$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa File: e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa (raw, json) Hash identifier: U5q8q6NWUA0WRwv3oiK7YLm+5qT7pBjQeTOwJbK4Gcg= Subject key identifier: EA:17:38:18:44:14:E3:CD:31:C1:43:F5:BA:12:59:40:B9:32:8B:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D7589A8DCDA46E5CFBDB9700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa Signing time: Tue 13 May 2025 16:11:09 +0000 ROA not before: Tue 13 May 2025 16:11:09 +0000 ROA not after: Mon 11 Aug 2025 16:11:09 +0000 asID: 397206 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:9a:8d:cd:a4:6e:5c:fb:db:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:09 2025 GMT Not After : Aug 11 16:11:09 2025 GMT Subject: CN=6b2e9959-56dc-409a-bd07-97f8717d9801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:cb:31:ad:df:39:f3:bd:93:03:b5:5e:cb: de:5f:73:fa:98:08:3c:bf:53:7f:5c:05:37:4e:7a: 93:69:8a:e5:56:ed:c7:e7:74:90:f9:eb:ed:4c:8e: 6d:95:2b:10:c9:d0:aa:8d:89:85:61:a0:67:11:87: 6c:64:89:11:6e:0f:eb:da:27:70:ea:c6:44:99:71: c5:8b:ef:ff:c0:31:0a:72:10:06:0b:7f:93:43:bd: f6:a3:ab:65:4c:c2:7b:ca:8b:37:64:31:9b:d5:73: e1:f2:5a:8a:ed:15:4f:3d:5a:5f:e9:a4:3c:c7:e0: d6:1d:e3:8f:50:c7:ec:ba:c8:65:65:7c:68:95:64: b3:fc:b4:e6:7b:8d:36:fc:83:16:4b:44:41:27:dd: b0:02:23:16:55:b8:df:95:cd:e7:cd:ee:12:60:56: ac:c8:af:de:ed:e8:b4:ea:d0:ea:98:8b:3b:5a:b8: fc:3c:45:5c:c9:67:22:1e:d8:f2:08:b4:80:e8:70: 28:ad:6b:d0:c2:7e:90:12:0e:b1:3f:5c:47:2f:27: b3:14:32:57:3b:0c:62:16:22:49:3c:03:bd:89:ae: 94:76:a6:ce:8f:3d:0a:0f:a0:37:70:65:65:a3:89: 3d:6d:f4:1a:b9:67:28:87:18:dd:fb:02:fc:d4:9e: 00:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:17:38:18:44:14:E3:CD:31:C1:43:F5:BA:12:59:40:B9:32:8B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:58:cf:0e:a0:fa:0c:d9:3a:e7:6b:9b:47:01:41:f8:8e:81: 66:1a:f1:d6:33:f8:af:10:35:70:8c:7d:fd:73:21:54:21:13: ce:9b:78:d8:97:13:a8:ce:2e:32:e4:1b:d1:58:84:c8:22:14: d0:f4:a8:c5:59:8c:0d:b6:c9:6d:09:4c:fa:2d:18:da:ae:55: a1:75:66:7a:ef:a2:22:f2:87:da:b0:db:9c:22:d7:93:db:a2: 35:af:88:f9:bb:64:71:c4:d1:46:67:49:88:27:6c:db:5a:28: 01:f7:7e:77:66:25:5c:c7:28:2b:5d:92:64:ab:b1:d4:c4:5d: 77:27:3f:75:a0:38:f0:1d:8c:65:4a:39:cf:9c:0b:be:8e:6d: 6e:fa:31:5e:46:e5:ef:3a:88:45:01:a4:2e:8a:d3:57:24:a4: fa:ff:20:d9:37:cd:e9:36:db:51:f4:fc:53:b4:f7:34:8c:c7: 57:84:d4:0b:ba:8e:d4:c1:15:48:3c:53:12:96:a0:8b:45:18: a6:9b:da:5e:8b:a1:0e:cd:63:48:f3:e3:9f:84:01:5c:dd:54: 99:9e:f9:ad:1d:b6:80:78:f4:11:c1:59:63:c9:1c:d5:6d:c5: 8b:31:dd:a7:eb:fa:b4:a6:6e:68:75:d1:19:ce:73:da:fa:d6: ca:e6:de:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWJqNzaRuXPvblwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTEwOVoXDTI1MDgxMTE2MTEwOVowLzEtMCsGA1UEAxMk NmIyZTk5NTktNTZkYy00MDlhLWJkMDctOTdmODcxN2Q5ODAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC/LMa3fOfO9kwO1XsveX3P6mAg8v1N/XAU3 TnqTaYrlVu3H53SQ+evtTI5tlSsQydCqjYmFYaBnEYdsZIkRbg/r2idw6sZEmXHF i+//wDEKchAGC3+TQ732o6tlTMJ7yos3ZDGb1XPh8lqK7RVPPVpf6aQ8x+DWHeOP UMfsushlZXxolWSz/LTme402/IMWS0RBJ92wAiMWVbjflc3nze4SYFasyK/e7ei0 6tDqmIs7Wrj8PEVcyWciHtjyCLSA6HAorWvQwn6QEg6xP1xHLyezFDJXOwxiFiJJ PAO9ia6UdqbOjz0KD6A3cGVlo4k9bfQauWcohxjd+wL81J4AfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOoXOBhEFOPNMcFD9boSWUC5MouFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTk3Y2ZkY2YtNWJmMC0z Y2IxLWJhN2EtMGJiYmVjYmNkZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1Yzw6g+gzZOudrm0cBQfiOgWYa8dYz+K8QNXCMff1zIVQhE86b eNiXE6jOLjLkG9FYhMgiFND0qMVZjA22yW0JTPotGNquVaF1ZnrvoiLyh9qw25wi 15PbojWviPm7ZHHE0UZnSYgnbNtaKAH3fndmJVzHKCtdkmSrsdTEXXcnP3WgOPAd jGVKOc+cC76ObW76MV5G5e86iEUBpC6K01ckpPr/INk3zek221H0/FO09zSMx1eE 1Au6jtTBFUg8UxKWoItFGKab2l6LoQ7NY0jz45+EAVzdVJme+a0dtoB49BHBWWPJ HNVtxYsx3afr+rSmbmh10RnOc9r61srm3js= -----END CERTIFICATE-----Generated at Tue Jul 1 09:24:14 2025 by rpki-client