$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48bac3bf-e051-307f-9f41-a06c8b808fb2.roa File: 48bac3bf-e051-307f-9f41-a06c8b808fb2.roa (raw, json) Hash identifier: khqKHW4dyVtGVdYAr0nxA3lIeN9lkbrUnSCVIRPWbNU= Subject key identifier: 6A:6A:1B:EA:02:51:F9:78:F1:10:D0:54:36:4F:D9:87:42:32:53:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758A938E9814761B7310320 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48bac3bf-e051-307f-9f41-a06c8b808fb2.roa Signing time: Tue 13 May 2025 16:11:16 +0000 ROA not before: Tue 13 May 2025 16:11:16 +0000 ROA not after: Mon 11 Aug 2025 16:11:16 +0000 asID: 396609 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:a9:38:e9:81:47:61:b7:31:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:16 2025 GMT Not After : Aug 11 16:11:16 2025 GMT Subject: CN=8ddb443f-1b10-4496-9e1f-457f2ee34f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:8c:29:7f:8e:a3:6a:03:36:52:f7:33:de: ea:ac:c1:02:d4:6c:35:ff:8d:6c:62:35:78:27:4b: f2:9b:7b:86:a5:13:fd:5a:33:89:8e:58:0c:0f:bc: e0:78:48:19:c9:dd:9d:3c:11:74:d2:94:3d:18:92: a1:c5:c1:ed:ac:eb:f5:7f:88:fe:39:51:07:e1:5d: b3:9d:77:3c:c9:3b:b1:e1:bb:7b:c6:72:56:3a:d5: d3:e7:e6:9e:e5:b9:78:cc:1c:41:65:6b:8e:08:d8: 5d:00:17:a9:98:e3:9a:27:c7:d5:96:59:8e:f8:70: be:54:13:e7:93:61:88:56:c8:e9:60:dd:f8:3a:08: 98:65:7f:e2:ce:ff:2b:e4:b1:85:36:0b:97:6d:18: 4d:d0:51:b4:21:80:89:59:28:20:32:ba:2f:c5:81: f5:a0:1e:eb:9d:52:37:26:fe:0c:1e:c6:8d:c3:5e: 7c:e8:92:bc:c5:ef:06:59:07:69:3f:b3:22:91:35: 39:1e:79:83:cf:f9:bd:47:9c:80:cd:6c:13:23:ea: 82:5b:14:6e:9e:27:a2:0f:f3:74:95:05:55:4c:17: 22:bf:13:69:a0:ba:1b:bb:bb:ab:a0:c4:e9:59:ff: 0a:20:e8:e6:86:5e:a8:02:b9:10:e6:37:7c:e0:07: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6A:1B:EA:02:51:F9:78:F1:10:D0:54:36:4F:D9:87:42:32:53:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48bac3bf-e051-307f-9f41-a06c8b808fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d3:0b:96:9c:84:49:d8:b2:52:06:c8:c8:c7:01:71:58:4b: d9:48:c6:64:87:5a:a5:83:98:7f:db:09:90:fb:2e:6a:d3:30: 85:b2:4f:b9:d1:1e:8b:04:6b:0d:09:01:de:28:2e:10:bb:c4: e7:d2:1c:b6:9c:bf:c1:56:29:1a:21:72:d2:91:dd:1b:03:ec: ac:8c:dc:0f:fd:ab:b0:de:75:4e:19:a3:3e:2d:92:22:08:d2: a6:bc:c2:c0:b4:96:a2:b3:f8:8f:66:24:20:91:47:eb:27:7b: 50:79:23:52:41:b1:56:0a:c8:dc:0a:67:15:b9:ba:07:6e:94: c0:77:ce:53:4d:62:36:94:3b:db:eb:4b:f7:b2:67:84:b7:e7: 0d:d5:0c:2f:fc:bc:3c:4b:8e:ba:14:4e:f1:bd:f6:8f:ae:d9: fc:79:b2:7e:26:8f:54:0d:0c:6a:39:24:ae:95:eb:1b:7f:9b: 0d:5a:6c:a9:a2:fb:59:83:0e:2d:82:db:3f:7d:47:db:03:4c: 2b:48:bc:5a:ca:30:ee:ad:ae:20:d9:3e:f2:5a:da:ba:e2:c3: f4:73:3d:d0:42:25:7f:8d:15:40:e1:67:d6:e6:7b:25:81:0d: 7d:02:89:8d:44:c5:a0:f1:67:09:9c:48:ea:4e:d3:31:a6:88: bf:0c:f8:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWKk46YFHYbcxAyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExNloXDTI1MDgxMTE2MTExNlowLzEtMCsGA1UEAxMk OGRkYjQ0M2YtMWIxMC00NDk2LTllMWYtNDU3ZjJlZTM0ZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIWMKX+Oo2oDNlL3M97qrMEC1Gw1/41sYjV4 J0vym3uGpRP9WjOJjlgMD7zgeEgZyd2dPBF00pQ9GJKhxcHtrOv1f4j+OVEH4V2z nXc8yTux4bt7xnJWOtXT5+ae5bl4zBxBZWuOCNhdABepmOOaJ8fVllmO+HC+VBPn k2GIVsjpYN34OgiYZX/izv8r5LGFNguXbRhN0FG0IYCJWSggMrovxYH1oB7rnVI3 Jv4MHsaNw1586JK8xe8GWQdpP7MikTU5HnmDz/m9R5yAzWwTI+qCWxRunieiD/N0 lQVVTBcivxNpoLobu7uroMTpWf8KIOjmhl6oArkQ5jd84Ac8XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGpqG+oCUfl48RDQVDZP2YdCMlPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhiYWMzYmYtZTA1MS0z MDdmLTlmNDEtYTA2YzhiODA4ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEXTC5achEnYslIGyMjHAXFYS9lIxmSHWqWDmH/bCZD7LmrTMIWy T7nRHosEaw0JAd4oLhC7xOfSHLacv8FWKRohctKR3RsD7KyM3A/9q7DedU4Zoz4t kiII0qa8wsC0lqKz+I9mJCCRR+sne1B5I1JBsVYKyNwKZxW5ugdulMB3zlNNYjaU O9vrS/eyZ4S35w3VDC/8vDxLjroUTvG99o+u2fx5sn4mj1QNDGo5JK6V6xt/mw1a bKmi+1mDDi2C2z99R9sDTCtIvFrKMO6triDZPvJa2rriw/RzPdBCJX+NFUDhZ9bm eyWBDX0CiY1ExaDxZwmcSOpO0zGmiL8M+Jc= -----END CERTIFICATE-----Generated at Mon Jun 16 05:49:35 2025 by rpki-client