$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6c8c13-7e8e-305a-a7c4-e65fa1f1d95b.roa File: cd6c8c13-7e8e-305a-a7c4-e65fa1f1d95b.roa (raw, json) Hash identifier: T5YxamfA5Ex4VkPZFo8WHL/I8Fk9uA/IUIKMiPuYuCw= Subject key identifier: D1:CF:6B:DC:78:30:C2:62:09:B3:31:BE:0B:B1:E5:FB:07:E6:B6:CD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DD0DD2AC63DE7FA49B20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6c8c13-7e8e-305a-a7c4-e65fa1f1d95b.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 20362 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:dd:0d:d2:ac:63:de:7f:a4:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=9dac07b0-06f9-4a32-b4aa-52fc67d2d6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:7b:87:2d:56:30:68:06:30:76:a6:68:02: c7:0b:7e:fb:fa:b6:2d:1e:ba:fd:c0:43:bb:2a:c1: 1b:7e:b5:de:95:09:88:ca:95:7b:b5:4e:d3:16:c2: 9a:d0:a8:d3:6c:72:38:3b:65:2e:b8:7d:12:39:6a: dd:b8:b2:6d:32:65:81:21:a6:ec:b6:dd:a5:a3:4f: 13:56:ba:a9:1c:be:35:3d:e6:b4:0e:7f:d2:af:a2: d7:d4:c0:74:6c:fb:27:31:7e:4f:5d:be:bb:ce:59: 8c:1f:1e:fc:c0:d5:d7:57:27:26:af:87:27:ee:f6: 86:59:49:7c:80:97:4d:e4:06:8c:b4:8b:3b:f2:f0: 1f:82:72:46:d4:80:1a:40:70:aa:91:bc:4b:4e:43: f1:5e:62:cf:ed:14:a8:d9:f6:ea:0e:3c:a4:69:0f: 38:2c:f1:df:19:94:3a:1b:8f:92:ea:34:47:f5:70: 5a:af:d2:55:4d:43:4e:e1:88:43:98:e9:31:d0:ac: fe:54:1b:6c:a0:17:e5:f1:7f:7f:dd:ed:08:55:48: e7:f9:73:2f:f0:2d:60:eb:94:95:87:7c:35:9f:30: a6:96:0f:68:5b:a9:34:00:03:1d:87:86:28:86:b7: 73:83:2a:7b:cd:1a:b0:b3:49:4e:7d:13:d1:a2:f8: 51:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:CF:6B:DC:78:30:C2:62:09:B3:31:BE:0B:B1:E5:FB:07:E6:B6:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6c8c13-7e8e-305a-a7c4-e65fa1f1d95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c6:de:59:fb:a6:b4:e7:ad:87:67:0a:d9:17:67:d1:bf:f2: cf:c0:19:83:38:dc:87:e2:9f:ed:89:16:b5:10:8a:e8:98:26: e6:29:a1:d6:e6:4e:7c:3c:fd:6e:f0:a3:36:d1:e4:8f:42:af: 53:79:93:3f:9d:15:5b:f0:e6:66:7a:83:4d:37:ed:8f:7e:92: 7d:88:11:07:41:e7:30:f6:82:fd:6d:d5:6f:a1:b0:ab:50:b0: e5:da:37:78:ff:aa:9f:93:0c:85:1b:c5:dd:ac:02:4f:93:13: 32:e9:25:de:37:e0:06:70:d1:70:d7:ae:6e:74:e7:a2:dd:d8: b1:0d:92:93:25:a7:3f:0d:29:de:42:3b:b9:a9:af:ba:8d:7f: 99:2c:e3:1f:35:1d:ab:49:7e:97:be:cc:90:60:a2:9a:7e:58: 55:e8:d9:ec:fe:91:83:53:cb:ab:1b:80:a7:df:b9:a4:c6:92: 9d:3a:eb:bd:f4:5f:43:10:08:b0:98:a7:9b:17:a5:50:4e:77: f3:5f:9e:6c:f4:e3:08:47:d6:4e:91:04:d8:69:e9:8d:56:1e: 42:7d:3b:53:be:98:d3:6c:89:51:9b:8f:84:03:13:ab:3f:f1: 42:81:30:a6:a3:b1:ff:d1:2d:3f:3c:89:34:16:2c:eb:85:9e: 81:7f:d8:b0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmd0N0qxj3n+kmyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk OWRhYzA3YjAtMDZmOS00YTMyLWI0YWEtNTJmYzY3ZDJkNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR57hy1WMGgGMHamaALHC377+rYtHrr9wEO7 KsEbfrXelQmIypV7tU7TFsKa0KjTbHI4O2UuuH0SOWrduLJtMmWBIabstt2lo08T VrqpHL41Pea0Dn/Sr6LX1MB0bPsnMX5PXb67zlmMHx78wNXXVycmr4cn7vaGWUl8 gJdN5AaMtIs78vAfgnJG1IAaQHCqkbxLTkPxXmLP7RSo2fbqDjykaQ84LPHfGZQ6 G4+S6jRH9XBar9JVTUNO4YhDmOkx0Kz+VBtsoBfl8X9/3e0IVUjn+XMv8C1g65SV h3w1nzCmlg9oW6k0AAMdh4Yohrdzgyp7zRqws0lOfRPRovhRaQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNHPa9x4MMJiCbMxvgux5fsH5rbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q2YzhjMTMtN2U4ZS0z MDVhLWE3YzQtZTY1ZmExZjFkOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC3xt5Z+6a0562HZwrZF2fRv/LPwBmDONyH4p/t iRa1EIromCbmKaHW5k58PP1u8KM20eSPQq9TeZM/nRVb8OZmeoNNN+2PfpJ9iBEH Qecw9oL9bdVvobCrULDl2jd4/6qfkwyFG8XdrAJPkxMy6SXeN+AGcNFw165udOei 3dixDZKTJac/DSneQju5qa+6jX+ZLOMfNR2rSX6XvsyQYKKaflhV6Nns/pGDU8ur G4Cn37mkxpKdOuu99F9DEAiwmKebF6VQTnfzX55s9OMIR9ZOkQTYaemNVh5CfTtT vpjTbIlRm4+EAxOrP/FCgTCmo7H/0S0/PIk0FizrhZ6Bf9iw -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:07 2025 by rpki-client