$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a33e9329-e50c-3b74-aae3-b69b9b9558d9.roa File: a33e9329-e50c-3b74-aae3-b69b9b9558d9.roa (raw, json) Hash identifier: SC9AOxq6M0u8YvC3C+GpDsPjUrJLZzy3JuhGfvSsqxw= Subject key identifier: 3A:3B:A7:8B:31:B1:8F:A1:A5:18:4C:3A:5B:EA:84:D8:05:3D:32:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849DC7DAB9EDD2875F5E8B660B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a33e9329-e50c-3b74-aae3-b69b9b9558d9.roa Signing time: Thu 15 May 2025 12:24:52 +0000 ROA not before: Thu 15 May 2025 12:24:52 +0000 ROA not after: Wed 13 Aug 2025 12:24:52 +0000 asID: 396611 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:7d:ab:9e:dd:28:75:f5:e8:b6:60:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 15 12:24:52 2025 GMT Not After : Aug 13 12:24:52 2025 GMT Subject: CN=b7b7a0b5-f5c7-4f27-8ef4-cfa8a64cca5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bf:8e:21:3e:fc:ae:f8:26:43:00:1a:e5:9b: 75:61:13:1b:19:0e:4f:79:3c:6e:0b:5b:70:e1:6a: 42:e0:63:2c:08:d5:d7:5c:a6:d8:f5:46:38:d4:53: 17:55:56:1a:8c:dd:0d:36:2e:7c:f0:52:6a:e2:67: 2e:0d:53:c5:58:02:82:60:0e:27:92:50:54:22:81: 29:4d:b3:1c:9d:c7:62:2b:1b:6f:e1:4f:a6:6c:7a: 5c:6b:5f:d8:2e:e4:26:c2:e6:97:2d:26:a6:e0:30: 0a:c5:44:94:36:27:da:3c:bd:2d:ce:b8:bf:d2:ef: 09:5d:fc:b7:e8:d8:91:f3:8d:1c:45:61:4d:28:59: 87:00:7c:7c:33:10:fc:4e:4e:74:ca:0f:33:7e:28: 68:b9:00:e4:6d:ff:05:aa:99:41:21:ed:cc:01:4e: 18:1d:3d:33:be:e9:46:01:e8:cb:62:00:47:73:27: aa:cb:57:0f:fa:5b:c3:33:99:a9:48:cb:ce:b2:f3: 70:44:71:a2:4a:8a:c7:d2:56:64:88:59:39:39:15: a2:a9:45:32:47:87:4c:bb:54:e8:10:16:13:35:30: 24:69:a7:45:ab:e4:63:00:85:f1:93:c0:89:19:71: 18:83:0f:bc:1c:04:68:43:80:08:32:d3:40:ee:55: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3B:A7:8B:31:B1:8F:A1:A5:18:4C:3A:5B:EA:84:D8:05:3D:32:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a33e9329-e50c-3b74-aae3-b69b9b9558d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:6b:80:89:2f:67:c2:c7:ff:b2:bd:d1:01:c5:1b:eb:a0:6b: dc:bb:8c:5b:02:11:fc:17:7a:5b:53:fa:46:0f:92:67:3e:cd: 75:2d:5a:a3:10:83:3c:3e:02:6a:02:cf:eb:9d:8c:08:8c:a9: e1:3b:e0:d4:3a:28:e4:69:7c:27:32:bf:a5:66:22:1e:f0:b3: 66:f1:8c:6b:bd:cd:18:01:71:a6:24:dd:b9:18:c1:4e:fc:a2: cc:55:8c:5d:a4:b7:af:b5:3c:25:cc:65:fb:ff:41:04:32:59: da:38:69:bf:04:b1:3e:7e:4e:27:df:b7:0a:44:99:38:92:30: b5:8b:2d:e8:3a:56:fe:34:d7:da:3c:f3:b0:cb:09:6a:ef:2e: f4:1a:a6:7d:ce:b1:92:71:7f:0e:42:94:89:f1:94:0c:20:e4: 46:8b:26:46:bb:9a:54:bf:9d:14:0f:94:21:2f:20:dc:24:66: 28:f6:af:99:97:41:1f:59:5f:e0:3d:1d:b8:b9:52:09:ba:3a: 3f:10:18:9b:18:0b:07:d6:ae:21:27:8a:3a:fe:cf:03:7f:1d: 36:29:f5:57:f7:49:c3:ff:e8:95:70:c9:16:54:14:6d:2c:fc: a6:58:9c:c2:90:07:f9:e6:0a:8f:b4:e7:1e:4e:3e:3f:bb:c8: 92:3f:5c:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEncfaue3Sh19ei2YLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxNTEyMjQ1MloXDTI1MDgxMzEyMjQ1MlowLzEtMCsGA1UEAxMk YjdiN2EwYjUtZjVjNy00ZjI3LThlZjQtY2ZhOGE2NGNjYTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL+OIT78rvgmQwAa5Zt1YRMbGQ5PeTxuC1tw 4WpC4GMsCNXXXKbY9UY41FMXVVYajN0NNi588FJq4mcuDVPFWAKCYA4nklBUIoEp TbMcncdiKxtv4U+mbHpca1/YLuQmwuaXLSam4DAKxUSUNifaPL0tzri/0u8JXfy3 6NiR840cRWFNKFmHAHx8MxD8Tk50yg8zfihouQDkbf8FqplBIe3MAU4YHT0zvulG AejLYgBHcyeqy1cP+lvDM5mpSMvOsvNwRHGiSorH0lZkiFk5ORWiqUUyR4dMu1To EBYTNTAkaadFq+RjAIXxk8CJGXEYgw+8HARoQ4AIMtNA7lWxrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDo7p4sxsY+hpRhMOlvqhNgFPTKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTMzZTkzMjktZTUwYy0z Yjc0LWFhZTMtYjY5YjliOTU1OGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACtrgIkvZ8LH/7K90QHFG+uga9y7jFsCEfwXeltT+kYPkmc+zXUt WqMQgzw+AmoCz+udjAiMqeE74NQ6KORpfCcyv6VmIh7ws2bxjGu9zRgBcaYk3bkY wU78osxVjF2kt6+1PCXMZfv/QQQyWdo4ab8EsT5+TifftwpEmTiSMLWLLeg6Vv40 19o887DLCWrvLvQapn3OsZJxfw5ClInxlAwg5EaLJka7mlS/nRQPlCEvINwkZij2 r5mXQR9ZX+A9Hbi5Ugm6Oj8QGJsYCwfWriEnijr+zwN/HTYp9Vf3ScP/6JVwyRZU FG0s/KZYnMKQB/nmCo+05x5OPj+7yJI/XPw= -----END CERTIFICATE-----Generated at Mon Jun 16 12:30:07 2025 by rpki-client