$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd799fd7-109b-32eb-b4e2-45bea5e59129.roa File: dd799fd7-109b-32eb-b4e2-45bea5e59129.roa (raw, json) Hash identifier: mN4ptE+kUzrQRv4df5zJwTvhsq9OrD8Oc0tFhPSZU1Y= Subject key identifier: 32:8E:FA:4D:8A:67:87:39:50:49:86:67:CF:FC:78:74:7B:CE:D8:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D7589CE217AD597FF91A84A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd799fd7-109b-32eb-b4e2-45bea5e59129.roa Signing time: Tue 13 May 2025 16:11:10 +0000 ROA not before: Tue 13 May 2025 16:11:10 +0000 ROA not after: Mon 11 Aug 2025 16:11:10 +0000 asID: 396581 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:9c:e2:17:ad:59:7f:f9:1a:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:10 2025 GMT Not After : Aug 11 16:11:10 2025 GMT Subject: CN=44542e2e-b3da-4517-83e9-ec6b80c4cdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:16:3a:ab:79:fc:c0:5a:fd:f4:88:4d:c3:22: bd:23:3a:e0:ce:7e:29:39:81:17:b4:73:61:a6:8b: da:c1:e1:80:77:f5:6c:55:55:05:24:0f:87:7b:13: 7f:14:88:8b:4e:e3:ae:35:d0:aa:d1:be:b5:e0:7f: 74:f9:75:69:d3:de:8b:49:c7:5f:ec:f4:3f:e2:68: bd:69:8c:0f:7f:17:1b:c8:aa:73:0c:84:53:ef:ee: b4:45:3e:59:d2:8e:e1:76:3e:1c:39:92:34:30:05: 55:44:75:70:64:3c:8b:c9:01:1c:6b:12:02:55:31: 11:34:88:ef:83:4a:0e:c5:aa:d7:d7:fd:29:72:61: b5:3f:d3:fa:ed:6d:2e:1d:b3:d9:57:eb:41:05:82: ae:83:5e:91:64:2d:24:8d:27:cc:50:9f:8b:bd:d0: 4e:9f:97:11:a5:90:7f:42:35:3d:41:39:a4:f9:5c: 70:85:3c:27:21:b3:c0:a6:c2:6d:e9:45:fc:a0:f4: 93:0c:c3:08:b7:54:63:66:c3:39:da:9c:2f:9b:0d: 93:8c:ab:d6:9d:26:ef:2a:31:4f:53:7a:1d:9c:4d: 56:f5:1c:62:5e:61:d7:67:cb:2e:93:fd:22:e4:c1: 5e:61:46:c1:ca:b1:da:99:7a:cf:f6:e2:79:6e:18: 5c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8E:FA:4D:8A:67:87:39:50:49:86:67:CF:FC:78:74:7B:CE:D8:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd799fd7-109b-32eb-b4e2-45bea5e59129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:5b:27:1b:8f:ac:3a:ed:00:c5:09:20:e3:48:55:a9:dc:32: f1:39:16:c1:78:6f:12:a3:5f:cd:c5:62:e2:91:fd:59:c1:f6: ca:79:dc:57:f2:5c:2c:94:89:2d:82:3e:e3:0e:55:77:0f:9a: d3:38:1e:32:46:74:34:77:eb:8f:77:4f:ba:34:b2:cb:40:fa: 2f:44:8f:9a:ef:77:42:a6:e5:06:1c:6f:15:e7:2a:d8:a8:12: 67:a0:61:df:e8:58:a7:23:b3:6a:70:ba:26:ae:18:d1:d7:94: 07:16:2f:e3:ba:fe:e4:6a:83:18:5d:ef:5b:16:de:82:6a:4e: b7:6e:39:60:db:0c:72:e9:3e:d0:27:49:f7:eb:b2:a1:7a:71: 00:90:6c:b7:6a:44:ff:da:1c:5a:92:92:c1:ff:33:69:e6:9e: 1d:d7:92:42:15:7e:25:e6:47:8b:f4:7b:54:c6:43:4c:84:5a: fa:d2:99:63:ac:02:b1:48:69:32:ce:da:95:8d:cb:f5:46:97: 7d:87:d2:17:5e:6a:7c:9b:3b:29:19:89:7f:dc:a6:03:08:1c: 6c:bf:3b:3e:57:73:71:06:67:f9:b2:62:49:04:2d:dc:71:8f: 02:bf:8e:85:d3:1e:ac:45:2a:fb:81:d3:c2:1a:94:11:19:3e: 43:4c:14:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWJziF61Zf/kahKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExMFoXDTI1MDgxMTE2MTExMFowLzEtMCsGA1UEAxMk NDQ1NDJlMmUtYjNkYS00NTE3LTgzZTktZWM2YjgwYzRjZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBY6q3n8wFr99IhNwyK9Izrgzn4pOYEXtHNh povaweGAd/VsVVUFJA+HexN/FIiLTuOuNdCq0b614H90+XVp096LScdf7PQ/4mi9 aYwPfxcbyKpzDIRT7+60RT5Z0o7hdj4cOZI0MAVVRHVwZDyLyQEcaxICVTERNIjv g0oOxarX1/0pcmG1P9P67W0uHbPZV+tBBYKug16RZC0kjSfMUJ+LvdBOn5cRpZB/ QjU9QTmk+VxwhTwnIbPApsJt6UX8oPSTDMMIt1RjZsM52pwvmw2TjKvWnSbvKjFP U3odnE1W9RxiXmHXZ8suk/0i5MFeYUbByrHamXrP9uJ5bhhc8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDKO+k2KZ4c5UEmGZ8/8eHR7ztjIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGQ3OTlmZDctMTA5Yi0z MmViLWI0ZTItNDViZWE1ZTU5MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdbJxuPrDrtAMUJIONIVancMvE5FsF4bxKjX83FYuKR/VnB9sp5 3FfyXCyUiS2CPuMOVXcPmtM4HjJGdDR36493T7o0sstA+i9Ej5rvd0Km5QYcbxXn KtioEmegYd/oWKcjs2pwuiauGNHXlAcWL+O6/uRqgxhd71sW3oJqTrduOWDbDHLp PtAnSffrsqF6cQCQbLdqRP/aHFqSksH/M2nmnh3XkkIVfiXmR4v0e1TGQ0yEWvrS mWOsArFIaTLO2pWNy/VGl32H0hdeanybOykZiX/cpgMIHGy/Oz5Xc3EGZ/myYkkE LdxxjwK/joXTHqxFKvuB08IalBEZPkNMFAU= -----END CERTIFICATE-----Generated at Tue Jul 1 03:44:55 2025 by rpki-client