$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa File: eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa (raw, json) Hash identifier: BbNLkzOWYw8VSbNbzG5CLZOlb57kBEXERt4mEihxtMI= Subject key identifier: 68:8B:41:A3:6E:83:03:8B:EB:80:BD:40:BF:16:99:D4:61:E2:F9:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DB2B5DE33D051FDA1980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396589 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:db:2b:5d:e3:3d:05:1f:da:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=05bfa206-a5c4-4e05-bc3f-6ac4f5bf7065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:fb:e3:3a:69:37:b9:63:94:50:7d:57:ac: d1:20:62:e7:01:ba:1d:14:33:bb:9e:50:3a:52:c5: b4:72:e8:ed:e2:35:e2:f7:0a:f2:dc:30:43:ed:26: cb:aa:2f:0d:cb:7f:96:e7:00:29:62:fb:e7:82:ba: 10:9f:2b:24:ff:9b:37:1f:38:92:6d:73:e5:b1:0e: 59:cf:93:dd:82:ac:62:ae:f9:25:4a:e4:52:ba:53: fb:52:12:c5:c4:63:19:e1:25:9a:77:ec:90:52:13: 4e:53:06:03:21:34:9a:2b:d0:1c:ed:09:2f:9e:dc: ec:a8:93:2f:6a:b8:ee:90:00:51:a4:7b:84:36:d3: eb:2c:a1:bb:d2:8a:29:96:40:23:96:92:eb:a0:5e: b7:65:6d:7c:e6:a3:77:87:b0:d7:fd:e4:9f:1f:71: 98:5e:74:dd:25:94:e5:25:04:51:6a:77:52:50:a0: 40:6b:d3:cc:7b:20:19:39:3c:b1:f8:d2:e3:a3:4b: 31:f4:b4:8c:7f:2a:62:f7:35:28:2f:27:3a:b6:12: e9:dd:e6:1d:43:38:8c:96:d0:66:04:e0:6f:7d:84: e9:45:31:26:59:f6:d9:04:7a:fa:f6:e8:30:7e:ec: 67:ec:08:b4:5b:b7:0c:5f:1d:bc:59:b5:24:65:86: c2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8B:41:A3:6E:83:03:8B:EB:80:BD:40:BF:16:99:D4:61:E2:F9:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:82:ac:66:fe:08:6a:ff:cb:a7:b0:ee:f3:9d:94:38:d1:c8: 2e:41:68:93:ed:e5:c2:8b:72:23:58:ac:06:95:85:0d:0c:61: b6:4e:37:90:f2:63:c6:90:de:6d:44:f5:9e:49:5b:14:49:cd: 17:17:61:dc:81:3c:97:0c:f7:d1:ed:f0:ad:b6:57:a0:b1:a0: f5:1d:9b:f6:6c:b9:97:90:76:e8:f3:99:ec:49:60:5b:02:2e: 6a:41:dc:e2:e3:ea:0c:2e:2f:fc:dd:45:c7:23:71:cf:b5:1e: dd:e0:76:f9:3f:7b:3a:60:42:dd:66:05:6a:5a:e0:10:55:03: 07:5c:16:85:a0:d8:23:5e:49:a7:13:99:8e:65:12:ad:01:d4: b3:40:67:3b:8d:6b:67:84:7c:f9:5e:b1:9b:c2:10:69:46:ad: 10:28:cb:55:ac:8c:32:2d:a4:6f:fa:d4:c0:27:3c:a9:b7:8d: 7c:a7:eb:cd:0d:6b:af:35:ad:84:56:8e:cd:c2:62:30:d7:76: 0f:cd:68:a0:e7:80:53:ee:76:17:71:f6:de:bc:ad:29:83:4f: 34:9e:8d:6c:5c:f6:7a:ab:e4:2d:8f:db:2a:6c:a9:7a:98:be: 6e:b1:2f:30:14:18:d9:51:f1:05:d7:07:7c:08:39:44:af:de: fa:2a:c9:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmdsrXeM9BR/aGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk MDViZmEyMDYtYTVjNC00ZTA1LWJjM2YtNmFjNGY1YmY3MDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHj74zppN7ljlFB9V6zRIGLnAbodFDO7nlA6 UsW0cujt4jXi9wry3DBD7SbLqi8Ny3+W5wApYvvngroQnysk/5s3HziSbXPlsQ5Z z5PdgqxirvklSuRSulP7UhLFxGMZ4SWad+yQUhNOUwYDITSaK9Ac7QkvntzsqJMv arjukABRpHuENtPrLKG70ooplkAjlpLroF63ZW185qN3h7DX/eSfH3GYXnTdJZTl JQRRandSUKBAa9PMeyAZOTyx+NLjo0sx9LSMfypi9zUoLyc6thLp3eYdQziMltBm BOBvfYTpRTEmWfbZBHr69ugwfuxn7Ai0W7cMXx28WbUkZYbCWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGiLQaNugwOL64C9QL8WmdRh4vn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWJhNWNhMGItZjBkNC0z ZDhiLTgwOGUtMWYyMzE0YTQ5ZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCIgqxm/ghq/8unsO7znZQ40cguQWiT7eXCi3Ij WKwGlYUNDGG2TjeQ8mPGkN5tRPWeSVsUSc0XF2HcgTyXDPfR7fCttlegsaD1HZv2 bLmXkHbo85nsSWBbAi5qQdzi4+oMLi/83UXHI3HPtR7d4Hb5P3s6YELdZgVqWuAQ VQMHXBaFoNgjXkmnE5mOZRKtAdSzQGc7jWtnhHz5XrGbwhBpRq0QKMtVrIwyLaRv +tTAJzypt418p+vNDWuvNa2EVo7NwmIw13YPzWig54BT7nYXcfbevK0pg080no1s XPZ6q+Qtj9sqbKl6mL5usS8wFBjZUfEF1wd8CDlEr976KslU -----END CERTIFICATE-----Generated at Tue Apr 29 09:24:38 2025 by rpki-client