$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e417f3fd-8ce3-39b3-8c75-e6ef79cd9522.roa File: e417f3fd-8ce3-39b3-8c75-e6ef79cd9522.roa (raw, json) Hash identifier: s06P+5no3fr3Y7HMK9Cl202MnHVvq5kLgzaQ3NILfBw= Subject key identifier: 46:6A:CF:5F:79:DE:A9:98:84:F8:07:61:DF:68:5C:A0:C1:55:4A:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24BDCA83A292F9716BD000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e417f3fd-8ce3-39b3-8c75-e6ef79cd9522.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396608 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bd:ca:83:a2:92:f9:71:6b:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8e67790c-0cb8-4e74-ace9-807aedf9f590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:15:38:56:9f:5b:5c:73:36:a1:ff:78:6b:08: 26:9a:bf:6b:04:39:cc:81:67:ae:1e:6a:aa:8b:d9: b3:51:b5:dc:40:87:f5:b9:60:e6:71:73:17:b4:ee: e4:ad:d4:46:02:21:e7:a7:9b:e0:97:d3:86:d7:7e: 5a:72:68:f3:1b:99:ce:cb:4b:c4:47:a9:63:d6:26: 7e:d0:81:82:cd:40:0f:c5:9e:2d:96:14:d4:ca:1c: 01:bc:a7:0b:fd:6a:1d:48:29:3f:1e:ad:d1:dd:ac: 75:f1:a4:fe:23:7d:9e:4e:70:b7:a0:2e:de:48:e9: 01:f7:03:df:b4:3f:b4:b5:32:15:35:6d:d1:f2:f7: 66:f7:8f:fb:fe:00:14:46:ff:cd:64:13:34:3c:62: 10:56:a3:6d:20:06:2d:5a:ef:5a:3f:2d:af:d8:b5: c1:de:0f:9b:48:e9:d7:07:dd:51:a8:8d:a6:3e:cc: 3b:c2:b1:f6:50:c0:14:ef:e6:e0:8f:e6:fe:86:b9: 7c:fa:40:c3:15:8a:67:dc:e5:17:2a:67:99:e3:0f: be:fc:72:94:b0:61:9b:72:57:8e:4e:54:5e:28:45: c7:24:73:bf:e8:50:b6:52:07:cd:c5:98:11:3f:d8: f4:6f:df:f6:90:21:ac:c6:99:ce:5f:58:a8:f5:30: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6A:CF:5F:79:DE:A9:98:84:F8:07:61:DF:68:5C:A0:C1:55:4A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e417f3fd-8ce3-39b3-8c75-e6ef79cd9522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:87:1e:62:e4:d0:5f:5a:b7:3f:ad:d6:22:fc:94:47:cf:0d: 56:74:5d:f6:7a:f7:c5:fd:f7:16:23:29:a8:d5:76:fb:64:58: f7:bf:30:77:ff:7b:99:df:fc:3c:0b:1a:33:91:1f:17:56:9e: 09:85:46:7d:1e:0d:f8:d1:ca:36:79:ae:0b:de:1c:94:d5:3c: 04:c6:53:79:58:0d:0e:6b:26:ba:01:a5:a3:a7:28:65:09:41: 36:38:69:29:b2:9b:6c:b1:1f:bd:a4:f4:f2:48:f7:49:ac:67: f0:e9:bd:d7:52:2b:b1:c2:d2:df:79:3b:4d:7b:a4:63:c8:73: 01:ec:21:33:1b:f5:76:63:84:08:e4:a0:30:22:df:01:b0:9a: 46:04:83:91:9d:b4:b0:96:f7:61:e1:28:bd:25:d1:d2:10:fa: cf:8a:b8:80:ca:94:4a:20:9f:5f:27:5d:85:2b:1d:9d:b9:d8: 4e:b1:4e:60:a3:82:c6:10:af:f0:b0:56:4f:82:bd:40:da:59: 09:30:c8:dd:a8:99:0d:6f:01:88:2d:87:23:36:41:fe:48:ee: 10:85:c9:ab:e5:49:bf:81:f5:d4:6c:3e:0a:a9:d4:5c:46:8c: be:97:b2:d0:86:da:ef:9f:4e:69:a0:1a:c2:0a:0e:13:16:38: 74:0f:48:d9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJL3Kg6KS+XFr0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OGU2Nzc5MGMtMGNiOC00ZTc0LWFjZTktODA3YWVkZjlmNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBU4Vp9bXHM2of94awgmmr9rBDnMgWeuHmqq i9mzUbXcQIf1uWDmcXMXtO7krdRGAiHnp5vgl9OG135acmjzG5nOy0vER6lj1iZ+ 0IGCzUAPxZ4tlhTUyhwBvKcL/WodSCk/Hq3R3ax18aT+I32eTnC3oC7eSOkB9wPf tD+0tTIVNW3R8vdm94/7/gAURv/NZBM0PGIQVqNtIAYtWu9aPy2v2LXB3g+bSOnX B91RqI2mPsw7wrH2UMAU7+bgj+b+hrl8+kDDFYpn3OUXKmeZ4w++/HKUsGGbcleO TlReKEXHJHO/6FC2UgfNxZgRP9j0b9/2kCGsxpnOX1io9TB9UQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEZqz1953qmYhPgHYd9oXKDBVUpzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTQxN2YzZmQtOGNlMy0z OWIzLThjNzUtZTZlZjc5Y2Q5NTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCIhx5i5NBfWrc/rdYi/JRHzw1WdF32evfF/fcW Iymo1Xb7ZFj3vzB3/3uZ3/w8CxozkR8XVp4JhUZ9Hg340co2ea4L3hyU1TwExlN5 WA0Oaya6AaWjpyhlCUE2OGkpsptssR+9pPTySPdJrGfw6b3XUiuxwtLfeTtNe6Rj yHMB7CEzG/V2Y4QI5KAwIt8BsJpGBIORnbSwlvdh4Si9JdHSEPrPiriAypRKIJ9f J12FKx2dudhOsU5go4LGEK/wsFZPgr1A2lkJMMjdqJkNbwGILYcjNkH+SO4Qhcmr 5Um/gfXUbD4KqdRcRoy+l7LQhtrvn05poBrCCg4TFjh0D0jZ -----END CERTIFICATE-----Generated at Sun Apr 27 16:39:02 2025 by rpki-client