$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa File: af382251-c142-3904-865a-a47105b1531a.roa (raw, json) Hash identifier: EUKOmR52i0CpYqDGCoK7y6ZUSA+2jHMlWEfCqT65zc4= Subject key identifier: 8E:8B:E5:A2:44:CF:0C:32:A8:FE:A5:9E:2F:84:4A:DF:48:BF:45:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758B0D883C90A6B6B1C9380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa Signing time: Tue 13 May 2025 16:11:19 +0000 ROA not before: Tue 13 May 2025 16:11:19 +0000 ROA not after: Mon 11 Aug 2025 16:11:19 +0000 asID: 20431 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:b0:d8:83:c9:0a:6b:6b:1c:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:19 2025 GMT Not After : Aug 11 16:11:19 2025 GMT Subject: CN=a18ebe22-9d86-4447-8245-914573424188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:56:d8:b1:93:f8:da:2f:70:d2:5a:6d:5e: 98:76:a6:7a:3e:d4:f5:6a:91:9e:d9:0a:5c:f7:14: 9d:d7:75:a4:89:74:d9:2a:4c:1b:c1:89:88:ae:f6: 15:a7:29:20:23:01:b1:0f:39:cc:fe:8e:6b:44:2f: c0:39:8e:73:cc:cf:e7:3b:32:77:6d:36:de:a7:f5: 86:0f:2f:fb:82:c4:4c:d3:a9:37:b2:1b:d4:55:ff: 24:0e:11:e9:01:e3:b1:c8:94:77:ad:2a:9b:f1:23: 4b:ce:61:e9:d7:15:98:57:4e:41:0e:44:02:2d:6b: b9:8f:1f:54:ba:f8:3d:8e:6b:1d:08:a0:67:95:7b: 87:d3:a6:9b:e4:f4:3e:55:d5:05:e5:b3:4b:53:95: 80:32:81:23:4d:61:eb:52:8a:8f:29:cb:09:7d:e2: 7b:f1:cb:61:59:75:37:05:91:71:dd:38:65:17:97: 89:96:96:16:19:03:1a:47:c1:cd:e7:bb:b9:a0:a1: 89:a9:08:61:bb:a8:5b:6d:77:9b:8f:0d:28:6e:9a: f3:29:d9:21:0a:cb:59:41:3f:c7:d6:2f:a3:00:f2: 9a:31:a4:06:d3:e6:73:f8:ba:14:cd:9b:8d:f8:52: 05:43:ee:7a:68:ed:18:a1:2a:6d:f0:a8:b3:08:93: ce:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8B:E5:A2:44:CF:0C:32:A8:FE:A5:9E:2F:84:4A:DF:48:BF:45:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af382251-c142-3904-865a-a47105b1531a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e6:49:97:3a:cf:f4:1e:53:87:f8:d4:c5:31:21:ca:bd:34: 55:54:ca:29:79:2f:93:44:63:c4:4a:68:21:63:5b:c5:29:25: 76:a8:0b:7a:a7:ea:74:cb:5b:f3:a9:b1:65:a9:a6:6e:cc:67: 7c:f6:0b:16:20:b8:a6:1c:ef:4d:8f:5e:fd:b0:57:b9:cf:3d: 35:00:1c:81:95:58:9f:75:3d:5a:8c:62:18:e7:ec:99:29:b7: d7:02:64:6c:ca:bc:a0:02:ea:2f:53:4e:8c:c7:b3:5f:ac:10: 3a:10:8d:f3:ce:c9:6b:aa:14:a7:93:22:64:db:fb:ac:38:bd: 10:a6:09:34:3f:ae:36:0b:42:a5:2a:be:ed:6b:11:2d:3f:bf: da:c4:29:db:a4:b3:4e:50:4a:61:9e:7d:f1:cc:81:bc:0b:71: b5:98:bc:05:6a:07:62:52:b1:fb:08:99:36:7f:c5:12:a7:8b: fc:17:d4:0d:d7:30:59:85:d9:d1:61:57:7a:af:3d:72:c6:c1: fd:01:b3:ee:5e:b6:4a:9a:44:33:7d:8e:da:8a:68:48:5b:07: ff:1f:e5:43:d2:2c:1d:ee:1c:88:46:85:dd:51:ba:52:cb:c1: 65:e0:25:72:e6:05:d9:2d:43:f4:f1:a8:1c:25:ca:4d:ae:25: ae:ad:04:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWLDYg8kKa2sck4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExOVoXDTI1MDgxMTE2MTExOVowLzEtMCsGA1UEAxMk YTE4ZWJlMjItOWQ4Ni00NDQ3LTgyNDUtOTE0NTczNDI0MTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkBW2LGT+NovcNJabV6YdqZ6PtT1apGe2Qpc 9xSd13WkiXTZKkwbwYmIrvYVpykgIwGxDznM/o5rRC/AOY5zzM/nOzJ3bTbep/WG Dy/7gsRM06k3shvUVf8kDhHpAeOxyJR3rSqb8SNLzmHp1xWYV05BDkQCLWu5jx9U uvg9jmsdCKBnlXuH06ab5PQ+VdUF5bNLU5WAMoEjTWHrUoqPKcsJfeJ78cthWXU3 BZFx3ThlF5eJlpYWGQMaR8HN57u5oKGJqQhhu6hbbXebjw0obprzKdkhCstZQT/H 1i+jAPKaMaQG0+Zz+LoUzZuN+FIFQ+56aO0YoSpt8KizCJPOJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI6L5aJEzwwyqP6lni+ESt9Iv0WCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWYzODIyNTEtYzE0Mi0z OTA0LTg2NWEtYTQ3MTA1YjE1MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHmSZc6z/QeU4f41MUxIcq9NFVUyil5L5NEY8RKaCFjW8UpJXao C3qn6nTLW/OpsWWppm7MZ3z2CxYguKYc702PXv2wV7nPPTUAHIGVWJ91PVqMYhjn 7Jkpt9cCZGzKvKAC6i9TTozHs1+sEDoQjfPOyWuqFKeTImTb+6w4vRCmCTQ/rjYL QqUqvu1rES0/v9rEKduks05QSmGeffHMgbwLcbWYvAVqB2JSsfsImTZ/xRKni/wX 1A3XMFmF2dFhV3qvPXLGwf0Bs+5etkqaRDN9jtqKaEhbB/8f5UPSLB3uHIhGhd1R ulLLwWXgJXLmBdktQ/TxqBwlyk2uJa6tBJA= -----END CERTIFICATE-----Generated at Mon Jun 16 05:34:57 2025 by rpki-client