$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87686f0a-6baf-3ae8-9bd5-acdfc4b91c13.roa File: 87686f0a-6baf-3ae8-9bd5-acdfc4b91c13.roa (raw, json) Hash identifier: 4NsNx8Wx3ixi2WpV/nRc7kwnZnrJdui8/pBShpK5gQ8= Subject key identifier: 31:C1:D9:40:41:BA:26:A5:8B:E0:23:97:26:3F:EA:8C:ED:FA:81:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849998F4CCE782DFD45505880F0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87686f0a-6baf-3ae8-9bd5-acdfc4b91c13.roa Signing time: Mon 21 Apr 2025 13:00:59 +0000 ROA not before: Mon 21 Apr 2025 13:00:59 +0000 ROA not after: Sun 20 Jul 2025 13:00:59 +0000 asID: 397202 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:8f:4c:ce:78:2d:fd:45:50:58:80:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 21 13:00:59 2025 GMT Not After : Jul 20 13:00:59 2025 GMT Subject: CN=eb6809d2-57a6-42f3-a8e0-16d1c0dd4e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:71:7c:9a:e6:19:a8:31:21:3a:3a:3a:5a: 9b:ba:87:05:94:f3:a6:eb:dd:fd:ff:9a:2d:02:3a: 7e:d7:d4:b2:e6:d6:f7:70:3d:6e:08:35:39:52:5e: 85:a1:82:c7:b8:48:2f:a7:67:d8:76:b5:65:6c:ad: fd:5e:1b:0f:4b:7e:76:66:e3:e8:0d:c8:64:35:a1: e0:67:0f:07:c8:3d:6f:51:2f:ae:88:98:32:39:53: be:36:1b:12:a4:7f:ee:d5:ae:90:0f:ae:05:c4:83: 55:29:84:2f:36:8d:f1:6f:48:f1:ed:ee:61:79:68: 3c:4a:7a:c5:89:9a:f3:e4:68:6c:b0:21:21:8a:1f: 4d:75:55:e5:29:47:dc:4e:77:33:81:24:e8:2f:54: a0:f8:bf:8d:d6:3a:81:a5:72:0c:cc:52:f5:9f:27: fd:03:af:e4:0b:f7:20:8f:39:4d:c7:cb:ef:9e:1a: 75:83:17:8d:69:f6:3b:66:f1:4b:0c:14:92:c1:76: 96:0e:22:ce:6e:35:f9:1c:5c:d1:5c:0c:4c:97:56: 74:06:83:6b:7b:4d:b9:2e:c2:f9:79:77:5a:cf:e9: 60:a5:2d:0a:19:e6:16:d8:84:c0:ed:1f:be:e9:a4: d8:d2:58:8c:f9:3d:6d:de:43:98:6d:de:b6:7e:f8: ef:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C1:D9:40:41:BA:26:A5:8B:E0:23:97:26:3F:EA:8C:ED:FA:81:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87686f0a-6baf-3ae8-9bd5-acdfc4b91c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:95:0c:24:07:74:f2:07:bb:29:14:13:29:3b:a6:b7:b4:bc: 16:db:79:41:1c:a1:5d:2d:0f:4f:6b:57:1c:bc:42:dd:cd:78: 3b:1f:3a:35:35:29:b8:13:f0:03:db:3c:ee:a1:54:b2:69:b9: 58:a0:e7:14:a3:56:ef:bb:36:c3:27:b8:8f:66:5a:25:17:5b: a3:53:34:3c:18:1e:a2:c6:a1:67:ec:f5:05:ae:b6:47:22:28: 1f:36:cc:89:a1:ac:d3:7e:20:fc:4d:67:80:92:38:aa:5d:6e: 1c:66:1e:09:20:56:56:0c:46:60:8f:5a:83:65:dd:e5:ff:cd: fc:d3:21:dc:4b:09:53:ce:47:0d:67:eb:a7:0e:15:a8:ad:03: 9f:e7:ca:91:c9:70:15:aa:6f:bb:27:67:02:16:78:e0:dd:6f: cc:b6:92:03:05:d9:bb:04:1f:53:10:62:43:6a:b6:79:1f:95: 55:22:3a:32:1c:00:00:50:8c:ff:23:94:ce:48:f6:27:63:e4: 4d:0d:4c:98:69:d8:14:5d:60:40:01:b9:79:72:2f:51:40:9c: 0e:e0:bc:5d:fd:41:f0:34:82:a3:6d:bc:cf:f9:18:58:f2:73: b5:68:91:73:9f:11:20:1b:a7:ec:6b:fe:73:24:56:24:3a:0d: 1d:5c:4f:f4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0zOeC39RVBYgPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk ZWI2ODA5ZDItNTdhNi00MmYzLWE4ZTAtMTZkMWMwZGQ0ZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmehxfJrmGagxITo6OlqbuocFlPOm6939/5ot Ajp+19Sy5tb3cD1uCDU5Ul6FoYLHuEgvp2fYdrVlbK39XhsPS352ZuPoDchkNaHg Zw8HyD1vUS+uiJgyOVO+NhsSpH/u1a6QD64FxINVKYQvNo3xb0jx7e5heWg8SnrF iZrz5GhssCEhih9NdVXlKUfcTnczgSToL1Sg+L+N1jqBpXIMzFL1nyf9A6/kC/cg jzlNx8vvnhp1gxeNafY7ZvFLDBSSwXaWDiLObjX5HFzRXAxMl1Z0BoNre025LsL5 eXdaz+lgpS0KGeYW2ITA7R++6aTY0liM+T1t3kOYbd62fvjvlwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDHB2UBBuiali+AjlyY/6ozt+oFEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODc2ODZmMGEtNmJhZi0z YWU4LTliZDUtYWNkZmM0YjkxYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBklQwkB3TyB7spFBMpO6a3tLwW23lBHKFdLQ9P a1ccvELdzXg7Hzo1NSm4E/AD2zzuoVSyablYoOcUo1bvuzbDJ7iPZlolF1ujUzQ8 GB6ixqFn7PUFrrZHIigfNsyJoazTfiD8TWeAkjiqXW4cZh4JIFZWDEZgj1qDZd3l /8380yHcSwlTzkcNZ+unDhWorQOf58qRyXAVqm+7J2cCFnjg3W/MtpIDBdm7BB9T EGJDarZ5H5VVIjoyHAAAUIz/I5TOSPYnY+RNDUyYadgUXWBAAbl5ci9RQJwO4Lxd /UHwNIKjbbzP+RhY8nO1aJFznxEgG6fsa/5zJFYkOg0dXE/0 -----END CERTIFICATE-----Generated at Sun May 11 02:41:35 2025 by rpki-client