$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed0b60eb-e7e3-33ba-84af-c3b100e93333.roa File: ed0b60eb-e7e3-33ba-84af-c3b100e93333.roa (raw, json) Hash identifier: KvlO54Q+nJF3ktJqkdEdUc6zXi4Jufw0EpZeTQJPEuE= Subject key identifier: 66:54:A0:81:2A:45:E8:AD:F3:D8:F7:81:E3:79:94:FC:27:46:9F:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C388A6FBD496BEE8C450 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed0b60eb-e7e3-33ba-84af-c3b100e93333.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396615 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c3:88:a6:fb:d4:96:be:e8:c4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=2b9200f0-c43a-44c9-9268-ea9bff657301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:0c:5c:d0:0e:30:26:0d:23:5e:10:6e:a3: 30:03:22:94:94:f2:ce:6f:79:16:9f:c5:5d:53:f9: 13:6b:85:82:c2:81:b6:12:00:27:47:53:ba:b6:72: c8:f3:be:2d:88:96:9c:c7:53:26:3a:3d:ca:66:7b: 0c:e4:b1:4f:2a:6d:ed:17:94:7b:5a:59:ab:37:31: 03:a4:46:c0:a7:d5:6b:e2:ea:0c:01:5f:f5:57:4a: 11:cf:5d:92:50:cc:2a:5f:e0:80:44:53:75:c0:86: 09:f7:d5:b3:ac:78:62:fd:da:27:b4:34:8f:a7:e9: 42:40:b4:0b:41:0c:89:37:ff:e1:4c:6f:15:5e:99: 86:64:20:f0:e9:b7:b1:5c:05:c7:a4:b2:d3:32:fc: da:0e:eb:79:b5:60:04:7a:ca:8f:30:d0:1d:08:0a: 32:76:cb:a5:d1:a6:d2:7a:34:10:f1:4d:6f:54:af: db:d0:e1:d2:69:8a:ce:db:29:a1:e4:54:2d:01:3b: 65:a5:a9:38:81:72:5c:bd:9c:62:6f:04:ee:de:fe: ed:82:01:9a:28:a6:15:f1:5a:ce:89:a0:93:b8:d3: 1e:a9:90:b2:c8:4a:b8:f4:ef:ed:a7:7c:45:c7:51: cf:93:bc:09:bf:e4:d5:76:b2:5b:c4:64:7a:84:7a: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:54:A0:81:2A:45:E8:AD:F3:D8:F7:81:E3:79:94:FC:27:46:9F:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed0b60eb-e7e3-33ba-84af-c3b100e93333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:16:02:b2:4d:f0:6a:70:c8:30:83:c0:75:cc:fb:5b:a7:49: 93:6c:d4:02:b1:62:39:63:2e:02:c4:68:24:64:c9:11:91:bf: 72:a0:35:f4:9a:8b:eb:70:43:f3:3d:03:ad:53:f1:04:b1:0d: 71:5d:5d:ac:e6:ac:7a:2f:e5:a0:c2:65:11:71:c6:7b:fb:72: 4c:e5:0a:e6:73:a3:25:e4:da:68:b5:91:06:04:99:89:78:21: 35:27:f3:15:73:61:1d:b6:37:05:3a:40:12:1d:f7:27:16:d3: b9:2a:75:26:37:21:0b:97:b3:82:49:94:96:9f:a3:40:75:8d: 77:bf:0a:a7:6d:34:ea:d5:1a:ad:1f:02:49:93:01:59:e4:01: 9f:78:bc:4b:aa:de:eb:05:5f:99:29:0f:91:cb:a8:51:5e:c9: 73:90:4b:14:72:fb:88:76:b8:83:68:6f:f6:da:b4:d7:b3:73: 97:66:16:57:ae:86:77:59:02:50:e5:37:10:fa:6e:c3:7b:2e: 0d:8e:65:45:bc:8a:60:f3:82:54:74:bc:c7:7e:f4:8a:75:fb: cd:a8:a5:a7:05:72:9e:9e:82:7e:36:49:93:4d:f1:6b:ab:ef: 9f:41:cc:03:fd:40:b7:a2:bd:84:40:a2:a2:1e:cb:e1:f4:fb: 2b:b9:4f:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMOIpvvUlr7oxFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MmI5MjAwZjAtYzQzYS00NGM5LTkyNjgtZWE5YmZmNjU3MzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XsMXNAOMCYNI14QbqMwAyKUlPLOb3kWn8Vd U/kTa4WCwoG2EgAnR1O6tnLI874tiJacx1MmOj3KZnsM5LFPKm3tF5R7WlmrNzED pEbAp9Vr4uoMAV/1V0oRz12SUMwqX+CARFN1wIYJ99WzrHhi/dontDSPp+lCQLQL QQyJN//hTG8VXpmGZCDw6bexXAXHpLLTMvzaDut5tWAEesqPMNAdCAoydsul0abS ejQQ8U1vVK/b0OHSaYrO2ymh5FQtATtlpak4gXJcvZxibwTu3v7tggGaKKYV8VrO iaCTuNMeqZCyyEq49O/tp3xFx1HPk7wJv+TVdrJbxGR6hHpJnQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGZUoIEqReit89j3geN5lPwnRp9wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWQwYjYwZWItZTdlMy0z M2JhLTg0YWYtYzNiMTAwZTkzMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLFgKyTfBqcMgwg8B1zPtbp0mTbNQCsWI5Yy4C xGgkZMkRkb9yoDX0movrcEPzPQOtU/EEsQ1xXV2s5qx6L+WgwmURccZ7+3JM5Qrm c6Ml5NpotZEGBJmJeCE1J/MVc2EdtjcFOkASHfcnFtO5KnUmNyELl7OCSZSWn6NA dY13vwqnbTTq1RqtHwJJkwFZ5AGfeLxLqt7rBV+ZKQ+Ry6hRXslzkEsUcvuIdriD aG/22rTXs3OXZhZXroZ3WQJQ5TcQ+m7Dey4NjmVFvIpg84JUdLzHfvSKdfvNqKWn BXKenoJ+NkmTTfFrq++fQcwD/UC3or2EQKKiHsvh9PsruU+H -----END CERTIFICATE-----Generated at Sun Apr 27 00:15:30 2025 by rpki-client