$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a58b6b5-73ca-3972-9a14-f111e29e11f8.roa File: 8a58b6b5-73ca-3972-9a14-f111e29e11f8.roa (raw, json) Hash identifier: g+adN58O48LydGWh35mVwqq25pmDg25o3O7K9voqbDs= Subject key identifier: 9F:4B:0D:BD:D6:5B:9E:3B:90:7E:9A:1E:1C:58:0A:AF:81:E5:34:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DFC2158BDDA719BA1000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a58b6b5-73ca-3972-9a14-f111e29e11f8.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396595 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:df:c2:15:8b:dd:a7:19:ba:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=2f8e42ec-615c-4024-baa3-4990995f07d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1d:10:30:bd:a9:ae:24:3c:4e:ce:57:b0:29: e5:4d:df:a5:28:81:ce:d2:24:10:2c:27:0a:43:c4: 61:92:eb:bd:8e:bd:33:fe:4e:a3:3a:42:0b:75:3a: 3b:e1:2b:b9:fe:a7:5e:7d:ed:72:4f:3e:8a:28:94: 9d:34:43:11:c6:c0:aa:df:e1:f0:01:9c:ed:27:70: 8c:94:fb:ef:ad:1c:ce:67:77:26:c1:cd:c3:de:f0: a4:11:68:e3:02:62:fd:39:75:bb:cf:01:0a:8f:f1: 75:4a:d3:cc:3a:f8:38:78:cf:6c:c2:8d:68:d2:ba: 54:54:d6:3d:99:9d:c3:df:38:7b:52:b4:af:09:e8: 6e:9f:ac:78:f5:7e:47:d2:53:86:03:24:41:1e:22: 3d:57:5f:3d:aa:35:87:a1:10:77:f4:c4:88:60:19: b8:78:9f:d1:b6:47:3d:eb:eb:49:bd:f2:d0:7c:7f: da:16:21:91:3e:f9:45:88:e8:db:99:6c:04:11:37: 9f:45:af:84:df:6d:73:e1:85:92:83:44:23:52:c7: 1e:ec:34:d3:45:2c:25:5a:d2:95:d6:2f:83:79:ef: 4b:34:a3:f5:d4:58:b5:82:1f:81:85:84:ad:b8:50: 4e:26:23:4f:6d:99:b7:cb:7e:6c:e2:a4:23:03:aa: c5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4B:0D:BD:D6:5B:9E:3B:90:7E:9A:1E:1C:58:0A:AF:81:E5:34:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a58b6b5-73ca-3972-9a14-f111e29e11f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:9a:c4:47:18:b5:53:6b:cb:be:68:21:3d:d7:3d:80:4b:a7: 08:bf:b3:a4:f0:f8:39:4b:60:0e:26:e3:be:07:ac:18:c3:7e: b2:9e:3d:e4:1d:8f:b9:7e:eb:ed:99:74:74:e2:fe:ee:b7:95: 91:a5:5e:19:4b:4f:1b:69:3a:96:04:bb:01:61:a1:a6:9d:d6: 87:c5:23:a1:dd:6d:09:1c:58:eb:39:df:12:8a:17:c0:df:67: ef:6a:ad:ae:ec:ae:61:28:29:93:75:2e:0a:0a:48:68:79:a9: 68:07:04:11:5a:09:4c:09:fa:e8:c8:f8:68:14:f4:b1:96:0c: 39:7e:4b:49:85:8a:7b:b7:6a:9f:f6:8b:66:24:7e:90:4f:81: f4:d0:cd:76:14:ce:8d:4a:71:a0:8c:a1:35:4e:f7:05:5f:f3: 9b:24:c3:f1:50:cb:02:be:98:1a:97:4f:ff:bd:84:26:81:c4: 56:71:28:fb:45:77:7d:15:5b:01:ec:ee:b3:73:0b:d7:e4:67: a5:2e:ed:77:e4:47:b0:fe:19:f0:d8:53:c3:69:34:47:77:5c: ba:ec:2e:24:25:9d:c8:8c:9d:f4:3f:9b:d4:a1:b0:e5:80:50: 34:51:77:38:00:e7:1a:24:d5:e1:2c:92:65:a2:93:3c:18:e1: 6d:f2:40:d9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmd/CFYvdpxm6EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk MmY4ZTQyZWMtNjE1Yy00MDI0LWJhYTMtNDk5MDk5NWYwN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh0QML2priQ8Ts5XsCnlTd+lKIHO0iQQLCcK Q8Rhkuu9jr0z/k6jOkILdTo74Su5/qdefe1yTz6KKJSdNEMRxsCq3+HwAZztJ3CM lPvvrRzOZ3cmwc3D3vCkEWjjAmL9OXW7zwEKj/F1StPMOvg4eM9swo1o0rpUVNY9 mZ3D3zh7UrSvCehun6x49X5H0lOGAyRBHiI9V189qjWHoRB39MSIYBm4eJ/Rtkc9 6+tJvfLQfH/aFiGRPvlFiOjbmWwEETefRa+E321z4YWSg0QjUsce7DTTRSwlWtKV 1i+Dee9LNKP11Fi1gh+BhYStuFBOJiNPbZm3y35s4qQjA6rFiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ9LDb3WW547kH6aHhxYCq+B5TSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGE1OGI2YjUtNzNjYS0z OTcyLTlhMTQtZjExMWUyOWUxMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCdmsRHGLVTa8u+aCE91z2AS6cIv7Ok8Pg5S2AO JuO+B6wYw36ynj3kHY+5fuvtmXR04v7ut5WRpV4ZS08baTqWBLsBYaGmndaHxSOh 3W0JHFjrOd8SihfA32fvaq2u7K5hKCmTdS4KCkhoealoBwQRWglMCfroyPhoFPSx lgw5fktJhYp7t2qf9otmJH6QT4H00M12FM6NSnGgjKE1TvcFX/ObJMPxUMsCvpga l0//vYQmgcRWcSj7RXd9FVsB7O6zcwvX5GelLu135Eew/hnw2FPDaTRHd1y67C4k JZ3IjJ30P5vUobDlgFA0UXc4AOcaJNXhLJJlopM8GOFt8kDZ -----END CERTIFICATE-----Generated at Sun May 11 03:07:20 2025 by rpki-client