$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ffc8176-3310-3cbd-9009-a1ca200db73b.roa File: 9ffc8176-3310-3cbd-9009-a1ca200db73b.roa (raw, json) Hash identifier: 9ZAzgQXDJI2jNBwHAJP/TQryD1R+0+ELT1NgQ2/117s= Subject key identifier: 4B:08:E0:89:ED:8C:54:B9:1E:B1:A7:A2:D9:B0:92:90:00:F2:4C:F9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849DC7DAEFD5959644C4DD96160 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ffc8176-3310-3cbd-9009-a1ca200db73b.roa Signing time: Thu 15 May 2025 12:24:54 +0000 ROA not before: Thu 15 May 2025 12:24:54 +0000 ROA not after: Wed 13 Aug 2025 12:24:54 +0000 asID: 22547 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:7d:ae:fd:59:59:64:4c:4d:d9:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 15 12:24:54 2025 GMT Not After : Aug 13 12:24:54 2025 GMT Subject: CN=8e28e46e-8493-4067-a758-38cbd20a72f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:c2:71:b9:92:d5:1d:1a:ae:5e:74:6b:3e: 17:46:93:93:37:04:1c:f5:04:77:15:5b:ad:53:f2: 21:c5:8f:1c:21:7c:fc:15:dd:3a:63:8a:64:8c:d0: 39:73:71:43:4c:5f:11:ea:f1:8c:fa:97:c9:d5:7e: 3e:4d:99:04:cd:fe:ce:30:50:a6:41:38:8f:f5:34: 8f:03:da:eb:c3:08:32:b4:2c:69:e3:bf:7b:d8:66: 66:28:e0:84:6c:e4:a9:4b:76:29:e5:87:4d:2d:c8: 89:74:3b:44:d7:4e:96:f1:75:40:86:a1:aa:6a:8b: a4:c7:8b:a7:9a:bd:63:cd:c6:50:1c:ab:72:2c:a4: cb:11:71:78:7f:e3:62:3a:1c:4e:16:64:42:8b:a9: 94:a9:39:0d:5c:8c:95:55:b7:a2:46:59:b0:e2:bc: 63:07:42:1d:4e:17:69:b4:e0:92:13:83:6e:36:ec: d3:30:d6:79:c6:0b:99:aa:46:8b:eb:b7:e3:8b:af: 6b:a4:e1:41:c4:29:fa:33:fc:9e:4f:d9:a6:d4:14: 2f:6f:18:41:f3:83:ef:8d:0f:8e:fc:dd:40:bc:44: 57:f3:72:45:f8:56:63:65:cb:44:74:58:cd:92:e8: e4:1c:05:12:d8:d0:d7:60:12:49:20:74:db:53:0e: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:08:E0:89:ED:8C:54:B9:1E:B1:A7:A2:D9:B0:92:90:00:F2:4C:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ffc8176-3310-3cbd-9009-a1ca200db73b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:84:61:a0:f1:bb:6d:8e:dc:43:32:59:c3:58:e7:72:a2:50: bb:e4:86:72:d4:8f:4c:15:ee:63:c6:5e:71:8f:f7:41:04:22: b9:3e:db:d3:03:29:64:fc:cd:8f:48:3d:59:a5:5c:53:4a:5a: cb:3c:9a:86:3f:19:13:75:ee:14:00:b0:6c:47:f2:ab:fb:bc: 28:5f:18:b7:31:08:d5:65:14:ee:bc:30:cf:04:0a:f6:7e:0b: 5c:84:f1:d5:55:1b:96:59:4c:b1:cb:a0:e1:01:b5:20:95:a3: 10:55:06:0b:e8:cc:33:fc:e7:70:96:24:24:8f:75:ab:8d:46: 59:74:58:91:34:fb:13:d2:1b:a4:0d:b4:b1:e9:b2:08:64:33: db:72:4e:cb:d0:c4:fc:d5:18:e1:96:6b:f3:2f:8d:2b:c4:5f: ea:64:56:e1:10:7a:c3:1b:60:90:53:79:99:c9:7e:38:9a:8e: dc:ee:ad:98:ce:30:48:36:22:1f:95:dc:5d:4a:f2:23:63:14: e4:7c:2f:d3:20:d7:10:3c:d8:33:5c:68:49:91:b5:8f:fa:84: 28:8b:35:57:9b:46:b7:0a:21:f5:d4:43:b0:4b:7a:54:b2:43: c2:dd:89:89:07:db:5a:bd:a6:bd:9e:ed:d2:66:1e:e8:c5:ed: c0:8c:06:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncfa79WVlkTE3ZYWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxNTEyMjQ1NFoXDTI1MDgxMzEyMjQ1NFowLzEtMCsGA1UEAxMk OGUyOGU0NmUtODQ5My00MDY3LWE3NTgtMzhjYmQyMGE3MmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBDCcbmS1R0arl50az4XRpOTNwQc9QR3FVut U/IhxY8cIXz8Fd06Y4pkjNA5c3FDTF8R6vGM+pfJ1X4+TZkEzf7OMFCmQTiP9TSP A9rrwwgytCxp47972GZmKOCEbOSpS3Yp5YdNLciJdDtE106W8XVAhqGqaoukx4un mr1jzcZQHKtyLKTLEXF4f+NiOhxOFmRCi6mUqTkNXIyVVbeiRlmw4rxjB0IdThdp tOCSE4NuNuzTMNZ5xguZqkaL67fji69rpOFBxCn6M/yeT9mm1BQvbxhB84PvjQ+O /N1AvERX83JF+FZjZctEdFjNkujkHAUS2NDXYBJJIHTbUw6stQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEsI4IntjFS5HrGnotmwkpAA8kz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWZmYzgxNzYtMzMxMC0z Y2JkLTkwMDktYTFjYTIwMGRiNzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOEYaDxu22O3EMyWcNY53KiULvkhnLUj0wV7mPGXnGP90EEIrk+ 29MDKWT8zY9IPVmlXFNKWss8moY/GRN17hQAsGxH8qv7vChfGLcxCNVlFO68MM8E CvZ+C1yE8dVVG5ZZTLHLoOEBtSCVoxBVBgvozDP853CWJCSPdauNRll0WJE0+xPS G6QNtLHpsghkM9tyTsvQxPzVGOGWa/MvjSvEX+pkVuEQesMbYJBTeZnJfjiajtzu rZjOMEg2Ih+V3F1K8iNjFOR8L9Mg1xA82DNcaEmRtY/6hCiLNVebRrcKIfXUQ7BL elSyQ8LdiYkH21q9pr2e7dJmHujF7cCMBnk= -----END CERTIFICATE-----Generated at Tue Jul 1 03:49:01 2025 by rpki-client