$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/909f0525-b1f6-3c29-af53-fec2987a9bd1.roa File: 909f0525-b1f6-3c29-af53-fec2987a9bd1.roa (raw, json) Hash identifier: 9NU8z/ekHFGxqpbWnBsUwALli4bJCUyWUX6pQDtRrvU= Subject key identifier: 5B:40:66:F1:D9:6B:35:F4:02:EF:D7:A5:71:A2:44:DC:5E:C3:00:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849DC7DAD908AAB4F3A69BC4E40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/909f0525-b1f6-3c29-af53-fec2987a9bd1.roa Signing time: Thu 15 May 2025 12:24:53 +0000 ROA not before: Thu 15 May 2025 12:24:53 +0000 ROA not after: Wed 13 Aug 2025 12:24:53 +0000 asID: 396587 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:7d:ad:90:8a:ab:4f:3a:69:bc:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 15 12:24:53 2025 GMT Not After : Aug 13 12:24:53 2025 GMT Subject: CN=e81d609d-a910-45d9-a816-93bcb336e9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b9:d5:08:7c:60:0d:80:be:7d:b9:7b:66:59: db:10:10:69:9f:ab:e3:48:b1:cb:21:73:55:32:c2: 19:55:08:ee:57:75:7e:c7:f2:f1:a0:64:d3:09:33: b0:0a:99:8b:14:74:00:d5:dd:a1:e9:b4:f5:ce:1b: fb:25:64:17:99:a1:35:55:97:70:c7:08:fc:af:b2: 10:e7:de:77:c9:3f:27:f1:cb:ae:5a:72:bb:5a:aa: 6e:a3:75:5a:5d:9a:2a:cd:18:f5:24:f6:f3:e4:4d: 26:9f:94:0f:05:74:b3:a6:ac:44:b8:dc:41:26:f7: 1b:e3:4a:ab:3d:09:05:a9:2e:d2:8f:f4:4b:44:2f: 92:72:34:d1:a3:9b:e8:3f:10:a3:87:5c:b3:6a:3f: bd:af:80:60:0b:39:ac:f6:e1:7f:b7:29:6a:0b:c6: 2c:1a:2d:d7:2b:37:f5:a8:c2:6a:09:88:e2:07:16: 09:81:ac:f7:3f:07:48:1c:20:19:fe:12:fe:09:ea: aa:1e:1a:9d:86:43:7f:42:b6:06:1c:b1:85:b1:11: f9:f1:bf:92:fc:b3:e9:55:46:04:ae:ca:a8:f5:ff: 98:57:37:3d:8a:b7:23:63:f8:4b:07:21:3c:bd:6b: fc:0e:23:5c:b8:01:15:10:c6:e7:aa:9e:2c:57:52: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:40:66:F1:D9:6B:35:F4:02:EF:D7:A5:71:A2:44:DC:5E:C3:00:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/909f0525-b1f6-3c29-af53-fec2987a9bd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:9e:5a:83:42:b1:7d:8d:13:aa:b5:b3:af:54:16:27:b6:96: b8:91:a0:ee:41:bd:d4:c5:de:71:a6:d9:f9:d2:a1:94:fa:fc: 36:18:ca:63:92:4d:82:18:44:2e:39:52:4b:ae:f4:5c:0b:05: 97:23:99:27:22:f4:f4:3a:a6:d5:15:dd:d1:ae:38:0d:a3:1f: 1d:dd:44:67:ad:6f:46:12:d3:72:99:46:6f:6f:84:5d:0d:e5: 4c:04:a5:09:05:4e:29:33:51:f1:1c:c4:f4:9c:f9:db:35:7e: b3:a3:9b:16:65:78:50:8e:30:6d:d4:6f:63:18:aa:0b:0e:10: 7d:ad:35:05:e9:18:6e:1b:d1:31:5a:dd:f8:19:81:f9:62:7c: 74:03:84:b5:e3:8a:87:18:ad:65:86:0c:44:73:dd:9f:3f:34: 35:cc:fa:ae:3d:39:44:f9:92:65:73:e8:51:9e:ac:31:a2:af: b1:df:33:ac:b6:2c:0a:83:51:af:c7:c8:06:da:86:23:37:72: b1:9a:3f:18:bd:70:2a:bb:41:cf:10:fc:68:60:3e:db:4a:e4: 29:6a:8e:af:57:fb:05:d3:37:cb:c9:73:af:5a:ac:01:d8:08: 18:04:f7:41:a3:8a:34:97:d6:ac:2a:c5:ae:87:9f:8b:02:14: d5:bf:d8:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncfa2QiqtPOmm8TkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxNTEyMjQ1M1oXDTI1MDgxMzEyMjQ1M1owLzEtMCsGA1UEAxMk ZTgxZDYwOWQtYTkxMC00NWQ5LWE4MTYtOTNiY2IzMzZlOWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLnVCHxgDYC+fbl7ZlnbEBBpn6vjSLHLIXNV MsIZVQjuV3V+x/LxoGTTCTOwCpmLFHQA1d2h6bT1zhv7JWQXmaE1VZdwxwj8r7IQ 5953yT8n8cuuWnK7Wqpuo3VaXZoqzRj1JPbz5E0mn5QPBXSzpqxEuNxBJvcb40qr PQkFqS7Sj/RLRC+ScjTRo5voPxCjh1yzaj+9r4BgCzms9uF/tylqC8YsGi3XKzf1 qMJqCYjiBxYJgaz3PwdIHCAZ/hL+CeqqHhqdhkN/QrYGHLGFsRH58b+S/LPpVUYE rsqo9f+YVzc9ircjY/hLByE8vWv8DiNcuAEVEMbnqp4sV1KDbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFtAZvHZazX0Au/XpXGiRNxewwA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTA5ZjA1MjUtYjFmNi0z YzI5LWFmNTMtZmVjMjk4N2E5YmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJaeWoNCsX2NE6q1s69UFie2lriRoO5BvdTF3nGm2fnSoZT6/DYY ymOSTYIYRC45Ukuu9FwLBZcjmSci9PQ6ptUV3dGuOA2jHx3dRGetb0YS03KZRm9v hF0N5UwEpQkFTikzUfEcxPSc+ds1frOjmxZleFCOMG3Ub2MYqgsOEH2tNQXpGG4b 0TFa3fgZgflifHQDhLXjiocYrWWGDERz3Z8/NDXM+q49OUT5kmVz6FGerDGir7Hf M6y2LAqDUa/HyAbahiM3crGaPxi9cCq7Qc8Q/GhgPttK5Clqjq9X+wXTN8vJc69a rAHYCBgE90GjijSX1qwqxa6Hn4sCFNW/2OE= -----END CERTIFICATE-----Generated at Mon Jun 16 10:00:04 2025 by rpki-client