$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc80b007-4109-35cf-8bd2-e93ee56fd045.roa File: dc80b007-4109-35cf-8bd2-e93ee56fd045.roa (raw, json) Hash identifier: VovJwoWxhiERFr03uBU5o0TXxZW/F5FnMWiWgPWdaKc= Subject key identifier: 61:D6:92:78:1B:CA:FE:39:D8:13:DC:36:9B:80:63:BC:7D:3E:2F:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858499F24BE33239ED0AB384CC800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc80b007-4109-35cf-8bd2-e93ee56fd045.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396544 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:be:33:23:9e:d0:ab:38:4c:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=4ef6a538-59d2-49fe-85e5-b6fe335e180f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:af:15:2e:6b:ef:64:0d:b3:d2:17:7b:6a:ac: 6d:ef:d9:b8:00:38:ad:4e:fc:f3:e4:f5:6f:43:8a: 5e:e4:61:3e:06:a5:1b:cd:14:78:3b:83:6d:59:e4: 95:9f:5a:23:98:77:b1:13:dd:55:19:20:87:21:4f: bb:d5:4f:d9:76:1d:e7:a4:f4:17:be:08:ee:a3:de: 24:e4:31:87:b9:0c:c8:18:b0:28:d5:84:4a:65:0f: 63:9a:b2:eb:c6:dc:73:b6:a4:c3:80:e1:5e:38:ea: ff:b5:2f:ac:75:40:17:6a:cd:68:24:8f:84:23:ab: ff:97:d3:14:e3:d3:e3:21:0e:e6:c8:07:1c:ba:d0: 9b:5f:8c:8f:9f:01:b4:45:2c:21:51:6b:d0:6e:5d: 8a:f0:18:a8:d2:76:b2:78:80:86:f3:1d:fc:cf:a5: 59:f5:3e:14:a9:15:e1:bb:69:40:c0:b9:26:b4:e3: f6:a1:ff:c2:cf:e5:c2:72:ee:c1:24:8e:6b:91:6f: 86:63:00:e5:7a:d3:d4:15:77:4a:42:ea:93:cd:99: 02:16:e7:2e:d9:e8:27:f1:15:06:f9:30:71:01:85: 67:9e:36:55:10:05:48:b0:f1:ca:e4:50:3d:43:23: f7:b9:77:ed:6e:48:84:46:c4:70:c6:a6:8d:aa:ba: 19:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D6:92:78:1B:CA:FE:39:D8:13:DC:36:9B:80:63:BC:7D:3E:2F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc80b007-4109-35cf-8bd2-e93ee56fd045.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:92:08:ed:2f:f1:e9:02:12:d7:8d:34:3b:9c:e5:e9:c8:f6: 5e:4e:ed:39:5b:55:c8:ff:82:fd:da:64:ec:f2:51:d8:49:51: 3b:3c:c5:a5:3f:ab:45:38:08:3c:c9:de:4b:3e:e6:8d:a6:0c: 56:72:c2:97:23:45:25:28:8c:01:7d:ef:48:f1:57:d8:1f:68: 28:5c:cd:64:d8:ad:f9:36:86:d8:ea:79:30:ef:04:e3:9b:48: 47:45:2c:81:f6:25:36:61:d3:a3:fd:24:74:36:63:f8:c6:42: 90:a2:16:c9:1a:dc:6c:61:ee:b6:e1:11:4d:a8:f0:81:23:bf: 00:21:93:41:55:85:24:4f:d7:6b:d0:73:31:48:61:33:e3:a0: b4:3d:da:ff:9e:b8:47:f7:b4:a5:da:e4:16:3f:64:1e:e7:7d: c7:d2:09:bb:4a:79:ae:3c:47:4c:ca:b9:42:2e:fe:a3:83:35: bf:6d:ee:3e:4a:b3:f6:cd:04:bb:f6:2a:41:a9:31:30:89:26: 45:a7:dd:41:85:e2:99:4e:0f:c1:f3:d6:09:80:38:6f:4b:fe: 92:ad:43:24:ad:2f:e1:f6:29:23:19:5b:f7:4d:3a:ee:0a:6d: 78:11:76:f4:67:df:db:8d:01:8c:22:94:b2:17:ec:92:d8:64: 23:eb:1b:80 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmfJL4zI57QqzhMyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NGVmNmE1MzgtNTlkMi00OWZlLTg1ZTUtYjZmZTMzNWUxODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh68VLmvvZA2z0hd7aqxt79m4ADitTvzz5PVv Q4pe5GE+BqUbzRR4O4NtWeSVn1ojmHexE91VGSCHIU+71U/Zdh3npPQXvgjuo94k 5DGHuQzIGLAo1YRKZQ9jmrLrxtxztqTDgOFeOOr/tS+sdUAXas1oJI+EI6v/l9MU 49PjIQ7myAccutCbX4yPnwG0RSwhUWvQbl2K8Bio0nayeICG8x38z6VZ9T4UqRXh u2lAwLkmtOP2of/Cz+XCcu7BJI5rkW+GYwDletPUFXdKQuqTzZkCFucu2egn8RUG +TBxAYVnnjZVEAVIsPHK5FA9QyP3uXftbkiERsRwxqaNqroZWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGHWkngbyv452BPcNpuAY7x9Pi/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM4MGIwMDctNDEwOS0z NWNmLThiZDItZTkzZWU1NmZkMDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCckgjtL/HpAhLXjTQ7nOXpyPZeTu05W1XI/4L9 2mTs8lHYSVE7PMWlP6tFOAg8yd5LPuaNpgxWcsKXI0UlKIwBfe9I8VfYH2goXM1k 2K35NobY6nkw7wTjm0hHRSyB9iU2YdOj/SR0NmP4xkKQohbJGtxsYe624RFNqPCB I78AIZNBVYUkT9dr0HMxSGEz46C0Pdr/nrhH97Sl2uQWP2Qe533H0gm7SnmuPEdM yrlCLv6jgzW/be4+SrP2zQS79ipBqTEwiSZFp91BheKZTg/B89YJgDhvS/6SrUMk rS/h9ikjGVv3TTruCm14EXb0Z9/bjQGMIpSyF+yS2GQj6xuA -----END CERTIFICATE-----Generated at Sun May 11 02:04:23 2025 by rpki-client