$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa File: bf8655bf-4d32-34d1-9212-15f1632d728e.roa (raw, json) Hash identifier: eg/kYFkaxmBNeYUCCRo3y/IOdUPsPgkQJO7/X493mvY= Subject key identifier: 99:FA:87:04:49:00:D0:F3:FE:1D:DE:E3:4C:3F:09:DF:37:19:DD:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DAE22A9551AF9FA146E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396546 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:da:e2:2a:95:51:af:9f:a1:46:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=7cf5976c-e968-4939-88c7-ba9a4b04b1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:65:1f:3c:21:c9:07:28:95:27:28:9e:81: 94:01:e9:ca:ef:02:3a:1e:3d:cc:c2:01:b8:fa:50: ae:16:ae:e6:c3:f6:96:3f:a4:8c:04:6e:27:8f:47: d9:2c:7e:90:09:4d:b0:38:e7:61:ac:cb:97:dd:05: 1c:bd:8e:ed:c3:af:12:7b:70:0a:6d:8e:ec:e7:2d: c6:a2:76:62:1c:43:61:79:e8:a1:fc:b9:36:c0:94: e2:99:ca:f2:72:f3:8e:74:d1:a5:70:77:f1:10:60: 41:e9:82:29:a2:43:6e:61:3b:53:49:c1:1c:ca:6f: 90:a4:ba:69:57:42:f9:87:b8:c3:ff:39:a1:16:8c: 40:c8:2f:5f:eb:d5:55:23:cd:ce:1a:a6:83:cd:86: 30:2c:cc:92:42:c4:7c:2f:8b:58:e5:05:ab:39:3c: 07:a9:27:f6:02:49:0d:68:3d:7a:5c:66:66:e1:f3: 08:50:ca:55:c7:cb:66:9e:9b:f0:58:eb:ed:2f:4a: 4b:4f:71:ec:92:6a:2f:17:bb:6c:e9:03:a1:42:6d: 10:52:ab:06:d2:17:2f:c9:88:f9:5f:21:08:b9:e8: cd:0b:f2:e1:56:13:e7:45:c6:eb:f2:c9:05:37:0d: b8:34:a6:be:cd:6a:ba:42:64:8a:2e:83:d4:25:00: 06:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FA:87:04:49:00:D0:F3:FE:1D:DE:E3:4C:3F:09:DF:37:19:DD:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf8655bf-4d32-34d1-9212-15f1632d728e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ed:21:77:b5:d6:da:1c:27:71:39:44:70:fb:3b:75:7c:ec: 1b:cc:be:bf:5e:93:e0:83:06:02:7c:1f:d6:17:58:2e:63:59: fe:d5:2d:d4:8b:aa:66:49:2f:be:1e:d1:d7:d0:2a:32:b4:2c: 5d:72:51:0a:a1:bd:c4:31:31:f5:c0:78:de:c1:6d:62:31:84: 7f:fd:1b:2a:94:ea:71:b8:ee:63:87:d6:f1:c6:fc:12:c7:43: 71:f7:da:30:f5:bc:5d:75:4f:de:82:e1:7b:18:a9:3b:46:3a: af:10:77:0b:a9:64:dd:d1:dc:0a:2e:03:0c:2b:e6:87:ca:9d: 54:29:50:ee:4d:1b:b6:2f:f4:85:00:14:8a:47:e5:16:0c:ee: ad:51:86:f2:79:9f:d7:9b:df:fd:5f:6a:3d:c7:fa:f6:14:b0: 05:2a:86:13:f4:e2:c2:f2:8b:be:19:0a:2c:bc:bf:8a:ee:9c: fa:01:42:f4:78:96:d0:0a:11:f6:e2:cf:30:ff:54:e8:3c:f4: 01:ca:ff:fe:1d:e1:ea:7f:2b:cd:c1:28:be:24:ea:e5:5f:3e: 5b:38:ab:20:ac:1c:69:77:8a:26:a1:24:94:c2:82:aa:dd:a2: 4b:30:69:be:20:ed:82:b8:f1:c3:9e:eb:4d:8a:5c:c4:f4:9b: b8:d2:9d:b8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmdriKpVRr5+hRuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk N2NmNTk3NmMtZTk2OC00OTM5LTg4YzctYmE5YTRiMDRiMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlphlHzwhyQcolSconoGUAenK7wI6Hj3MwgG4 +lCuFq7mw/aWP6SMBG4nj0fZLH6QCU2wOOdhrMuX3QUcvY7tw68Se3AKbY7s5y3G onZiHENheeih/Lk2wJTimcrycvOOdNGlcHfxEGBB6YIpokNuYTtTScEcym+QpLpp V0L5h7jD/zmhFoxAyC9f69VVI83OGqaDzYYwLMySQsR8L4tY5QWrOTwHqSf2AkkN aD16XGZm4fMIUMpVx8tmnpvwWOvtL0pLT3HskmovF7ts6QOhQm0QUqsG0hcvyYj5 XyEIuejNC/LhVhPnRcbr8skFNw24NKa+zWq6QmSKLoPUJQAGzQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJn6hwRJANDz/h3e40w/Cd83Gd1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY4NjU1YmYtNGQzMi0z NGQxLTkyMTItMTVmMTYzMmQ3MjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCH7SF3tdbaHCdxOURw+zt1fOwbzL6/XpPggwYC fB/WF1guY1n+1S3Ui6pmSS++HtHX0CoytCxdclEKob3EMTH1wHjewW1iMYR//Rsq lOpxuO5jh9bxxvwSx0Nx99ow9bxddU/eguF7GKk7RjqvEHcLqWTd0dwKLgMMK+aH yp1UKVDuTRu2L/SFABSKR+UWDO6tUYbyeZ/Xm9/9X2o9x/r2FLAFKoYT9OLC8ou+ GQosvL+K7pz6AUL0eJbQChH24s8w/1ToPPQByv/+HeHqfyvNwSi+JOrlXz5bOKsg rBxpd4omoSSUwoKq3aJLMGm+IO2CuPHDnutNilzE9Ju40p24 -----END CERTIFICATE-----Generated at Sun May 11 12:22:26 2025 by rpki-client