$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa File: 35af7919-ac24-3711-b19c-92f730b0defb.roa (raw, json) Hash identifier: J4EXL1IjLvuHlk4kFltCP/niFKKRxCpNZwqbjRh6eC4= Subject key identifier: 3F:78:EC:92:1F:1B:98:9B:84:C0:F1:6A:51:A2:49:5E:C0:05:32:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7E7B8267723025AC2676CA20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 397208 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:82:67:72:30:25:ac:26:76:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=208eb0da-7bff-44d6-81c4-139a3cfada80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:ba:20:79:62:fa:1e:dd:5c:bb:a1:9b:a5: 44:dd:16:7c:a1:68:10:9e:df:19:14:f1:54:4e:ab: 03:64:b2:92:8e:40:a1:3f:e6:15:11:61:c4:82:f3: 6c:54:5e:00:c5:cc:21:cd:71:58:a9:9f:b5:aa:22: 73:ec:77:f0:3c:f0:09:fd:4a:d7:32:85:bd:1e:74: 98:4d:56:08:8d:a7:0d:ef:6b:a0:cc:27:aa:c9:20: b8:c5:64:e7:62:b4:2d:eb:45:2c:b3:35:b7:dd:9b: 80:fb:69:1c:85:68:90:6b:1b:3d:a5:fc:a4:0e:ca: d7:7c:ba:73:98:1e:43:d1:d9:29:be:0d:63:f9:46: e3:6e:5a:25:5c:32:5a:fb:4a:6c:47:6f:5f:4f:e5: 8a:0c:3f:34:db:95:a4:f1:f1:fb:f1:14:96:fe:22: 3e:c8:cf:63:61:2a:63:22:c2:59:49:7a:4d:de:71: 08:b3:1e:6f:98:4b:3b:30:69:8f:aa:53:c5:d1:fd: 96:b0:8d:8d:10:b3:7f:f4:33:3d:ce:fb:16:cb:f2: 5a:17:3c:0b:96:b9:72:29:99:18:a3:e7:19:31:06: fe:b9:30:d6:1a:05:f0:b0:e8:3e:3e:9e:0f:cf:33: 26:4c:32:1e:2e:15:3f:c0:b5:94:f6:d5:1d:69:ba: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:78:EC:92:1F:1B:98:9B:84:C0:F1:6A:51:A2:49:5E:C0:05:32:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d0:95:7a:83:27:6f:1e:a7:f7:df:ad:cf:6c:2b:f4:e9:e2: 39:b2:60:d2:cd:7b:95:a0:7a:46:68:eb:5b:8b:27:c5:76:46: 36:1a:1c:ff:fb:20:22:6e:46:4a:10:24:72:f9:a1:ec:94:85: 79:f0:3b:60:97:66:4e:08:65:92:f0:79:aa:fd:ba:6d:0e:f8: 5a:1e:24:9c:6d:83:a0:9a:82:e5:c7:6f:5a:53:d9:92:62:95: 19:5c:ed:87:69:03:c2:94:dd:c0:6a:6a:cb:40:37:be:7c:f7: 5e:82:78:02:e5:69:7d:9e:88:f4:1e:b3:d7:fe:20:bf:5b:c2: 7d:1e:6c:a9:4b:e3:0e:b6:2d:4a:1e:66:d6:24:b3:e6:91:e1: 63:ea:bd:ea:65:ea:4b:da:03:a7:55:d2:82:11:a3:da:f9:e3: cb:6c:6b:42:41:1b:35:df:d5:4d:98:a0:22:d4:f0:88:aa:d9: 56:93:16:dd:bb:13:5b:75:18:8f:8a:7c:a9:e4:a5:f1:9c:b4: 46:f6:3e:a8:af:d3:54:c2:8e:eb:2f:0a:a0:9d:2d:b3:2e:bf: a1:fe:a9:99:4f:d2:6c:ab:7b:2b:18:92:53:81:03:21:39:cd: f1:7f:ed:48:7d:ef:a1:17:f2:1a:b4:2b:56:9e:a2:e0:fa:db: fb:4c:3b:a1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp+e4JncjAlrCZ2yiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MjA4ZWIwZGEtN2JmZi00NGQ2LTgxYzQtMTM5YTNjZmFkYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YO6IHli+h7dXLuhm6VE3RZ8oWgQnt8ZFPFU TqsDZLKSjkChP+YVEWHEgvNsVF4AxcwhzXFYqZ+1qiJz7HfwPPAJ/UrXMoW9HnSY TVYIjacN72ugzCeqySC4xWTnYrQt60UsszW33ZuA+2kchWiQaxs9pfykDsrXfLpz mB5D0dkpvg1j+UbjblolXDJa+0psR29fT+WKDD8025Wk8fH78RSW/iI+yM9jYSpj IsJZSXpN3nEIsx5vmEs7MGmPqlPF0f2WsI2NELN/9DM9zvsWy/JaFzwLlrlyKZkY o+cZMQb+uTDWGgXwsOg+Pp4PzzMmTDIeLhU/wLWU9tUdaboAnQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFD947JIfG5ibhMDxalGiSV7ABTKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzVhZjc5MTktYWMyNC0z NzExLWIxOWMtOTJmNzMwYjBkZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA10JV6gydvHqf3363PbCv06eI5smDSzXuVoHpG aOtbiyfFdkY2Ghz/+yAibkZKECRy+aHslIV58Dtgl2ZOCGWS8Hmq/bptDvhaHiSc bYOgmoLlx29aU9mSYpUZXO2HaQPClN3AamrLQDe+fPdegngC5Wl9noj0HrPX/iC/ W8J9HmypS+MOti1KHmbWJLPmkeFj6r3qZepL2gOnVdKCEaPa+ePLbGtCQRs139VN mKAi1PCIqtlWkxbduxNbdRiPinyp5KXxnLRG9j6or9NUwo7rLwqgnS2zLr+h/qmZ T9Jsq3srGJJTgQMhOc3xf+1Ife+hF/IatCtWnqLg+tv7TDuh -----END CERTIFICATE-----Generated at Wed Jul 23 17:15:55 2025 by rpki-client