$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa File: 0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa (raw, json) Hash identifier: YFvzKPjCsE/3ooJvBoFwc3OI+gqPOH4nqRYOA7tdHLY= Subject key identifier: 32:7F:65:5E:58:D9:50:14:C9:23:C8:7B:4D:FD:F3:1E:52:C2:AF:B6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24BE9BC2A72A95EC36DC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396572 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:be:9b:c2:a7:2a:95:ec:36:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=983bfcaa-80a2-47d6-8a4c-85e3539c78d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:0f:96:6d:c9:5b:db:f2:b3:00:b9:08:1c: 0f:d5:dd:66:4e:9f:c9:dc:23:03:7c:f6:7f:f2:1e: 2d:38:cb:1c:2c:a8:2d:10:1c:39:10:b3:60:41:16: ea:e0:af:3f:d0:1d:48:94:db:5a:4c:72:e9:44:0e: 9e:f2:fc:98:c6:75:12:5f:ef:30:f2:44:ca:f9:c8: 29:5c:17:fe:5b:f8:06:4c:eb:13:8f:a8:19:20:a5: f4:92:d9:77:b7:c9:b2:a1:08:cc:a5:ed:3e:fc:5f: 64:1f:44:8f:a0:a8:1c:a1:1d:04:d6:45:2f:90:49: 2e:d4:a2:ae:23:11:7a:6d:50:a0:c6:24:ae:2f:6f: 11:c1:de:0d:97:0e:65:64:38:a5:18:13:7f:d0:4f: ca:03:ac:81:7d:84:1e:92:8d:bc:4d:a1:bb:be:62: 56:0c:08:bf:35:80:32:b0:50:b6:b3:53:bd:5e:4d: 01:06:d7:6f:ee:77:f0:de:43:b2:d5:ed:4f:81:3f: 38:4a:8a:e1:a6:76:b7:23:ed:20:a3:2a:aa:91:6e: 4f:ac:2f:39:e9:c6:55:e4:be:60:22:96:2a:e5:22: 16:9e:b6:5c:0e:5c:70:b6:17:96:5b:4a:bf:2c:f7: 93:a1:45:5a:49:82:ba:31:51:ad:01:8d:ce:4f:25: 3e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7F:65:5E:58:D9:50:14:C9:23:C8:7B:4D:FD:F3:1E:52:C2:AF:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:1e:b1:0c:92:1e:d1:ad:79:a0:0d:ea:b6:e8:e7:d1:43:f1: 37:85:87:f7:55:dd:20:b1:b8:79:15:cc:1d:8d:ae:09:66:3c: a9:9d:ca:4a:58:db:e4:00:ee:ae:b7:1b:f5:fa:ef:99:c1:e9: 95:12:46:7f:ec:8d:61:4c:3b:56:8b:c0:5a:a5:e9:a0:18:4f: 23:fb:e5:38:58:56:c9:95:0f:52:7f:0a:db:0d:a0:3d:b1:3d: ac:b0:ff:c7:f9:41:be:b8:2b:4e:ca:1f:19:00:12:ac:87:24: d9:0a:d6:69:6f:fc:1a:df:f5:a8:fd:fd:d9:3a:e8:c8:c4:f5: c3:04:58:82:89:ab:4f:80:f5:96:d7:53:fe:0c:10:55:b6:bd: 91:d1:66:6e:5f:4f:6b:f6:96:7d:b1:71:97:28:4e:be:1b:cf: 22:af:28:d0:f4:e8:c0:9b:80:33:b1:93:ee:86:b4:cc:7b:9d: e9:22:1c:79:2d:72:26:c3:75:ac:6a:97:73:14:d7:57:ec:f5: 77:b9:7f:26:6e:32:00:3b:a0:65:a8:b2:b4:c9:b4:7b:0e:5c: 15:48:46:c6:4e:a5:c8:25:00:29:09:c4:ee:67:cf:0a:16:25: fe:9b:93:c0:d5:90:b5:20:52:27:43:8c:5d:e8:cf:c9:b7:85: e5:2e:e2:ba -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJL6bwqcqlew23AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OTgzYmZjYWEtODBhMi00N2Q2LThhNGMtODVlMzUzOWM3OGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZwPlm3JW9vyswC5CBwP1d1mTp/J3CMDfPZ/ 8h4tOMscLKgtEBw5ELNgQRbq4K8/0B1IlNtaTHLpRA6e8vyYxnUSX+8w8kTK+cgp XBf+W/gGTOsTj6gZIKX0ktl3t8myoQjMpe0+/F9kH0SPoKgcoR0E1kUvkEku1KKu IxF6bVCgxiSuL28Rwd4Nlw5lZDilGBN/0E/KA6yBfYQeko28TaG7vmJWDAi/NYAy sFC2s1O9Xk0BBtdv7nfw3kOy1e1PgT84Sorhpna3I+0goyqqkW5PrC856cZV5L5g IpYq5SIWnrZcDlxwtheWW0q/LPeToUVaSYK6MVGtAY3OTyU+EwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDJ/ZV5Y2VAUySPIe0398x5Swq+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI5ZjlkOWMtNWMyNy0z ZjBkLTg0ZjUtZWE5NjlhMzc5N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC7HrEMkh7RrXmgDeq26OfRQ/E3hYf3Vd0gsbh5 Fcwdja4JZjypncpKWNvkAO6utxv1+u+ZwemVEkZ/7I1hTDtWi8BapemgGE8j++U4 WFbJlQ9SfwrbDaA9sT2ssP/H+UG+uCtOyh8ZABKshyTZCtZpb/wa3/Wo/f3ZOujI xPXDBFiCiatPgPWW11P+DBBVtr2R0WZuX09r9pZ9sXGXKE6+G88iryjQ9OjAm4Az sZPuhrTMe53pIhx5LXImw3WsapdzFNdX7PV3uX8mbjIAO6BlqLK0ybR7DlwVSEbG TqXIJQApCcTuZ88KFiX+m5PA1ZC1IFInQ4xd6M/Jt4XlLuK6 -----END CERTIFICATE-----Generated at Sat May 10 23:19:46 2025 by rpki-client