$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04207e70-7029-33a6-b51c-99ddc76a4b81.roa File: 04207e70-7029-33a6-b51c-99ddc76a4b81.roa (raw, json) Hash identifier: TwYSd4ofq8BUsq+4zPpj/nHKWpauuoDCNzYtSdgbPI4= Subject key identifier: 2A:3C:AA:26:37:B2:06:C1:F6:61:E5:BB:0D:85:CE:45:DC:9F:6C:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849998F4A402700DDD02B3FC6C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04207e70-7029-33a6-b51c-99ddc76a4b81.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 396557 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:4a:40:27:00:dd:d0:2b:3f:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=2fae913e-0fb7-4ec3-bff9-90ccee1e31e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:ae:33:39:4f:f2:8a:7a:68:38:e4:73:1b: 3c:a6:4e:9c:3a:7e:b9:f1:a6:db:65:0f:71:d4:74: 2f:1f:cf:02:e6:b9:6b:46:b1:8b:c6:e7:d9:4e:b1: 27:a3:06:b0:e6:a8:8f:32:1f:ce:14:72:62:09:d1: c8:df:df:2a:87:16:2b:b2:ae:f6:93:2e:43:94:ee: 8a:22:12:1e:31:5f:7c:c4:cc:4f:0c:34:96:90:2f: 7a:46:29:7e:c0:32:d0:ef:b5:b1:d4:df:4f:08:9b: bc:20:f7:b4:2f:86:95:b8:67:db:38:c9:75:a8:00: f7:9a:9f:97:68:29:2a:cd:7e:5d:1a:58:cb:15:45: 18:df:53:43:4e:7b:3b:b1:9b:c3:f3:93:d4:fc:ad: 74:b6:63:e9:3a:61:bc:af:df:25:ae:4b:f9:10:51: 39:42:0f:dc:6d:2a:f1:a9:d3:32:28:7d:d2:40:8d: 3b:42:05:89:35:61:e4:47:06:3e:18:c2:d0:b1:bc: 51:c1:13:02:70:24:77:3e:30:7d:4c:30:b8:1b:5e: 1f:cf:ee:ea:35:a2:cb:07:02:d8:b7:ba:3b:19:7d: e7:56:59:fb:84:22:01:48:d8:84:13:63:6c:44:8f: 08:54:e8:53:e3:3b:f4:6f:26:e9:dd:ea:dd:99:55: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:AA:26:37:B2:06:C1:F6:61:E5:BB:0D:85:CE:45:DC:9F:6C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04207e70-7029-33a6-b51c-99ddc76a4b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:22:41:8b:c6:49:6c:09:1e:0a:a7:e4:db:8a:e5:8b:a3:20: da:36:4f:36:b4:47:4a:75:f6:08:aa:3e:2a:0e:4b:60:a6:9b: 77:8c:a4:c1:50:8c:15:90:54:3e:c7:81:91:83:33:0e:92:ea: db:35:aa:20:3b:e0:af:4d:1d:33:b1:86:05:45:5d:2d:da:85: 01:95:e2:1b:3e:8d:ef:be:dd:df:74:ce:db:85:3c:97:cd:48: cf:95:4f:0d:13:0d:9e:0d:88:98:de:38:a7:e2:aa:c5:18:87: 94:c6:0b:e3:87:6c:72:b7:9a:2e:33:63:d4:bd:ae:b2:d3:44: 21:44:23:4c:5b:e1:5b:03:b4:af:84:a6:6e:c9:98:1f:75:28: b6:51:2d:ec:40:f4:30:e8:4d:b2:6d:d8:e6:79:43:10:57:05: 78:0d:9f:c9:ba:b4:c2:5b:07:c3:66:74:31:3b:51:bf:19:c9: 94:75:a3:c0:bc:13:8e:ab:ea:e3:03:81:ee:05:be:e2:9b:18: 88:cd:26:2c:90:f7:9c:80:69:19:15:8d:7f:5a:a3:08:3c:1a: a1:e4:53:c8:f2:3b:e1:6c:b4:97:ad:23:82:4a:a7:af:3c:6e: 7e:81:c6:5f:ad:4d:37:58:28:cd:da:dc:58:43:64:f5:7c:84: 5f:68:49:45 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0pAJwDd0Cs/xsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk MmZhZTkxM2UtMGZiNy00ZWMzLWJmZjktOTBjY2VlMWUzMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9GuMzlP8op6aDjkcxs8pk6cOn658abbZQ9x 1HQvH88C5rlrRrGLxufZTrEnowaw5qiPMh/OFHJiCdHI398qhxYrsq72ky5DlO6K IhIeMV98xMxPDDSWkC96Ril+wDLQ77Wx1N9PCJu8IPe0L4aVuGfbOMl1qAD3mp+X aCkqzX5dGljLFUUY31NDTns7sZvD85PU/K10tmPpOmG8r98lrkv5EFE5Qg/cbSrx qdMyKH3SQI07QgWJNWHkRwY+GMLQsbxRwRMCcCR3PjB9TDC4G14fz+7qNaLLBwLY t7o7GX3nVln7hCIBSNiEE2NsRI8IVOhT4zv0bybp3erdmVWGUQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCo8qiY3sgbB9mHluw2FzkXcn2xrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDQyMDdlNzAtNzAyOS0z M2E2LWI1MWMtOTlkZGM3NmE0YjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCzIkGLxklsCR4Kp+TbiuWLoyDaNk82tEdKdfYI qj4qDktgppt3jKTBUIwVkFQ+x4GRgzMOkurbNaogO+CvTR0zsYYFRV0t2oUBleIb Po3vvt3fdM7bhTyXzUjPlU8NEw2eDYiY3jin4qrFGIeUxgvjh2xyt5ouM2PUva6y 00QhRCNMW+FbA7SvhKZuyZgfdSi2US3sQPQw6E2ybdjmeUMQVwV4DZ/JurTCWwfD ZnQxO1G/GcmUdaPAvBOOq+rjA4HuBb7imxiIzSYskPecgGkZFY1/WqMIPBqh5FPI 8jvhbLSXrSOCSqevPG5+gcZfrU03WCjN2txYQ2T1fIRfaElF -----END CERTIFICATE-----Generated at Sun May 11 02:21:03 2025 by rpki-client