$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db3c0a6-a8a7-3151-86b3-b032fbec2677.roa File: 8db3c0a6-a8a7-3151-86b3-b032fbec2677.roa (raw, json) Hash identifier: 8Z9/ImWsvy+3miB+JYAK2sTRvRgNKWRLT5KtC6xJhYU= Subject key identifier: D4:9B:6B:C6:55:4E:D4:9F:F9:91:DF:CC:36:37:87:4D:42:E1:B5:94 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849DC7DADDE11D7008F00167480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db3c0a6-a8a7-3151-86b3-b032fbec2677.roa Signing time: Thu 15 May 2025 12:24:53 +0000 ROA not before: Thu 15 May 2025 12:24:53 +0000 ROA not after: Wed 13 Aug 2025 12:24:53 +0000 asID: 396571 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:7d:ad:de:11:d7:00:8f:00:16:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 15 12:24:53 2025 GMT Not After : Aug 13 12:24:53 2025 GMT Subject: CN=783c3e94-bc3d-488a-bc19-9df8c4e993e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:be:70:8a:c0:08:a9:4d:90:15:35:12:62: d6:9c:83:dc:23:1f:dc:e1:c0:30:dc:51:8c:c6:f4: ca:64:4b:ee:a6:c8:7b:4d:85:3d:51:85:a7:e0:89: 41:67:7f:fc:c8:d7:0e:94:f4:94:f4:41:98:df:94: f5:c2:ad:95:5a:e5:f1:e0:5e:55:63:ba:ea:80:7b: c5:7e:3d:bb:ce:8f:fd:4f:8f:22:b2:01:ef:1a:fd: 3d:9b:29:05:d4:de:64:fd:32:15:35:3d:60:75:7d: a5:b3:ab:a4:f6:65:cd:26:6a:cc:97:71:4e:22:75: e0:56:39:5f:8d:12:e0:77:d6:27:2c:56:3c:fd:84: 1b:b9:a5:41:26:61:e6:70:80:8c:70:00:36:a8:54: 24:8f:3d:ea:7a:47:5f:fe:24:34:de:f0:b1:50:f5: 5d:db:03:e7:62:3b:0f:4d:47:4e:03:f3:25:53:bf: b3:cc:2a:65:d9:95:4b:c7:51:01:a9:ca:ae:9e:56: 0c:56:8b:7f:bf:dc:f0:60:49:17:ab:40:f9:eb:07: 5e:83:9c:ac:f4:be:43:a6:b0:4c:89:e1:e5:5b:f9: 0b:e1:29:dc:c3:2b:b4:03:3b:36:2d:bf:ea:38:af: e8:39:b3:7b:c2:6d:6a:b2:08:d3:03:7d:0e:a0:be: de:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9B:6B:C6:55:4E:D4:9F:F9:91:DF:CC:36:37:87:4D:42:E1:B5:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db3c0a6-a8a7-3151-86b3-b032fbec2677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:b1:34:fb:fe:91:51:ff:ed:e4:98:40:f3:88:a6:5f:a3:6b: 40:e8:e8:ed:86:8d:25:38:b3:48:33:8f:02:de:c4:5f:90:86: a4:30:d2:94:ad:f8:27:8e:40:c8:3d:a8:53:e8:57:08:93:6b: 81:ca:3b:a0:2d:10:8a:26:8c:00:1d:e5:2d:f2:e8:73:8f:8a: 00:16:55:20:84:7e:52:92:ac:22:61:6f:88:dc:0c:63:79:77: 4d:b0:49:2c:d3:4f:70:fe:c3:c4:98:19:19:48:08:81:84:eb: 21:2f:ff:bb:56:0c:fb:19:cf:b9:28:87:01:01:bb:7b:36:d0: 58:85:7c:84:7a:42:3c:09:5a:e5:c3:f5:cd:c4:9f:9c:bd:13: d0:ce:03:15:78:6c:63:28:29:d7:2d:77:c3:d4:4a:c3:5a:3a: 98:00:63:34:1c:82:14:fa:73:70:d3:df:40:fe:c2:7c:27:c8: 50:83:b4:2e:18:f2:8c:2a:2b:7e:cd:c3:b0:cb:d7:3e:84:5a: 1b:87:75:de:92:06:a6:1a:c2:9f:aa:80:61:a5:2c:06:79:20: 39:32:39:bb:c6:d0:77:05:ca:43:5b:3a:39:64:43:9d:a9:95: b9:6b:14:d6:60:ca:4d:b8:7b:0a:14:ef:73:d1:b0:33:01:36: ff:a7:31:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncfa3eEdcAjwAWdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxNTEyMjQ1M1oXDTI1MDgxMzEyMjQ1M1owLzEtMCsGA1UEAxMk NzgzYzNlOTQtYmMzZC00ODhhLWJjMTktOWRmOGM0ZTk5M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn2+cIrACKlNkBU1EmLWnIPcIx/c4cAw3FGM xvTKZEvupsh7TYU9UYWn4IlBZ3/8yNcOlPSU9EGY35T1wq2VWuXx4F5VY7rqgHvF fj27zo/9T48isgHvGv09mykF1N5k/TIVNT1gdX2ls6uk9mXNJmrMl3FOInXgVjlf jRLgd9YnLFY8/YQbuaVBJmHmcICMcAA2qFQkjz3qekdf/iQ03vCxUPVd2wPnYjsP TUdOA/MlU7+zzCpl2ZVLx1EBqcqunlYMVot/v9zwYEkXq0D56wdeg5ys9L5DprBM ieHlW/kL4Sncwyu0Azs2Lb/qOK/oObN7wm1qsgjTA30OoL7elQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSba8ZVTtSf+ZHfzDY3h01C4bWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGRiM2MwYTYtYThhNy0z MTUxLTg2YjMtYjAzMmZiZWMyNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACixNPv+kVH/7eSYQPOIpl+ja0Do6O2GjSU4s0gzjwLexF+QhqQw 0pSt+CeOQMg9qFPoVwiTa4HKO6AtEIomjAAd5S3y6HOPigAWVSCEflKSrCJhb4jc DGN5d02wSSzTT3D+w8SYGRlICIGE6yEv/7tWDPsZz7kohwEBu3s20FiFfIR6QjwJ WuXD9c3En5y9E9DOAxV4bGMoKdctd8PUSsNaOpgAYzQcghT6c3DT30D+wnwnyFCD tC4Y8owqK37Nw7DL1z6EWhuHdd6SBqYawp+qgGGlLAZ5IDkyObvG0HcFykNbOjlk Q52plblrFNZgyk24ewoU73PRsDMBNv+nMdg= -----END CERTIFICATE-----Generated at Mon Jun 16 02:25:11 2025 by rpki-client