$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9c2b3f-5d55-36ce-9bd5-5c9d227bfdd6.roa File: 5f9c2b3f-5d55-36ce-9bd5-5c9d227bfdd6.roa (raw, json) Hash identifier: XC4AdVY6XUM9feD5qlC5h+dbLBSF/2AK5x/R3QHsudY= Subject key identifier: FB:8C:B0:08:92:AC:E6:6A:6F:F2:D9:AB:D5:D9:F5:DE:54:8B:07:17 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A17263F4FE0AFB28CB1BEAC40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9c2b3f-5d55-36ce-9bd5-5c9d227bfdd6.roa Signing time: Thu 05 Jun 2025 12:41:25 +0000 ROA not before: Thu 05 Jun 2025 12:41:25 +0000 ROA not after: Wed 03 Sep 2025 12:41:25 +0000 asID: 22547 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:26:3f:4f:e0:af:b2:8c:b1:be:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 5 12:41:25 2025 GMT Not After : Sep 3 12:41:25 2025 GMT Subject: CN=ce161bfa-d9f4-4991-a5a3-6e81656c2e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:00:87:1a:39:51:3f:52:a0:23:db:d0:25:d5: fc:1d:ed:38:64:d0:ba:7a:76:6c:c1:b2:8e:dc:bc: 18:67:67:50:2e:1c:a4:f8:08:cf:56:8a:33:57:07: 15:33:5e:83:a6:c5:9f:25:4f:17:1b:af:b0:33:d2: 9e:0f:7d:6a:c2:0b:dc:f2:01:28:34:44:83:98:d0: f9:49:eb:21:d4:42:10:29:ec:a3:88:fa:51:8a:e3: 22:d8:a7:ca:74:a0:67:b7:66:e4:1f:4a:d6:c9:08: a4:b2:23:49:d0:9b:1f:6f:78:6a:7c:2e:4d:32:7b: d5:4d:6c:6c:30:46:04:2c:4a:a4:bd:aa:7b:29:11: 8f:f9:ed:f9:85:b0:8e:ef:d2:9b:b5:7a:f0:2f:a5: 8c:5e:b1:9c:35:6f:53:c3:be:5c:de:07:37:87:cb: 03:cf:99:dc:21:4c:31:b2:bf:1d:cc:7a:c4:dc:f7: 05:03:9e:d9:4a:04:6e:be:ec:71:2b:83:f8:9d:ad: c6:b5:1f:fc:46:8e:e6:43:ae:64:08:34:14:dc:9a: f5:63:a5:c9:d8:0f:a1:9f:c0:c2:43:dd:4e:57:78: ec:ad:81:4e:1d:5d:e4:01:d1:6e:b1:aa:30:0e:e0: c1:bd:ad:29:74:73:f7:6e:e4:4f:13:bb:d7:44:c1: 8f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8C:B0:08:92:AC:E6:6A:6F:F2:D9:AB:D5:D9:F5:DE:54:8B:07:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f9c2b3f-5d55-36ce-9bd5-5c9d227bfdd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:db:7f:a1:5a:bf:05:19:21:49:36:11:f5:01:c4:5c:05:a9: 31:ec:99:80:da:5c:a3:32:8f:6b:a3:e2:24:2c:69:b9:5e:b5: ac:a7:bf:ae:06:9d:78:fc:94:96:70:7f:15:ba:b7:07:6e:59: e0:5f:0f:96:dd:55:9f:f9:69:b2:a1:30:5e:5e:43:27:dd:f2: 26:59:c5:4c:c3:4f:6c:88:9a:2e:68:0c:1c:3a:27:d3:5d:ac: 49:53:37:6d:f0:6e:06:e9:82:b6:97:ae:42:ac:47:5f:48:c3: 93:68:fa:16:ca:7a:68:1b:b0:b6:9f:68:36:26:71:0f:75:c2: c6:75:e7:21:cf:ec:38:7f:6c:97:51:e7:f3:b2:66:3c:df:b0: 16:64:6f:d9:20:5b:cb:f1:d4:80:e6:43:1e:f4:4f:28:42:84: 7c:15:18:7a:59:17:c6:e8:f2:be:26:00:a0:83:4b:a1:fa:0b: 0e:57:7c:e5:04:dd:53:56:3b:34:57:82:66:c5:d2:0a:8f:c9: 26:00:f3:1b:d5:92:ca:15:9a:51:34:a6:87:00:07:a3:d1:4f: b0:02:70:20:c1:7e:39:e4:e7:8e:59:42:dd:5a:14:48:1b:c6: 4f:ed:f9:43:35:92:ee:37:08:72:8e:2f:3c:b0:5a:af:81:5a: 4c:a6:bf:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoXJj9P4K+yjLG+rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNTEyNDEyNVoXDTI1MDkwMzEyNDEyNVowLzEtMCsGA1UEAxMk Y2UxNjFiZmEtZDlmNC00OTkxLWE1YTMtNmU4MTY1NmMyZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgCHGjlRP1KgI9vQJdX8He04ZNC6enZswbKO 3LwYZ2dQLhyk+AjPVoozVwcVM16DpsWfJU8XG6+wM9KeD31qwgvc8gEoNESDmND5 Sesh1EIQKeyjiPpRiuMi2KfKdKBnt2bkH0rWyQiksiNJ0Jsfb3hqfC5NMnvVTWxs MEYELEqkvap7KRGP+e35hbCO79KbtXrwL6WMXrGcNW9Tw75c3gc3h8sDz5ncIUwx sr8dzHrE3PcFA57ZSgRuvuxxK4P4na3GtR/8Ro7mQ65kCDQU3Jr1Y6XJ2A+hn8DC Q91OV3jsrYFOHV3kAdFusaowDuDBva0pdHP3buRPE7vXRMGP9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPuMsAiSrOZqb/LZq9XZ9d5UiwcXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWY5YzJiM2YtNWQ1NS0z NmNlLTliZDUtNWM5ZDIyN2JmZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIXbf6FavwUZIUk2EfUBxFwFqTHsmYDaXKMyj2uj4iQsabletayn v64GnXj8lJZwfxW6twduWeBfD5bdVZ/5abKhMF5eQyfd8iZZxUzDT2yImi5oDBw6 J9NdrElTN23wbgbpgraXrkKsR19Iw5No+hbKemgbsLafaDYmcQ91wsZ15yHP7Dh/ bJdR5/OyZjzfsBZkb9kgW8vx1IDmQx70TyhChHwVGHpZF8bo8r4mAKCDS6H6Cw5X fOUE3VNWOzRXgmbF0gqPySYA8xvVksoVmlE0pocAB6PRT7ACcCDBfjnk545ZQt1a FEgbxk/t+UM1ku43CHKOLzywWq+BWkymv8A= -----END CERTIFICATE-----Generated at Mon Jun 30 19:35:48 2025 by rpki-client