$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02e017e-9aef-37dc-b5c7-5f7d3cb231ad.roa File: b02e017e-9aef-37dc-b5c7-5f7d3cb231ad.roa (raw, json) Hash identifier: zf2sMD+5i6OCV+XaOmNIDFI/qBeaYKX0TRZNJMgoMvg= Subject key identifier: 5B:D7:0E:A3:8D:96:EC:F9:25:4F:39:F5:3B:8E:5B:CC:F1:D2:54:BE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D7589A5227CD74436994F6C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02e017e-9aef-37dc-b5c7-5f7d3cb231ad.roa Signing time: Tue 13 May 2025 16:11:09 +0000 ROA not before: Tue 13 May 2025 16:11:09 +0000 ROA not after: Mon 11 Aug 2025 16:11:09 +0000 asID: 25485 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:9a:52:27:cd:74:43:69:94:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:09 2025 GMT Not After : Aug 11 16:11:09 2025 GMT Subject: CN=2f4d8b4f-47d4-4189-a7e4-ba98b5e2599f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:55:40:b4:02:4c:c1:91:fb:19:7a:a1:75:e9: 86:3f:7d:39:26:fe:45:6b:4e:3f:d8:33:02:3f:38: 31:91:14:ec:f0:4f:ca:ba:84:4f:01:87:90:23:f9: 5c:48:48:85:83:63:a9:e5:b7:88:c4:ce:67:e2:54: 7d:0f:1e:fa:70:48:89:d9:74:74:47:7a:7e:d4:20: 51:10:c9:54:7e:3d:ab:ba:02:b2:71:74:0a:53:61: 53:82:fd:c3:c9:4d:cb:36:f2:26:2d:cf:1d:8c:74: e4:98:18:25:49:77:3a:da:5b:e6:01:a4:da:4a:1f: a1:b5:39:f9:8d:b4:5a:a4:04:1a:df:59:51:e2:7d: 8d:ce:e2:ac:1d:e4:83:c0:f2:54:c2:f2:df:e2:e9: f2:3b:47:fb:ac:34:2b:4f:42:36:7e:f4:5b:a9:7e: b8:54:41:75:5e:ff:9f:e0:dc:a6:df:2d:7b:23:f8: b0:78:82:c4:2f:65:c7:f7:3b:ab:a6:47:b1:ed:3e: af:89:7c:d4:4b:7a:3c:99:85:6e:75:35:19:44:14: e0:27:3a:29:e7:76:39:46:16:4e:34:a4:75:6d:98: 4a:ff:45:df:7a:5c:79:76:d1:42:e2:88:eb:5b:61: 98:e4:8d:45:95:60:6d:7d:c7:96:36:53:b8:03:2c: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:0E:A3:8D:96:EC:F9:25:4F:39:F5:3B:8E:5B:CC:F1:D2:54:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b02e017e-9aef-37dc-b5c7-5f7d3cb231ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:98:5a:5a:71:62:6c:89:c0:67:7a:01:3e:99:4c:b2:ca:7f: f6:b2:50:8c:5d:ab:57:2d:61:7b:f0:59:b1:a4:9f:a9:36:53: a9:08:9a:58:fa:c2:15:b6:7b:ef:40:68:5e:2e:fb:cd:83:df: b5:24:96:70:ba:03:b9:94:92:ef:1d:c1:56:b3:02:48:65:6f: a0:db:b5:1e:7d:f3:96:31:19:4d:5f:04:dd:b1:ff:89:99:78: 51:6c:83:d5:d1:d3:5d:6d:e0:c4:89:ad:6d:18:f7:b2:0d:4c: 55:76:fe:27:ec:ca:9c:62:c1:89:c9:f1:f9:bd:11:2c:7d:78: fe:af:ae:18:9f:a9:0a:1f:5c:47:99:5b:c5:b7:33:79:21:99: 04:dc:dd:5c:dc:e0:6c:44:1a:0d:01:50:ff:c7:0c:ad:fc:c4: d4:41:98:48:c2:63:b2:5f:f3:e8:61:0b:a2:6f:60:8a:cd:bf: c5:57:71:7e:02:bd:95:66:c6:4d:2c:dd:aa:58:aa:0e:57:95: 0b:d6:98:a2:a4:0a:61:76:26:58:a9:95:4f:c9:df:db:fe:43: d8:02:d1:30:37:ca:b7:4b:b0:2a:5f:f0:04:73:b3:42:b9:a7: 5d:7f:e4:50:5c:ed:e0:a8:cd:f2:81:cb:3c:f5:2e:e7:35:9a: 97:e6:bb:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWJpSJ810Q2mU9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTEwOVoXDTI1MDgxMTE2MTEwOVowLzEtMCsGA1UEAxMk MmY0ZDhiNGYtNDdkNC00MTg5LWE3ZTQtYmE5OGI1ZTI1OTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VVAtAJMwZH7GXqhdemGP305Jv5Fa04/2DMC PzgxkRTs8E/KuoRPAYeQI/lcSEiFg2Op5beIxM5n4lR9Dx76cEiJ2XR0R3p+1CBR EMlUfj2rugKycXQKU2FTgv3DyU3LNvImLc8djHTkmBglSXc62lvmAaTaSh+htTn5 jbRapAQa31lR4n2NzuKsHeSDwPJUwvLf4unyO0f7rDQrT0I2fvRbqX64VEF1Xv+f 4Nym3y17I/iweILEL2XH9zurpkex7T6viXzUS3o8mYVudTUZRBTgJzop53Y5RhZO NKR1bZhK/0Xfelx5dtFC4ojrW2GY5I1FlWBtfceWNlO4AyxL2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFvXDqONluz5JU859TuOW8zx0lS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjAyZTAxN2UtOWFlZi0z N2RjLWI1YzctNWY3ZDNjYjIzMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECYWlpxYmyJwGd6AT6ZTLLKf/ayUIxdq1ctYXvwWbGkn6k2U6kI mlj6whW2e+9AaF4u+82D37UklnC6A7mUku8dwVazAkhlb6DbtR5985YxGU1fBN2x /4mZeFFsg9XR011t4MSJrW0Y97INTFV2/ifsypxiwYnJ8fm9ESx9eP6vrhifqQof XEeZW8W3M3khmQTc3Vzc4GxEGg0BUP/HDK38xNRBmEjCY7Jf8+hhC6JvYIrNv8VX cX4CvZVmxk0s3apYqg5XlQvWmKKkCmF2JliplU/J39v+Q9gC0TA3yrdLsCpf8ARz s0K5p11/5FBc7eCozfKByzz1Luc1mpfmu7Q= -----END CERTIFICATE-----Generated at Mon Jun 16 04:14:16 2025 by rpki-client