$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f250f3d3-486a-3a18-81d5-8fc45054fa2b.roa File: f250f3d3-486a-3a18-81d5-8fc45054fa2b.roa (raw, json) Hash identifier: Hr5I+huLiInIpXF+JljmY44WMF5vHeI0fGDgjq+c6Ls= Subject key identifier: 44:CD:57:69:1D:54:18:E1:DA:11:17:73:96:D7:61:E0:DA:CE:F3:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DB8D7EAB401FEF606780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f250f3d3-486a-3a18-81d5-8fc45054fa2b.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396615 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:db:8d:7e:ab:40:1f:ef:60:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=c39fd585-b32c-4c8a-8780-b3a477e7b1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b0:6a:2b:83:8d:37:99:7a:3b:5a:df:eb:78: b1:ac:43:5f:10:85:29:f2:5c:77:b3:91:db:82:ec: 14:fb:11:7f:a0:4e:6b:99:17:b4:4c:5e:73:7c:c9: 77:20:b6:3e:d2:8d:d0:7f:f5:ee:99:d8:f9:b2:e6: 6c:ba:ef:53:15:ba:bc:80:bb:e8:9d:a1:2f:93:8f: d0:29:84:e5:20:0b:18:72:72:bf:36:92:9d:0e:6d: 43:82:33:ec:2c:d9:af:63:9c:f4:3c:f5:e0:87:d3: 8f:92:7f:94:45:98:be:56:e6:12:c1:25:0a:0e:22: 83:db:fe:d0:da:87:be:f2:a8:1a:d7:75:7c:3c:1d: c7:7b:9f:08:54:04:db:da:0f:92:0e:25:c7:4d:eb: 89:33:b4:49:1e:a4:f5:50:71:49:bf:cb:3f:bc:41: 95:3b:c2:90:8b:40:18:ca:00:e4:60:1d:cd:d0:6f: 1d:d7:89:3e:e2:3a:61:c5:79:8c:17:8d:91:20:8b: 02:fc:dc:9f:6c:d3:92:c2:c2:a9:06:22:35:a5:8d: 21:57:82:44:d5:e1:33:25:fe:06:19:bc:49:a2:1b: 7f:d5:a3:e9:d1:82:76:1d:6a:db:0d:38:8d:c2:dc: a0:ef:4c:16:05:66:67:b5:3b:93:28:16:ac:8f:8b: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CD:57:69:1D:54:18:E1:DA:11:17:73:96:D7:61:E0:DA:CE:F3:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f250f3d3-486a-3a18-81d5-8fc45054fa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:00:18:aa:8e:10:2d:cf:8c:c3:d1:bd:ed:ac:e7:d1:ef:4d: 0a:93:1e:3a:ad:4d:b4:c6:ea:29:9a:48:bd:8f:d5:29:7e:25: 27:c2:77:f5:b4:59:0e:96:2c:cc:9b:39:be:77:c4:25:49:85: 51:65:98:93:d3:d7:5e:32:32:c8:d0:2e:82:c6:40:22:9f:19: 16:ef:f2:74:c3:14:92:a7:f8:13:12:58:0f:19:9d:93:23:52: 8c:5d:fd:db:74:b7:45:48:64:3c:5d:f2:e7:3e:d4:a0:0b:4e: 2a:9d:4a:60:72:66:6f:40:ee:83:56:b2:c0:d8:21:a5:48:d6: 1e:9a:92:b5:0b:da:42:b2:22:a0:69:86:77:0f:ea:40:97:20: 01:b6:24:96:3a:de:5b:f5:ee:fa:28:48:16:28:fb:2f:77:89: 59:8e:e7:49:35:74:88:4b:1c:f9:9e:c6:92:2c:b0:30:62:0f: 57:a5:4c:d3:f5:0f:19:99:c5:af:f9:bf:e5:72:04:35:85:b2: 64:b3:76:ea:30:39:41:00:6f:b1:c5:fa:f8:99:35:b3:08:8b: e1:93:f9:0a:9e:ed:c9:34:fa:f3:f6:10:53:c0:f8:07:b2:2c: 3a:58:0c:66:2a:84:01:bf:b6:60:e6:84:a4:8e:44:ee:99:36: 58:96:eb:5b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmduNfqtAH+9gZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk YzM5ZmQ1ODUtYjMyYy00YzhhLTg3ODAtYjNhNDc3ZTdiMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07BqK4ONN5l6O1rf63ixrENfEIUp8lx3s5Hb guwU+xF/oE5rmRe0TF5zfMl3ILY+0o3Qf/Xumdj5suZsuu9TFbq8gLvonaEvk4/Q KYTlIAsYcnK/NpKdDm1DgjPsLNmvY5z0PPXgh9OPkn+URZi+VuYSwSUKDiKD2/7Q 2oe+8qga13V8PB3He58IVATb2g+SDiXHTeuJM7RJHqT1UHFJv8s/vEGVO8KQi0AY ygDkYB3N0G8d14k+4jphxXmMF42RIIsC/NyfbNOSwsKpBiI1pY0hV4JE1eEzJf4G GbxJoht/1aPp0YJ2HWrbDTiNwtyg70wWBWZntTuTKBasj4vqOQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFETNV2kdVBjh2hEXc5bXYeDazvPUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjI1MGYzZDMtNDg2YS0z YTE4LTgxZDUtOGZjNDUwNTRmYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBVABiqjhAtz4zD0b3trOfR700Kkx46rU20xuop mki9j9UpfiUnwnf1tFkOlizMmzm+d8QlSYVRZZiT09deMjLI0C6CxkAinxkW7/J0 wxSSp/gTElgPGZ2TI1KMXf3bdLdFSGQ8XfLnPtSgC04qnUpgcmZvQO6DVrLA2CGl SNYempK1C9pCsiKgaYZ3D+pAlyABtiSWOt5b9e76KEgWKPsvd4lZjudJNXSISxz5 nsaSLLAwYg9XpUzT9Q8ZmcWv+b/lcgQ1hbJks3bqMDlBAG+xxfr4mTWzCIvhk/kK nu3JNPrz9hBTwPgHsiw6WAxmKoQBv7Zg5oSkjkTumTZYlutb -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:10 2025 by rpki-client