$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6aee883-29fa-33b8-8472-a4fd3ed80820.roa File: c6aee883-29fa-33b8-8472-a4fd3ed80820.roa (raw, json) Hash identifier: JY8KVHyRq26/1stzdewv21E12Q0zTVvf4e/gLiF/prA= Subject key identifier: 8C:9F:0A:09:C5:9A:E4:CA:1E:11:A8:C4:7A:BE:54:44:2F:8A:D7:F1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849DC7DAAF6D0313C652D4A2828 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6aee883-29fa-33b8-8472-a4fd3ed80820.roa Signing time: Thu 15 May 2025 12:24:52 +0000 ROA not before: Thu 15 May 2025 12:24:52 +0000 ROA not after: Wed 13 Aug 2025 12:24:52 +0000 asID: 20172 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:7d:aa:f6:d0:31:3c:65:2d:4a:28:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 15 12:24:52 2025 GMT Not After : Aug 13 12:24:52 2025 GMT Subject: CN=15e9d46b-5cc5-4f42-854e-d2aa4e382dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:d0:6a:d1:bb:d8:8a:ad:ca:0b:f5:ac:1f: 0e:3c:64:72:b4:96:18:2f:c8:bb:af:21:3e:14:4d: 94:8d:af:fd:63:16:c2:f3:9f:4e:a9:a7:ee:df:86: f2:27:ad:fb:e6:55:bb:3d:2b:cc:f8:fe:cb:b2:03: 56:c9:25:d7:37:11:1b:9e:5d:00:d1:86:ac:11:3d: 6d:20:d2:33:74:0b:6e:5d:09:7c:af:8b:24:7b:ed: 7c:ac:db:a8:d4:35:61:73:1e:79:13:e2:58:66:0d: b9:8b:9d:d8:dc:fc:2c:95:e9:c5:57:dc:7b:3c:69: 46:fc:3f:89:81:42:ff:c5:6f:48:bb:71:3a:30:1b: 12:80:01:a4:b3:34:24:29:4d:8b:ac:15:b1:0e:7c: 5c:d5:4b:8a:92:6f:44:8e:a6:f2:ee:8f:ad:ad:69: 2a:cf:95:de:ec:0c:3f:b8:75:c6:67:d6:72:1b:24: a2:13:dd:60:b0:82:37:ea:0e:34:cb:16:eb:43:45: a3:fd:95:52:06:df:a2:b4:9c:01:91:8f:8c:e6:e2: 82:e7:d6:21:8b:f0:d7:d1:28:24:2c:3a:d7:d2:5f: 0c:b4:66:e8:24:f1:94:56:b8:9c:66:f6:8a:12:63: 2e:c0:9b:a4:eb:2d:54:3f:d0:09:bf:90:89:46:44: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9F:0A:09:C5:9A:E4:CA:1E:11:A8:C4:7A:BE:54:44:2F:8A:D7:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c6aee883-29fa-33b8-8472-a4fd3ed80820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e6:02:9c:b0:21:18:c7:ac:19:14:14:c5:ad:77:88:dc:eb: 68:01:3e:fa:3d:f6:f6:7f:58:1a:92:e0:6a:3e:76:aa:6d:a1: 8f:dc:87:cf:ce:25:70:ac:20:8d:37:28:53:b5:39:4d:fc:61: 04:cf:7b:4c:f5:c6:a8:8a:10:1f:b5:31:43:96:c5:df:3c:85: 20:48:1a:4c:b8:1d:1e:44:a8:e1:6c:e6:95:96:7e:0d:30:76: 63:db:3d:ce:56:72:04:3e:b0:8c:bd:c6:17:14:c6:5b:da:57: 30:9a:fa:18:58:0b:c6:24:6a:3f:02:60:60:93:71:d0:0d:06: d3:eb:bb:73:4d:91:f2:3c:46:93:1a:7a:ab:82:89:af:9f:1e: d2:d0:fe:b1:1c:2a:89:ce:12:19:3a:c7:98:c8:ae:78:1a:71: e7:ca:7c:17:8e:77:9f:b1:c7:db:83:49:64:85:ac:4c:e1:c1: 95:ec:e2:ae:f9:a3:6c:bd:af:5e:46:03:9c:6c:ca:88:7b:e0: 54:46:71:b6:b7:cb:70:2c:f6:77:de:f3:11:89:61:94:e8:14: 12:ba:8f:fc:75:70:2d:2f:2d:37:fa:16:42:de:6f:ad:5b:18: 36:25:e1:72:82:01:41:96:7d:54:8a:eb:e6:f7:49:4d:e8:e4: b3:50:8c:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncfar20DE8ZS1KKCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxNTEyMjQ1MloXDTI1MDgxMzEyMjQ1MlowLzEtMCsGA1UEAxMk MTVlOWQ0NmItNWNjNS00ZjQyLTg1NGUtZDJhYTRlMzgyZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8fQatG72Iqtygv1rB8OPGRytJYYL8i7ryE+ FE2Uja/9YxbC859Oqafu34byJ6375lW7PSvM+P7LsgNWySXXNxEbnl0A0YasET1t INIzdAtuXQl8r4ske+18rNuo1DVhcx55E+JYZg25i53Y3PwslenFV9x7PGlG/D+J gUL/xW9Iu3E6MBsSgAGkszQkKU2LrBWxDnxc1UuKkm9Ejqby7o+trWkqz5Xe7Aw/ uHXGZ9ZyGySiE91gsII36g40yxbrQ0Wj/ZVSBt+itJwBkY+M5uKC59Yhi/DX0Sgk LDrX0l8MtGboJPGUVricZvaKEmMuwJuk6y1UP9AJv5CJRkSwbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIyfCgnFmuTKHhGoxHq+VEQvitfxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzZhZWU4ODMtMjlmYS0z M2I4LTg0NzItYTRmZDNlZDgwODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ3mApywIRjHrBkUFMWtd4jc62gBPvo99vZ/WBqS4Go+dqptoY/c h8/OJXCsII03KFO1OU38YQTPe0z1xqiKEB+1MUOWxd88hSBIGky4HR5EqOFs5pWW fg0wdmPbPc5WcgQ+sIy9xhcUxlvaVzCa+hhYC8Ykaj8CYGCTcdANBtPru3NNkfI8 RpMaequCia+fHtLQ/rEcKonOEhk6x5jIrngacefKfBeOd5+xx9uDSWSFrEzhwZXs 4q75o2y9r15GA5xsyoh74FRGcba3y3As9nfe8xGJYZToFBK6j/x1cC0vLTf6FkLe b61bGDYl4XKCAUGWfVSK6+b3SU3o5LNQjDk= -----END CERTIFICATE-----Generated at Tue Jul 1 00:50:13 2025 by rpki-client