:ed:2b:32:04:12:b5:9c:17: f5:2f:d5:b0:8e:46:75:fc:be:9f:be:88:da:dd:ba: 15:d4:af:8e:0e:fb:34:a9:7a:57:ee:f6:b6:9d:55: 54:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:81:2D:6D:49:3C:7F:B9:D8:F2:5A:E2:D2:4B:5E:45:C0:AB:6D:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca8f5b7-b1e0-39bf-9706-2f9314feb3f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:6e:f8:f2:4e:39:42:7b:64:6d:bc:9c:81:85:e0:e2:89:6e: b2:a3:5a:f0:21:d5:3a:58:69:a4:89:48:02:c6:82:6d:59:d7: 02:42:f0:90:ec:fd:dd:0c:4b:72:7e:53:89:e7:bf:26:32:bb: fa:ea:81:c8:a5:63:fe:58:9f:a3:83:91:26:bb:23:ee:e3:00: a9:9c:22:ea:77:ab:d2:ef:31:e7:68:69:a7:1a:39:98:58:f5: 1b:c2:c4:ae:d2:c8:18:c6:f3:4d:86:55:c3:3a:9e:e0:33:22: 27:cb:0f:5a:cb:e2:42:3e:37:c8:b2:d8:09:7a:60:ea:c2:aa: 32:86:5b:2c:80:49:c0:97:e3:43:99:55:70:f9:a0:e2:d6:64: f4:3c:00:98:bf:83:a2:b1:92:b1:50:89:08:c7:5c:52:ec:55: f4:3e:ad:ff:d3:c1:9d:8e:8f:a1:14:64:38:51:08:90:75:ea: 1f:cb:9f:f9:c7:ad:ae:f3:d5:ae:76:04:b1:b6:26:8b:e5:6f: 21:71:42:11:ef:ad:bd:1c:0e:5a:95:16:0e:a8:39:c6:4e:bb: 9c:5b:af:41:2a:47:87:70:b4:e2:c9:67:19:10:55:db:9b:f5: 9b:82:61:d4:12:f9:8e:ac:b0:a3:7f:c8:b5:8b:27:eb:de:41: 53:53:a4:14 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMNJOzKlAbMg2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTk2ZTVmMTMtYjQ1NC00ODA2LTllMjktODMyZTUxM2JkOWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZLbiAV/XQalkaR/fGqT8D4wA7l3soYxZhbM raO8+wksYNL1OlAMzfnXfKhUMfEaKimG5iJamdWc8ixn1Y6gtBA4Z48VAIesdPG8 7kJAlw/qiwQ90CAdhovRnk+cNSydSZ4cBtSX4TrE+X4qyjP8JMsYoSfaWGrnqUXN 8N7jjPsGo7mgNDaAig42EBlFe8mGmNBWdta3F6WdJH0UO5cCvaNyLNvQLtvz+H+W Gq7esCAVhGuLUFrJ8w1b9h9p7NOY6zjzKfD4UEdtkw49/1HGsiNStBno8v/57Ssy BBK1nBf1L9WwjkZ1/L6fvoja3boV1K+ODvs0qXpX7va2nVVUuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEOBLW1JPH+52PJa4tJLXkXAq21DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2NhOGY1YjctYjFlMC0z OWJmLTk3MDYtMmY5MzE0ZmViM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCnbvjyTjlCe2RtvJyBheDiiW6yo1rwIdU6WGmk iUgCxoJtWdcCQvCQ7P3dDEtyflOJ578mMrv66oHIpWP+WJ+jg5EmuyPu4wCpnCLq d6vS7zHnaGmnGjmYWPUbwsSu0sgYxvNNhlXDOp7gMyInyw9ay+JCPjfIstgJemDq wqoyhlssgEnAl+NDmVVw+aDi1mT0PACYv4OisZKxUIkIx1xS7FX0Pq3/08Gdjo+h FGQ4UQiQdeofy5/5x62u89WudgSxtiaL5W8hcUIR7629HA5alRYOqDnGTrucW69B KkeHcLTiyWcZEFXbm/WbgmHUEvmOrLCjf8i1iyfr3kFTU6QU -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:51 2025 by rpki-client