$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa File: 209c2afd-1ef7-350d-ac7f-66af5a91c679.roa (raw, json) Hash identifier: maxGd215+6DkE2XJ0UiCCJhHx1vUZrvQ0WxhTsJx+t0= Subject key identifier: 8F:A0:BC:BE:8D:1C:0A:D5:15:33:53:9C:1F:93:7F:F6:A9:C7:D2:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D7589818656A7CA5FDA1A560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa Signing time: Tue 13 May 2025 16:11:08 +0000 ROA not before: Tue 13 May 2025 16:11:08 +0000 ROA not after: Mon 11 Aug 2025 16:11:08 +0000 asID: 32651 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:98:18:65:6a:7c:a5:fd:a1:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:08 2025 GMT Not After : Aug 11 16:11:08 2025 GMT Subject: CN=fa973e12-4c49-47a1-9809-d24448db41e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:69:41:57:42:93:25:ad:dc:fe:86:c8:e5:67: 02:50:0c:98:51:3d:4e:c5:8c:e0:87:e7:e5:ac:85: 0d:03:66:54:bf:e5:34:c1:23:b0:09:bf:b0:12:25: 45:b7:cc:c1:9f:2f:3d:7d:f1:db:bd:1d:64:99:1e: 8a:3d:14:62:23:68:02:b2:f8:c3:aa:e2:a1:95:5e: 9f:04:44:c5:ca:14:28:0b:bc:d7:57:a0:40:57:67: d1:e1:86:71:77:be:2f:da:62:61:e2:b4:0a:59:ea: 68:bf:3d:9e:15:f1:56:6a:f0:3c:8f:f7:d1:69:7a: 57:2d:db:6d:95:78:1a:0f:f3:0a:dc:ec:a6:24:06: ad:46:ed:fc:17:e5:27:09:a3:07:e2:6c:6e:0f:4a: 71:d2:8f:58:7b:53:1f:3e:26:91:03:17:62:48:af: d0:ca:18:03:bd:80:f0:98:12:90:e7:ae:4b:36:40: 65:72:eb:3f:8a:fe:35:2a:59:24:2e:64:71:83:7b: 1a:c3:c9:59:d9:42:32:70:06:ea:af:7a:60:51:dc: 7f:8b:af:50:08:78:94:92:09:25:54:d4:33:11:28: f2:e3:5c:f2:39:ac:e9:98:ee:71:14:4b:d5:c3:43: a2:13:e0:75:9f:73:7b:86:47:f0:81:d9:78:ed:86: 62:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A0:BC:BE:8D:1C:0A:D5:15:33:53:9C:1F:93:7F:F6:A9:C7:D2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:e9:13:f8:b5:ee:2a:3a:d9:63:c0:40:73:d9:75:fa:62:ea: c2:49:9e:fc:01:c7:78:f1:42:04:b1:2a:c5:98:73:e7:bf:7c: df:ab:31:29:f0:11:95:f3:1b:e6:4e:df:9e:68:0a:3b:e2:a9: 22:da:a7:19:d8:a4:28:81:80:cd:ae:12:a2:da:38:37:91:c5: 61:41:91:8e:4a:fa:a9:37:68:cd:f0:17:c3:3d:3d:c3:3d:40: 3b:b0:a7:91:fd:30:ad:a5:3d:e4:7d:e5:11:4b:db:56:1a:4c: c5:fc:5f:22:20:01:84:b9:ef:af:a4:45:da:58:20:b2:6e:35: a8:8c:24:cd:57:75:ad:0f:bf:a0:2f:9f:c2:7f:3d:16:61:25: b6:f2:70:73:54:0d:22:a7:b8:b9:4c:04:e5:1c:ca:ed:a3:3d: 94:56:32:56:d1:05:b0:6d:57:37:5e:0e:37:41:b9:bd:a1:9e: 61:70:e8:cc:29:29:f9:2e:0f:ef:8b:c8:4e:5d:c1:20:9a:05: 4a:10:08:a8:69:d6:47:9b:60:13:bc:07:f0:a1:74:98:ab:11: 9c:07:65:83:89:99:0b:c2:cb:37:22:b3:85:6c:e7:3d:34:e2: 2f:14:48:41:ab:5f:4f:72:c8:03:1d:89:fa:77:27:ff:77:fc: 9d:eb:92:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWJgYZWp8pf2hpWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTEwOFoXDTI1MDgxMTE2MTEwOFowLzEtMCsGA1UEAxMk ZmE5NzNlMTItNGM0OS00N2ExLTk4MDktZDI0NDQ4ZGI0MWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWlBV0KTJa3c/obI5WcCUAyYUT1OxYzgh+fl rIUNA2ZUv+U0wSOwCb+wEiVFt8zBny89ffHbvR1kmR6KPRRiI2gCsvjDquKhlV6f BETFyhQoC7zXV6BAV2fR4YZxd74v2mJh4rQKWepovz2eFfFWavA8j/fRaXpXLdtt lXgaD/MK3OymJAatRu38F+UnCaMH4mxuD0px0o9Ye1MfPiaRAxdiSK/QyhgDvYDw mBKQ565LNkBlcus/iv41KlkkLmRxg3saw8lZ2UIycAbqr3pgUdx/i69QCHiUkgkl VNQzESjy41zyOazpmO5xFEvVw0OiE+B1n3N7hkfwgdl47YZiKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI+gvL6NHArVFTNTnB+Tf/apx9KzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA5YzJhZmQtMWVmNy0z NTBkLWFjN2YtNjZhZjVhOTFjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK/pE/i17io62WPAQHPZdfpi6sJJnvwBx3jxQgSxKsWYc+e/fN+r MSnwEZXzG+ZO355oCjviqSLapxnYpCiBgM2uEqLaODeRxWFBkY5K+qk3aM3wF8M9 PcM9QDuwp5H9MK2lPeR95RFL21YaTMX8XyIgAYS576+kRdpYILJuNaiMJM1Xda0P v6Avn8J/PRZhJbbycHNUDSKnuLlMBOUcyu2jPZRWMlbRBbBtVzdeDjdBub2hnmFw 6MwpKfkuD++LyE5dwSCaBUoQCKhp1kebYBO8B/ChdJirEZwHZYOJmQvCyzcis4Vs 5z004i8USEGrX09yyAMdifp3J/93/J3rkvA= -----END CERTIFICATE-----Generated at Tue Jul 1 16:56:56 2025 by rpki-client