$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa File: 61470e17-1989-38af-9f67-dd9fde729d0e.roa (raw, json) Hash identifier: 5M/2GZ3wUjcwxX04U5+rND5fubtkBoH8h4TV6GlE4Ms= Subject key identifier: 88:87:67:D6:27:30:C0:48:91:A1:C1:79:23:67:D2:CA:36:E5:CC:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758AD92F4F9199E5FC3F200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa Signing time: Tue 13 May 2025 16:11:18 +0000 ROA not before: Tue 13 May 2025 16:11:18 +0000 ROA not after: Mon 11 Aug 2025 16:11:18 +0000 asID: 397199 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:ad:92:f4:f9:19:9e:5f:c3:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:18 2025 GMT Not After : Aug 11 16:11:18 2025 GMT Subject: CN=8d0a378e-f36a-4c22-8249-a4eff608c28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:5e:4e:a4:5b:85:2d:f0:ee:ca:b0:19:05: 2e:1b:77:0b:95:9d:83:08:58:f3:b6:3a:19:73:b7: 50:83:71:6e:55:19:e6:1b:2f:0f:7a:c4:7c:18:ec: 63:d2:1b:82:0b:6b:c4:63:85:2d:86:14:56:d2:51: ac:6a:bd:61:66:ce:fc:e4:d1:f6:09:3b:86:e4:01: 0e:6d:1d:a3:66:4a:52:79:24:19:0b:1e:c6:c3:d4: 2c:a8:d8:d8:08:6c:74:51:f3:ba:90:dd:95:46:75: 9c:d2:ad:e7:e5:03:f2:c3:c3:5c:a9:61:0e:d3:4d: 70:08:b1:cd:c1:62:bf:ed:fe:c4:28:fb:ed:39:68: a0:ca:da:74:db:00:4d:10:62:56:d3:88:fd:63:78: 0c:d5:03:c6:96:fb:d5:9d:40:e7:96:61:c9:8f:07: bc:01:51:b8:99:98:d4:c7:16:1b:c1:18:79:5d:9a: 1e:c4:f8:b0:44:df:16:60:e3:aa:01:91:f5:ce:3a: c0:72:54:43:0a:8b:01:61:0e:46:a8:4e:1d:5f:33: cc:1b:e5:44:fa:0f:95:9c:0e:04:15:2b:5c:e7:89: 6a:05:f2:26:a3:c3:15:83:4d:14:94:c4:d4:25:f2: c0:09:d1:14:93:00:75:2c:9c:d9:a4:dc:3e:6a:ec: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:87:67:D6:27:30:C0:48:91:A1:C1:79:23:67:D2:CA:36:E5:CC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/61470e17-1989-38af-9f67-dd9fde729d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a6:c4:06:73:4a:3d:24:01:db:4d:cf:67:19:d1:ef:8b:0a: 32:9e:bf:ea:4f:aa:b5:87:20:52:63:3b:02:b5:7f:c8:0c:05: 57:cd:24:be:3a:dc:4b:ef:5c:15:cb:62:98:ef:96:5e:b0:53: 39:fa:0a:c8:28:11:0f:cf:92:ab:24:85:6d:36:30:e2:41:f4: cf:08:e9:48:e5:31:9b:8c:d7:1f:cb:b2:01:c7:9c:35:3e:76: 0d:0c:32:9f:72:41:2a:7d:60:24:8e:14:a3:12:80:ea:d2:82: a6:c0:cb:1f:6f:54:3b:bc:9f:1c:aa:5d:03:25:e4:ca:6e:93: 7b:5e:8e:ca:a1:7e:6f:e8:9f:7f:61:f2:b2:1d:7b:96:c9:54: a5:a9:6e:6b:d5:9d:2d:6c:b9:fe:4e:a2:68:8f:9c:99:b6:2c: 52:09:a2:17:a8:bd:86:e9:da:23:69:2d:96:97:bc:52:93:4e: c1:c3:d8:0e:d7:ae:fe:69:42:54:fb:87:b5:5e:96:fe:19:3b: d1:29:05:f1:d0:1f:f6:10:e5:36:dd:2f:52:fc:38:ac:56:1d: 7d:42:5d:14:b0:e2:dd:7a:57:ef:16:78:91:6e:a5:e7:c9:81: c0:72:ce:40:fa:2f:f6:1f:a2:d5:13:fd:a4:11:c2:6c:cc:b3: 06:ae:66:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWK2S9PkZnl/D8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExOFoXDTI1MDgxMTE2MTExOFowLzEtMCsGA1UEAxMk OGQwYTM3OGUtZjM2YS00YzIyLTgyNDktYTRlZmY2MDhjMjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldleTqRbhS3w7sqwGQUuG3cLlZ2DCFjztjoZ c7dQg3FuVRnmGy8PesR8GOxj0huCC2vEY4UthhRW0lGsar1hZs785NH2CTuG5AEO bR2jZkpSeSQZCx7Gw9QsqNjYCGx0UfO6kN2VRnWc0q3n5QPyw8NcqWEO001wCLHN wWK/7f7EKPvtOWigytp02wBNEGJW04j9Y3gM1QPGlvvVnUDnlmHJjwe8AVG4mZjU xxYbwRh5XZoexPiwRN8WYOOqAZH1zjrAclRDCosBYQ5GqE4dXzPMG+VE+g+VnA4E FStc54lqBfImo8MVg00UlMTUJfLACdEUkwB1LJzZpNw+auy1NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIiHZ9YnMMBIkaHBeSNn0so25cwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjE0NzBlMTctMTk4OS0z OGFmLTlmNjctZGQ5ZmRlNzI5ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI6mxAZzSj0kAdtNz2cZ0e+LCjKev+pPqrWHIFJjOwK1f8gMBVfN JL463EvvXBXLYpjvll6wUzn6CsgoEQ/PkqskhW02MOJB9M8I6UjlMZuM1x/LsgHH nDU+dg0MMp9yQSp9YCSOFKMSgOrSgqbAyx9vVDu8nxyqXQMl5Mpuk3tejsqhfm/o n39h8rIde5bJVKWpbmvVnS1suf5OomiPnJm2LFIJoheovYbp2iNpLZaXvFKTTsHD 2A7Xrv5pQlT7h7Velv4ZO9EpBfHQH/YQ5TbdL1L8OKxWHX1CXRSw4t16V+8WeJFu pefJgcByzkD6L/YfotUT/aQRwmzMswauZv8= -----END CERTIFICATE-----Generated at Mon Jun 30 17:57:00 2025 by rpki-client