$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa File: 3f1b0596-2674-340b-844e-d508a34d5971.roa (raw, json) Hash identifier: 2M0CtXb5Hi17/psGp3QcKSUUZjrrjur6KeLdIJP5dug= Subject key identifier: B1:4C:20:E4:B2:EC:C2:97:B7:4E:5A:6F:5F:3D:A7:59:D7:12:83:D0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758B1DC22AF4252E57D3C70 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa Signing time: Tue 13 May 2025 16:11:20 +0000 ROA not before: Tue 13 May 2025 16:11:20 +0000 ROA not after: Mon 11 Aug 2025 16:11:20 +0000 asID: 396608 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:b1:dc:22:af:42:52:e5:7d:3c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:20 2025 GMT Not After : Aug 11 16:11:20 2025 GMT Subject: CN=cce9c17f-465d-431b-bd8b-acf8c7cf83ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:88:7c:b5:7f:a8:c5:22:de:34:ab:0a:69: fd:7f:ba:4e:b4:a3:d4:df:32:ac:34:59:85:71:cd: 67:a4:78:8f:29:f7:84:90:55:1a:c8:6e:68:86:d2: 37:64:9d:b5:f9:91:44:4b:03:76:b8:26:33:63:f0: 68:c8:0c:59:03:bd:f3:a3:d8:e1:82:7d:f4:10:6e: f4:4c:4b:48:1f:bf:c8:20:f9:ed:da:0a:8d:21:f6: 00:bb:51:74:da:ea:6c:cf:1a:ed:bd:02:80:dc:90: d3:69:a1:60:d9:bb:f0:7d:87:d8:50:29:03:08:db: 17:74:1f:56:9a:bf:43:a7:35:c9:1a:66:d4:f1:19: 90:04:e6:b8:0d:54:39:5b:19:dc:cc:7b:06:ca:1a: 3d:19:16:5d:ea:25:78:23:44:c5:cf:cc:cf:cb:32: 03:90:6f:e7:ec:09:2d:6c:b1:02:41:7d:8b:40:b6: aa:31:bb:2c:79:49:5c:0d:1e:f3:ff:75:c1:9c:41: fd:55:dc:fa:24:bf:6f:ec:7d:cf:87:0d:f4:45:2c: 88:96:e3:b2:e2:7d:bf:45:43:5b:83:e4:e5:32:28: 7d:2d:c0:75:15:d2:61:8f:4f:f9:70:86:bc:d8:59: f1:1d:cd:80:7e:c3:58:64:c5:8f:d2:87:18:ae:15: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4C:20:E4:B2:EC:C2:97:B7:4E:5A:6F:5F:3D:A7:59:D7:12:83:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:13:6a:76:09:d9:2c:7f:eb:00:fa:bb:cd:c6:dc:10:da:0a: 21:1e:75:74:62:b7:c4:5e:51:37:d4:67:14:9b:f7:cc:72:d9: 47:8e:e2:3c:29:cd:63:3a:32:0c:a7:85:2b:d9:14:7a:7b:f5: ab:cd:01:a9:82:98:d1:e5:65:98:c0:12:fb:24:75:a6:e2:45: d6:f1:1f:95:a4:d7:2e:5f:d8:b9:52:4e:5e:9b:de:2f:20:60: f3:90:1b:3f:5d:f2:f4:cf:a1:0a:d4:56:0f:9d:22:ab:fc:13: f9:80:68:de:07:fe:c7:f3:d5:58:d1:ab:c4:6a:d9:62:74:de: 5f:58:c0:ff:18:b3:47:58:30:0d:e8:d2:7f:96:ea:f4:11:d6: b8:c3:81:29:62:53:20:51:43:5d:26:db:de:30:bf:6a:2e:d2: 55:08:0a:66:76:ac:b2:c1:b2:52:f9:a0:55:85:ee:bd:59:f9: f0:40:f9:8c:57:86:05:de:5c:ec:5e:76:f6:4c:fa:6c:ee:e8: ac:34:6b:45:d5:56:72:62:7a:5b:dd:63:2d:fb:12:b3:57:65: f0:ce:e9:4a:a7:ad:db:1a:1d:a4:b9:e1:d9:f4:92:a8:20:c9: 34:79:e1:b0:a2:e2:ab:ce:23:bb:b4:e0:3f:10:58:9c:13:22: de:7f:ed:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWLHcIq9CUuV9PHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTEyMFoXDTI1MDgxMTE2MTEyMFowLzEtMCsGA1UEAxMk Y2NlOWMxN2YtNDY1ZC00MzFiLWJkOGItYWNmOGM3Y2Y4M2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeSIfLV/qMUi3jSrCmn9f7pOtKPU3zKsNFmF cc1npHiPKfeEkFUayG5ohtI3ZJ21+ZFESwN2uCYzY/BoyAxZA73zo9jhgn30EG70 TEtIH7/IIPnt2gqNIfYAu1F02upszxrtvQKA3JDTaaFg2bvwfYfYUCkDCNsXdB9W mr9DpzXJGmbU8RmQBOa4DVQ5WxnczHsGyho9GRZd6iV4I0TFz8zPyzIDkG/n7Akt bLECQX2LQLaqMbsseUlcDR7z/3XBnEH9Vdz6JL9v7H3Phw30RSyIluOy4n2/RUNb g+TlMih9LcB1FdJhj0/5cIa82FnxHc2AfsNYZMWP0ocYrhXSfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLFMIOSy7MKXt05ab189p1nXEoPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YxYjA1OTYtMjY3NC0z NDBiLTg0NGUtZDUwOGEzNGQ1OTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADITanYJ2Sx/6wD6u83G3BDaCiEedXRit8ReUTfUZxSb98xy2UeO 4jwpzWM6MgynhSvZFHp79avNAamCmNHlZZjAEvskdabiRdbxH5Wk1y5f2LlSTl6b 3i8gYPOQGz9d8vTPoQrUVg+dIqv8E/mAaN4H/sfz1VjRq8Rq2WJ03l9YwP8Ys0dY MA3o0n+W6vQR1rjDgSliUyBRQ10m294wv2ou0lUICmZ2rLLBslL5oFWF7r1Z+fBA +YxXhgXeXOxedvZM+mzu6Kw0a0XVVnJielvdYy37ErNXZfDO6UqnrdsaHaS54dn0 kqggyTR54bCi4qvOI7u04D8QWJwTIt5/7bM= -----END CERTIFICATE-----Generated at Tue Jul 1 01:00:59 2025 by rpki-client