$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6c9453a-37fa-3e5f-a30e-fe2e7b2de7f7.roa File: d6c9453a-37fa-3e5f-a30e-fe2e7b2de7f7.roa (raw, json) Hash identifier: P/D/QtzjYTbpTw1BLoXFTk/ayzSIL4rExtrQ0ZI1+RE= Subject key identifier: 12:A8:A6:82:81:56:BF:D5:12:81:BC:17:7B:5A:7F:A8:EE:6C:92:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99E1C8538BBA8BCF4AD570 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6c9453a-37fa-3e5f-a30e-fe2e7b2de7f7.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396559 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:e1:c8:53:8b:ba:8b:cf:4a:d5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=21fe0559-7ac2-4140-9fe6-e0a8218084c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:87:58:7e:b4:c7:eb:9d:c6:f8:62:2d:db: 60:83:fd:79:5e:38:19:63:47:a8:b4:a2:83:48:7d: 0c:39:46:fe:d5:e9:29:9a:fc:f2:2d:68:d2:46:59: e1:02:72:2a:7f:67:f8:a9:17:aa:9e:56:04:c3:ac: 06:9e:6b:f0:1c:ca:f8:c1:8d:6b:04:b8:c4:9d:29: f4:e4:28:1e:ba:27:18:5d:58:11:5f:30:aa:aa:50: 14:4a:c8:f4:11:40:47:e3:7c:05:66:28:18:16:fa: 50:ae:39:ac:b0:e0:2c:c8:f8:b8:a2:ac:32:c2:1a: 7e:d6:52:ec:e1:97:71:26:86:73:c7:21:34:b6:e9: 00:ba:36:90:1c:b8:5a:b6:da:1f:93:9d:c7:9e:98: 98:b1:9a:fd:34:a3:43:94:35:b9:9d:ec:09:3d:27: ea:53:b4:3f:2b:92:eb:d1:f7:34:86:40:b4:26:14: ca:56:54:80:dd:30:92:91:f9:04:6d:a1:a4:33:b7: e6:3b:07:67:bb:36:52:8c:5b:fb:d4:bf:5d:be:69: 0a:bf:17:6b:02:82:fe:49:72:20:1d:15:ed:88:2c: 5f:c2:a9:c0:1f:63:26:8c:81:9d:9c:75:18:c0:6c: ec:16:3f:7f:9a:4e:35:74:5c:76:ad:28:d2:db:3a: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A8:A6:82:81:56:BF:D5:12:81:BC:17:7B:5A:7F:A8:EE:6C:92:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6c9453a-37fa-3e5f-a30e-fe2e7b2de7f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:51:32:15:27:2a:8c:8b:5b:f1:1a:e0:7a:dd:8f:74:f4:33: 9c:c5:96:97:c4:f5:9c:52:ad:1b:aa:bd:cd:0f:1e:d3:30:58: c3:86:d7:26:76:9d:89:34:d9:e9:e7:ac:bb:bf:ee:87:a5:55: e8:8f:b5:1f:47:95:f0:83:e5:27:3f:77:8c:cf:bf:d0:66:d3: 0b:f8:10:5a:67:cb:f4:57:6d:91:76:55:40:59:20:45:59:80: a2:98:7e:76:27:82:6b:df:71:3b:8b:fb:72:e2:66:f8:c7:7b: a2:1b:76:35:38:77:cf:a4:74:55:67:94:4c:a8:50:a1:c8:1c: 33:31:5c:b9:29:cb:9e:50:a1:0b:fd:b8:59:cc:f9:a3:3f:df: cc:a6:63:f0:5c:ee:da:e9:27:d3:d5:14:52:75:6d:ae:bf:00: 3b:e7:10:22:99:48:93:0a:5c:55:54:3f:c0:16:61:9c:58:d1: a0:06:6a:04:c0:04:96:32:0a:dc:dd:b2:8f:2a:47:6b:e1:91: f6:dd:4d:aa:81:af:20:9a:39:bc:02:8b:88:a9:ed:37:4f:94: 75:67:ad:02:3b:79:71:e3:49:90:38:4f:81:0e:2e:c0:af:69: 3d:52:d5:af:d0:c7:b7:fd:a7:10:80:04:72:f3:82:a9:b0:19: c7:d5:13:36 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmeHIU4u6i89K1XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk MjFmZTA1NTktN2FjMi00MTQwLTlmZTYtZTBhODIxODA4NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OyHWH60x+udxvhiLdtgg/15XjgZY0eotKKD SH0MOUb+1ekpmvzyLWjSRlnhAnIqf2f4qReqnlYEw6wGnmvwHMr4wY1rBLjEnSn0 5CgeuicYXVgRXzCqqlAUSsj0EUBH43wFZigYFvpQrjmssOAsyPi4oqwywhp+1lLs 4ZdxJoZzxyE0tukAujaQHLhattofk53HnpiYsZr9NKNDlDW5newJPSfqU7Q/K5Lr 0fc0hkC0JhTKVlSA3TCSkfkEbaGkM7fmOwdnuzZSjFv71L9dvmkKvxdrAoL+SXIg HRXtiCxfwqnAH2MmjIGdnHUYwGzsFj9/mk41dFx2rSjS2zoc+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBKopoKBVr/VEoG8F3taf6jubJKEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDZjOTQ1M2EtMzdmYS0z ZTVmLWEzMGUtZmUyZTdiMmRlN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPUTIVJyqMi1vxGuB63Y909DOcxZaXxPWcUq0b qr3NDx7TMFjDhtcmdp2JNNnp56y7v+6HpVXoj7UfR5Xwg+UnP3eMz7/QZtML+BBa Z8v0V22RdlVAWSBFWYCimH52J4Jr33E7i/ty4mb4x3uiG3Y1OHfPpHRVZ5RMqFCh yBwzMVy5KcueUKEL/bhZzPmjP9/MpmPwXO7a6SfT1RRSdW2uvwA75xAimUiTClxV VD/AFmGcWNGgBmoEwASWMgrc3bKPKkdr4ZH23U2qga8gmjm8AouIqe03T5R1Z60C O3lx40mQOE+BDi7Ar2k9UtWv0Me3/acQgARy84KpsBnH1RM2 -----END CERTIFICATE-----Generated at Sat May 10 23:05:35 2025 by rpki-client