$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa File: 3344fa1c-b4cc-371f-b8b0-6c587e326185.roa (raw, json) Hash identifier: IGXvjvC6n8mUhlAaMAPnZNlVJCiU3PGCfR8ZWQEKGyA= Subject key identifier: 42:AE:66:84:72:9F:C3:5C:7B:8F:1D:0D:C8:67:AE:93:9E:9F:19:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849DC7DB066F900F2447ABE7800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa Signing time: Thu 15 May 2025 12:24:55 +0000 ROA not before: Thu 15 May 2025 12:24:55 +0000 ROA not after: Wed 13 Aug 2025 12:24:55 +0000 asID: 36618 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:7d:b0:66:f9:00:f2:44:7a:be:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 15 12:24:55 2025 GMT Not After : Aug 13 12:24:55 2025 GMT Subject: CN=104d0a9d-20d2-4b93-9d47-c83ea6c6ce1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ad:f1:e5:17:72:19:ba:1e:9a:66:f3:da:f8: 7a:ff:2d:63:20:f2:a3:9c:d6:fb:a3:3e:b1:47:22: 46:a8:a4:2f:a4:f3:41:f5:17:5a:81:81:de:c2:74: 1b:b8:03:79:97:a0:c7:43:98:33:eb:52:62:68:c8: 62:8a:2d:6f:0c:af:2c:86:b6:4d:f6:fd:63:94:5d: 61:c9:0d:05:5f:a4:d8:a7:78:fb:c5:ca:60:79:9b: 2b:d8:63:71:b5:1f:55:ad:16:3a:e8:67:80:0b:4c: 0f:f3:f2:bf:0b:3e:a2:db:aa:a4:52:9d:e3:3c:34: b0:48:1b:95:e0:74:81:cb:a5:8d:28:96:ce:17:5e: 61:3b:ad:62:6a:27:98:f6:57:56:a5:6c:c1:4f:7e: 84:34:ee:75:5f:cf:93:5a:32:5d:08:8e:f8:ae:10: a7:c1:6f:33:a4:8e:66:ed:db:a1:ce:30:1e:c6:2f: 7e:b5:e0:55:bc:db:c3:2f:d6:1b:68:6b:1c:a7:f9: 37:3c:01:07:7e:7d:f6:5e:31:f6:9e:12:a6:d8:4a: 66:86:c0:4b:d9:8e:b1:20:e2:0c:ce:41:bc:71:19: d1:39:89:d4:60:af:a4:63:1a:37:b8:83:29:40:4e: 05:88:14:5e:8e:1f:21:e8:95:e7:8a:9d:50:df:ac: a0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AE:66:84:72:9F:C3:5C:7B:8F:1D:0D:C8:67:AE:93:9E:9F:19:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:22:0f:30:ca:58:1a:e5:81:26:1b:84:1a:e5:5b:9a:e8:12: 90:7b:a1:ab:5e:56:8a:4d:1c:d7:09:1f:c8:bc:6a:23:c5:b4: c0:c2:ac:94:1a:b8:91:c4:83:10:db:77:86:0a:60:f1:2e:01: 8a:4e:ba:31:c6:ef:29:59:be:6b:d3:b5:a9:f4:87:0c:59:1b: af:8c:dc:f9:38:1f:6a:c6:0f:5d:f7:51:25:b0:e4:bd:31:16: 9d:15:56:1f:c1:85:14:d4:ee:d4:69:46:8c:c9:ad:2d:91:b6: fd:3d:c7:6c:d8:ec:c2:81:9c:59:69:8e:62:7f:20:e6:ee:76: 94:9a:08:55:75:dc:74:5d:45:ed:c0:cd:cb:0c:d6:32:09:85: 1c:14:cf:38:ca:60:8a:f1:ba:88:e1:53:44:a4:09:3a:26:a7: 42:2e:c4:c0:fb:66:e3:74:6b:f9:5a:5c:bb:6d:30:1a:38:dc: 68:83:36:44:70:16:01:81:2a:84:25:04:5f:6e:68:24:29:9d: 82:ff:55:f8:1f:0b:ce:52:dc:95:d0:3d:6d:3a:e9:65:d8:0e: 21:fc:15:14:ff:06:d1:14:f1:a9:f1:9a:fa:d6:f2:48:df:bc: 16:6e:94:f6:c9:a9:0c:74:84:6f:ca:81:2b:7e:4a:5a:0e:95: df:fe:df:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncfbBm+QDyRHq+eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxNTEyMjQ1NVoXDTI1MDgxMzEyMjQ1NVowLzEtMCsGA1UEAxMk MTA0ZDBhOWQtMjBkMi00YjkzLTlkNDctYzgzZWE2YzZjZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq3x5RdyGboemmbz2vh6/y1jIPKjnNb7oz6x RyJGqKQvpPNB9RdagYHewnQbuAN5l6DHQ5gz61JiaMhiii1vDK8shrZN9v1jlF1h yQ0FX6TYp3j7xcpgeZsr2GNxtR9VrRY66GeAC0wP8/K/Cz6i26qkUp3jPDSwSBuV 4HSBy6WNKJbOF15hO61iaieY9ldWpWzBT36ENO51X8+TWjJdCI74rhCnwW8zpI5m 7duhzjAexi9+teBVvNvDL9YbaGscp/k3PAEHfn32XjH2nhKm2EpmhsBL2Y6xIOIM zkG8cRnROYnUYK+kYxo3uIMpQE4FiBRejh8h6JXnip1Q36yg9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKuZoRyn8Nce48dDchnrpOenxkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM0NGZhMWMtYjRjYy0z NzFmLWI4YjAtNmM1ODdlMzI2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI0iDzDKWBrlgSYbhBrlW5roEpB7oateVopNHNcJH8i8aiPFtMDC rJQauJHEgxDbd4YKYPEuAYpOujHG7ylZvmvTtan0hwxZG6+M3Pk4H2rGD133USWw 5L0xFp0VVh/BhRTU7tRpRozJrS2Rtv09x2zY7MKBnFlpjmJ/IObudpSaCFV13HRd Re3AzcsM1jIJhRwUzzjKYIrxuojhU0SkCTomp0IuxMD7ZuN0a/laXLttMBo43GiD NkRwFgGBKoQlBF9uaCQpnYL/VfgfC85S3JXQPW066WXYDiH8FRT/BtEU8anxmvrW 8kjfvBZulPbJqQx0hG/KgSt+SloOld/+36M= -----END CERTIFICATE-----Generated at Mon Jun 30 18:25:50 2025 by rpki-client