$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa8e3e-6a52-3719-a06a-9d3bc6657fe3.roa File: cfaa8e3e-6a52-3719-a06a-9d3bc6657fe3.roa (raw, json) Hash identifier: QmgV7zUqWAdMvas+UnUTxdTz4uPEKn6EeQqRBFo1h5E= Subject key identifier: E3:EF:BB:FF:1B:07:A7:2D:D8:79:2A:3A:C6:B0:28:F2:A0:05:46:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758A415C77AB0676A613800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa8e3e-6a52-3719-a06a-9d3bc6657fe3.roa Signing time: Tue 13 May 2025 16:11:13 +0000 ROA not before: Tue 13 May 2025 16:11:13 +0000 ROA not after: Mon 11 Aug 2025 16:11:13 +0000 asID: 396591 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:a4:15:c7:7a:b0:67:6a:61:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:13 2025 GMT Not After : Aug 11 16:11:13 2025 GMT Subject: CN=4eb626aa-f069-4756-9f7c-937ae4b4483a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a1:76:9b:50:b6:6d:ef:01:9c:1b:fc:78:6c: e1:e7:ac:64:82:37:8d:69:df:2d:db:78:39:12:ab: 34:72:f2:2c:a8:52:8a:cd:bb:46:df:b3:ec:17:5c: 55:ef:d5:1a:12:84:09:5e:b9:19:78:a3:30:db:c3: 96:56:be:f9:44:a6:cc:6b:d2:63:a1:1b:ea:df:a0: a6:b9:19:fb:70:de:5e:3e:15:2a:d7:b5:b9:0b:43: 3f:a0:a1:ba:f2:f7:0c:37:f9:84:a2:8a:84:a2:a5: 76:29:55:78:47:e7:3b:af:93:21:4b:9b:59:fa:2b: 60:30:57:53:7f:8f:21:ab:9f:d9:fc:c1:66:2e:f7: 5f:df:80:c5:aa:e3:17:a1:4c:13:3b:cf:8f:cb:0d: 4e:2d:32:a1:e8:00:3d:44:69:7c:e0:3d:5c:d8:1f: e8:f0:6f:99:fc:18:64:71:9e:1e:4c:b0:b0:34:b4: b8:9f:cd:9f:67:7f:c4:a1:3f:d9:3a:f6:97:57:29: 7b:91:d1:f0:1a:be:3e:29:e4:24:6b:45:75:7e:0b: ad:fb:3a:cb:46:88:63:eb:21:bd:0b:bc:cc:93:88: 60:18:48:65:2f:4e:6c:6b:f9:45:20:6d:28:33:8b: 45:16:4d:38:99:7a:81:b2:df:59:e5:b1:44:92:19: 35:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EF:BB:FF:1B:07:A7:2D:D8:79:2A:3A:C6:B0:28:F2:A0:05:46:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa8e3e-6a52-3719-a06a-9d3bc6657fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:ae:32:35:a5:60:f1:4b:e4:53:00:f7:4f:e3:7c:bd:c6:6f: fa:91:5b:2f:63:88:9e:fa:d7:4b:1c:19:74:f2:d7:f3:5d:b7: 1c:c8:c0:d8:be:e6:76:ac:40:57:ab:db:2a:75:0f:97:6d:e0: 23:98:fd:c7:fc:1e:d0:98:aa:6c:9f:5a:8b:ff:b9:34:2b:7b: fe:be:cd:2d:36:40:b0:da:1d:18:5e:99:58:78:6f:fc:c0:96: 69:70:d9:b4:52:75:22:b4:12:69:2f:a9:2b:92:ea:d3:4f:a6: 21:8e:70:00:d2:b3:4c:e9:87:49:50:54:70:67:5e:3d:13:fc: 7c:aa:21:31:af:16:73:ce:38:1d:86:26:3b:3c:13:a2:2c:10: 54:2d:b0:3c:ca:4b:d6:8a:ca:48:83:80:72:2b:01:f4:6f:d4: fa:f2:09:be:36:1b:bc:9a:e2:a1:c3:3a:b5:84:27:fe:69:34: 67:29:2b:c2:46:20:28:a4:94:5f:35:ef:88:6c:3a:90:41:75: 3c:b6:d7:04:a1:d8:58:ef:1f:10:03:60:13:8c:68:00:a9:51: 9b:5f:e9:e3:03:d7:30:9b:3e:c7:01:7d:f8:7e:39:96:63:30: 14:26:a8:75:37:30:51:2f:35:bd:62:8d:d1:cf:30:3c:4a:cb: c7:9b:32:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWKQVx3qwZ2phOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExM1oXDTI1MDgxMTE2MTExM1owLzEtMCsGA1UEAxMk NGViNjI2YWEtZjA2OS00NzU2LTlmN2MtOTM3YWU0YjQ0ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqF2m1C2be8BnBv8eGzh56xkgjeNad8t23g5 Eqs0cvIsqFKKzbtG37PsF1xV79UaEoQJXrkZeKMw28OWVr75RKbMa9JjoRvq36Cm uRn7cN5ePhUq17W5C0M/oKG68vcMN/mEooqEoqV2KVV4R+c7r5MhS5tZ+itgMFdT f48hq5/Z/MFmLvdf34DFquMXoUwTO8+Pyw1OLTKh6AA9RGl84D1c2B/o8G+Z/Bhk cZ4eTLCwNLS4n82fZ3/EoT/ZOvaXVyl7kdHwGr4+KeQka0V1fgut+zrLRohj6yG9 C7zMk4hgGEhlL05sa/lFIG0oM4tFFk04mXqBst9Z5bFEkhk1jwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOPvu/8bB6ct2HkqOsawKPKgBUalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZhYThlM2UtNmE1Mi0z NzE5LWEwNmEtOWQzYmM2NjU3ZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJquMjWlYPFL5FMA90/jfL3Gb/qRWy9jiJ7610scGXTy1/NdtxzI wNi+5nasQFer2yp1D5dt4COY/cf8HtCYqmyfWov/uTQre/6+zS02QLDaHRhemVh4 b/zAlmlw2bRSdSK0EmkvqSuS6tNPpiGOcADSs0zph0lQVHBnXj0T/HyqITGvFnPO OB2GJjs8E6IsEFQtsDzKS9aKykiDgHIrAfRv1PryCb42G7ya4qHDOrWEJ/5pNGcp K8JGICiklF8174hsOpBBdTy21wSh2FjvHxADYBOMaACpUZtf6eMD1zCbPscBffh+ OZZjMBQmqHU3MFEvNb1ijdHPMDxKy8ebMpk= -----END CERTIFICATE-----Generated at Mon Jun 30 15:51:55 2025 by rpki-client