$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa File: c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa (raw, json) Hash identifier: HfvWCQrOIUAZGsidLI7om8naBlXqSQPe1egai0cSvKQ= Subject key identifier: A7:97:D0:B3:1E:77:77:7F:8C:A3:6B:08:BF:45:DE:52:5A:AE:2B:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24C27F0716EC35FCE20FF0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396581 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c2:7f:07:16:ec:35:fc:e2:0f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=4b668552-ba79-40fd-b865-c6d2f16a9e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f1:fe:cc:7f:df:d7:7f:06:54:f8:69:b8:3d: bf:48:8e:10:60:75:6f:0f:e8:09:54:a0:fc:17:0b: 41:14:5c:7d:19:db:5a:da:4a:ea:78:ec:4c:58:59: 79:64:42:1a:e4:b1:a0:07:26:35:31:46:0c:e0:43: 59:25:44:ba:9d:5f:d4:71:75:ef:b2:3c:fe:a2:6e: d6:e2:de:8c:01:a0:4c:b0:85:ac:b6:ad:0a:74:09: 7e:1e:1a:93:f8:8b:8a:c8:c0:4d:77:8d:4c:74:8a: be:05:d9:dd:52:6e:e6:e6:96:1e:e1:36:3a:0b:42: 0a:ca:fb:a1:dc:03:9c:b6:fc:8a:59:95:82:9b:51: 2a:88:e0:fe:fe:9f:4f:8d:5a:10:09:27:7f:9f:b8: 82:36:f9:f3:f5:73:92:d8:ae:29:78:39:a9:c7:85: 4b:bd:d7:f2:2b:75:7f:1e:52:4b:35:16:3e:87:74: 15:15:17:c0:35:22:af:ce:7c:84:9f:3b:e4:4c:ed: 26:dc:99:36:f6:6a:7f:cb:17:98:d6:0d:8f:a8:4a: 7a:8f:72:53:4a:cf:95:fc:40:14:58:1e:ba:61:b9: 5e:17:e8:f6:1d:72:04:1e:55:e4:90:10:3c:b8:6f: de:11:b7:54:92:89:23:9a:ad:16:8e:65:1c:8d:35: 0a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:97:D0:B3:1E:77:77:7F:8C:A3:6B:08:BF:45:DE:52:5A:AE:2B:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:39:34:54:1a:7b:93:bf:72:97:86:51:fd:ae:7a:1b:16:fd: 19:4b:6f:e9:db:0f:4d:cb:89:2a:6a:48:37:23:12:ed:fc:c2: 11:42:f4:43:c7:5e:b0:f9:86:ad:70:c9:1d:b6:75:78:cc:d1: 1e:aa:5f:04:b7:a8:44:5c:33:94:c8:8f:9b:bc:e1:d6:ee:73: 81:bf:60:11:04:dd:a4:e0:e8:ad:bd:19:5d:42:53:6a:f8:48: 29:24:04:a5:ab:15:44:68:9b:2f:00:bf:b4:ab:30:d5:2c:0d: 02:0f:f3:3e:e8:77:9b:67:ed:c0:d1:6d:f2:6f:90:a5:9b:02: de:2e:89:c7:0c:9e:1d:b7:ef:0b:2e:e9:15:c2:38:f2:1c:fc: 38:bf:ef:12:09:95:bb:b5:56:4f:40:a0:8b:48:97:5c:82:31: 4c:75:cf:40:c2:0e:bb:46:96:03:35:58:15:1f:92:27:06:67: 78:1a:f9:80:3b:7d:99:14:81:0b:1f:d6:e4:96:41:67:50:56: 65:07:e2:b8:c3:69:3f:b9:e5:56:6f:9b:4a:b4:58:ee:4d:4d: 4c:1d:33:e8:17:9d:bc:fe:33:b6:2f:62:6a:49:f7:40:c4:bf: 1b:3b:4b:34:a4:b5:a1:f9:eb:33:d7:f6:e8:d2:5b:98:78:aa: 94:6c:a5:e6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJMJ/BxbsNfziD/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NGI2Njg1NTItYmE3OS00MGZkLWI4NjUtYzZkMmYxNmE5ZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPH+zH/f138GVPhpuD2/SI4QYHVvD+gJVKD8 FwtBFFx9Gdta2krqeOxMWFl5ZEIa5LGgByY1MUYM4ENZJUS6nV/UcXXvsjz+om7W 4t6MAaBMsIWstq0KdAl+HhqT+IuKyMBNd41MdIq+BdndUm7m5pYe4TY6C0IKyvuh 3AOctvyKWZWCm1EqiOD+/p9PjVoQCSd/n7iCNvnz9XOS2K4peDmpx4VLvdfyK3V/ HlJLNRY+h3QVFRfANSKvznyEnzvkTO0m3Jk29mp/yxeY1g2PqEp6j3JTSs+V/EAU WB66YbleF+j2HXIEHlXkkBA8uG/eEbdUkokjmq0WjmUcjTUKpQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKeX0LMed3d/jKNrCL9F3lJarit5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQzOGVlYzgtYTVhNS0z NmYxLWIwNzEtMmQ1ODFiZmUxNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCbOTRUGnuTv3KXhlH9rnobFv0ZS2/p2w9Ny4kq akg3IxLt/MIRQvRDx16w+YatcMkdtnV4zNEeql8Et6hEXDOUyI+bvOHW7nOBv2AR BN2k4OitvRldQlNq+EgpJASlqxVEaJsvAL+0qzDVLA0CD/M+6HebZ+3A0W3yb5Cl mwLeLonHDJ4dt+8LLukVwjjyHPw4v+8SCZW7tVZPQKCLSJdcgjFMdc9Awg67RpYD NVgVH5InBmd4GvmAO32ZFIELH9bklkFnUFZlB+K4w2k/ueVWb5tKtFjuTU1MHTPo F528/jO2L2JqSfdAxL8bO0s0pLWh+esz1/bo0luYeKqUbKXm -----END CERTIFICATE-----Generated at Sat May 10 23:26:37 2025 by rpki-client