$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa File: 0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa (raw, json) Hash identifier: MTHeswxXckMulLlIjW/+UpdEpkwltxcyxlDGHW5HNW0= Subject key identifier: 64:D8:DB:79:92:B2:CF:72:C3:58:94:91:57:4B:5D:A8:3A:9A:62:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758A2DE150DD737709FDD40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa Signing time: Tue 13 May 2025 16:11:13 +0000 ROA not before: Tue 13 May 2025 16:11:13 +0000 ROA not after: Mon 11 Aug 2025 16:11:13 +0000 asID: 396585 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:a2:de:15:0d:d7:37:70:9f:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:13 2025 GMT Not After : Aug 11 16:11:13 2025 GMT Subject: CN=cfa425a8-74f4-4878-8923-2dbc45ba9a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:68:a5:3a:da:77:21:f4:06:a5:05:36:b3: 58:00:cb:b4:ce:4b:a0:93:f9:9d:df:2e:5a:c8:58: da:2f:05:ea:96:94:9a:2e:dd:2c:5d:6e:d4:22:34: 26:d3:24:bd:d9:21:46:48:82:fc:d2:c0:56:0d:2f: 5b:c9:dc:cc:50:ed:3b:d3:ed:c4:0d:36:5f:bf:3e: 64:88:72:d2:8f:91:a2:29:4d:8c:37:84:e7:89:97: 68:ec:1a:bb:81:17:ac:27:5b:02:12:70:fa:09:cc: a9:0b:35:b1:9c:f5:14:ed:90:7b:fc:bf:df:16:dd: 43:72:89:2d:60:d1:dc:be:00:60:85:c0:da:9c:47: b9:51:25:bb:d8:f4:b1:a3:4f:66:56:8d:02:d6:8f: 86:b1:ba:4e:e6:80:47:09:e5:2e:38:df:78:88:57: 20:00:b9:11:81:15:ce:92:41:cb:29:21:79:83:23: 4c:a3:c4:a3:7e:5f:4f:ce:83:02:c0:6f:79:e3:32: 87:f2:34:7f:ac:f8:bc:f2:4d:5f:f7:6e:eb:76:96: 13:85:23:9c:81:0c:1e:87:80:f4:9d:2a:e0:fa:dd: 49:6b:f9:07:73:c5:78:7f:cc:59:93:2c:aa:5b:83: 8c:ca:5c:2b:42:c0:10:7b:09:bb:74:3e:89:75:19: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D8:DB:79:92:B2:CF:72:C3:58:94:91:57:4B:5D:A8:3A:9A:62:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7dee87-62db-3c9c-b11e-afd3a47d3da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f5:6f:3d:46:96:a4:ac:64:2a:cc:f2:75:c1:8f:48:66:07: 4c:cd:8e:62:db:f7:1c:69:74:76:a1:ee:20:b8:ae:0f:e9:b7: 8c:18:9b:e6:33:3d:70:6f:1b:2f:da:04:a0:2a:a3:df:ee:0b: 72:07:b3:55:aa:e7:87:53:31:55:85:a9:a0:22:68:61:92:0c: 81:b3:08:94:0a:de:de:2a:d2:29:2f:8a:e8:22:ce:3c:35:3c: 01:af:b3:bf:d9:ef:a4:52:39:b1:22:08:bd:90:0f:87:b7:8c: 21:e9:00:f2:50:7e:6e:48:13:bb:57:64:6e:d8:80:94:4a:29: aa:58:29:b6:0a:0c:c5:91:d2:4c:7b:89:ed:44:50:f3:5b:50: 73:61:01:b9:d9:2b:f3:9e:43:f4:93:95:c2:44:cc:3a:ce:09: 81:68:0a:5b:2c:67:29:e3:9f:cd:21:45:8f:22:7e:24:37:2a: 51:a6:1d:9f:9b:96:8d:ba:63:3b:8c:85:16:63:a8:4a:b2:57: 38:c6:94:89:6a:21:35:ad:9c:88:62:b4:68:61:d3:81:36:70: 94:11:77:f3:b1:98:8e:02:c7:29:e2:3f:b2:ed:9d:a1:0a:4b: 66:53:65:4d:b3:cf:80:62:06:58:a1:4a:6a:ca:08:a4:7a:eb: 71:de:c5:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWKLeFQ3XN3Cf3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExM1oXDTI1MDgxMTE2MTExM1owLzEtMCsGA1UEAxMk Y2ZhNDI1YTgtNzRmNC00ODc4LTg5MjMtMmRiYzQ1YmE5YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV1opTradyH0BqUFNrNYAMu0zkugk/md3y5a yFjaLwXqlpSaLt0sXW7UIjQm0yS92SFGSIL80sBWDS9bydzMUO070+3EDTZfvz5k iHLSj5GiKU2MN4TniZdo7Bq7gResJ1sCEnD6CcypCzWxnPUU7ZB7/L/fFt1Dcokt YNHcvgBghcDanEe5USW72PSxo09mVo0C1o+GsbpO5oBHCeUuON94iFcgALkRgRXO kkHLKSF5gyNMo8Sjfl9PzoMCwG954zKH8jR/rPi88k1f927rdpYThSOcgQweh4D0 nSrg+t1Ja/kHc8V4f8xZkyyqW4OMylwrQsAQewm7dD6JdRkdywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGTY23mSss9yw1iUkVdLXag6mmLCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI3ZGVlODctNjJkYi0z YzljLWIxMWUtYWZkM2E0N2QzZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACT1bz1GlqSsZCrM8nXBj0hmB0zNjmLb9xxpdHah7iC4rg/pt4wY m+YzPXBvGy/aBKAqo9/uC3IHs1Wq54dTMVWFqaAiaGGSDIGzCJQK3t4q0ikviugi zjw1PAGvs7/Z76RSObEiCL2QD4e3jCHpAPJQfm5IE7tXZG7YgJRKKapYKbYKDMWR 0kx7ie1EUPNbUHNhAbnZK/OeQ/STlcJEzDrOCYFoClssZynjn80hRY8ifiQ3KlGm HZ+blo26YzuMhRZjqEqyVzjGlIlqITWtnIhitGhh04E2cJQRd/OxmI4CxyniP7Lt naEKS2ZTZU2zz4BiBlihSmrKCKR663HexcA= -----END CERTIFICATE-----Generated at Mon Jun 30 10:22:31 2025 by rpki-client