$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e88e12e7-a4f3-3f50-9720-24721e43ea8f.roa File: e88e12e7-a4f3-3f50-9720-24721e43ea8f.roa (raw, json) Hash identifier: 2IJSw0kr2ee9bbuC4jJblCLSHphLQn9KstT7CScgnUs= Subject key identifier: 76:21:C7:1E:9E:42:B4:F8:BD:4D:7D:18:1B:99:65:2D:98:96:63:FE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F432858498B99DA89D64D92B9DF3C5700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e88e12e7-a4f3-3f50-9720-24721e43ea8f.roa Signing time: Wed 16 Apr 2025 13:01:01 +0000 ROA not before: Wed 16 Apr 2025 13:01:01 +0000 ROA not after: Tue 15 Jul 2025 13:01:01 +0000 asID: 396610 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:99:da:89:d6:4d:92:b9:df:3c:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 16 13:01:01 2025 GMT Not After : Jul 15 13:01:01 2025 GMT Subject: CN=3e71277b-b987-48da-843c-28d5d48a4380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:02:d1:7c:ca:2e:ae:45:8d:d3:eb:30:7d:33: f2:fc:6b:75:be:68:80:e1:f4:51:0c:9c:4e:be:35: 32:eb:15:8d:35:6c:83:52:f9:dd:af:8e:d9:2e:dc: a2:f9:8c:fa:55:34:7d:42:38:b5:fc:47:2f:6a:e5: 25:39:eb:6d:c5:02:18:03:48:15:e9:8d:52:5e:24: d6:49:0d:90:74:b0:64:31:1a:54:45:72:9a:69:0b: 1d:ea:0f:69:9c:90:2b:69:6d:c2:5c:36:48:dc:36: 16:a6:43:12:4b:2b:78:31:86:0c:29:c5:2c:0a:ad: d9:b7:a5:42:fe:6f:da:91:58:c6:d2:78:17:37:1e: 6c:ee:3b:09:ed:27:2d:2b:c6:d2:c6:9b:1f:3e:1c: db:bd:cc:d4:32:65:2a:ef:3a:59:fc:2d:79:0d:84: 50:b9:34:ab:f1:2a:38:4f:02:66:25:e1:f1:ba:22: e9:ce:8f:af:e3:54:5a:e9:ac:d8:e3:30:91:53:67: d8:e3:30:4c:5c:6a:c2:1e:14:ee:1c:29:9a:ff:e1: ef:b2:52:da:d5:66:a2:9a:94:73:b8:fe:12:77:72: be:e8:8c:18:eb:ff:c4:f5:9c:af:2c:21:d9:de:97: 1c:77:21:fb:89:3c:d3:6c:d4:e0:fb:0d:bd:ec:02: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:21:C7:1E:9E:42:B4:F8:BD:4D:7D:18:1B:99:65:2D:98:96:63:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e88e12e7-a4f3-3f50-9720-24721e43ea8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:67:78:fb:9f:ec:32:4f:c0:d5:f4:fc:19:4f:69:99:ab:c3: e4:7b:ae:f8:aa:73:9c:84:d4:17:ed:9c:6a:4b:b4:26:80:ac: 29:05:8d:07:21:24:27:24:f2:f3:d0:84:1e:98:c9:9d:fb:8a: 81:47:cf:19:0f:cb:66:08:c6:73:62:ce:82:0b:a4:ae:c5:b9: fc:ef:b1:2c:4e:55:0e:d0:46:86:87:01:b4:94:c8:46:2c:3d: 75:a8:9e:fe:51:e5:bc:ce:64:6d:82:c6:da:03:b1:93:83:a4: 6b:18:a9:54:f0:50:61:62:28:d4:ff:5c:01:29:2e:26:37:07: fe:2f:46:31:cf:e8:20:9c:27:ed:36:cd:4d:a0:89:45:d8:a4: 67:39:a8:be:72:60:7d:ce:dc:33:56:4d:f3:7a:49:f6:a8:4d: 17:d5:85:d7:64:d5:9c:3e:61:df:78:13:88:13:c3:3a:82:fd: b2:64:46:4f:e0:55:17:cd:2b:15:fc:0a:8d:ac:ad:e4:31:56: b0:a8:f8:21:a7:38:ec:c5:62:bf:1e:3f:59:b5:56:c7:50:6d: fb:8c:87:45:0f:44:a5:3b:59:2b:73:2d:d0:07:a9:06:88:1e: 01:45:6a:16:e6:66:d8:76:ef:d2:0a:b4:8c:05:cb:82:2d:df: f3:0c:85:e8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmLmdqJ1k2Sud88VwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDQxNjEzMDEwMVoXDTI1MDcxNTEzMDEwMVowLzEtMCsGA1UEAxMk M2U3MTI3N2ItYjk4Ny00OGRhLTg0M2MtMjhkNWQ0OGE0MzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQLRfMourkWN0+swfTPy/Gt1vmiA4fRRDJxO vjUy6xWNNWyDUvndr47ZLtyi+Yz6VTR9Qji1/EcvauUlOettxQIYA0gV6Y1SXiTW SQ2QdLBkMRpURXKaaQsd6g9pnJAraW3CXDZI3DYWpkMSSyt4MYYMKcUsCq3Zt6VC /m/akVjG0ngXNx5s7jsJ7SctK8bSxpsfPhzbvczUMmUq7zpZ/C15DYRQuTSr8So4 TwJmJeHxuiLpzo+v41Ra6azY4zCRU2fY4zBMXGrCHhTuHCma/+HvslLa1WaimpRz uP4Sd3K+6IwY6//E9ZyvLCHZ3pccdyH7iTzTbNTg+w297AJX+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHYhxx6eQrT4vU19GBuZZS2YlmP+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTg4ZTEyZTctYTRmMy0z ZjUwLTk3MjAtMjQ3MjFlNDNlYThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAwZ3j7n+wyT8DV9PwZT2mZq8Pke674qnOchNQX 7ZxqS7QmgKwpBY0HISQnJPLz0IQemMmd+4qBR88ZD8tmCMZzYs6CC6Suxbn877Es TlUO0EaGhwG0lMhGLD11qJ7+UeW8zmRtgsbaA7GTg6RrGKlU8FBhYijU/1wBKS4m Nwf+L0Yxz+ggnCftNs1NoIlF2KRnOai+cmB9ztwzVk3zekn2qE0X1YXXZNWcPmHf eBOIE8M6gv2yZEZP4FUXzSsV/AqNrK3kMVawqPghpzjsxWK/Hj9ZtVbHUG37jIdF D0SlO1krcy3QB6kGiB4BRWoW5mbYdu/SCrSMBcuCLd/zDIXo -----END CERTIFICATE-----Generated at Sat Jun 7 04:25:16 2025 by rpki-client