$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa File: c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa (raw, json) Hash identifier: H5W2Bj0/0EYUC6dJbUW6ASmxiNjQdQf1mkbnUaYa4kM= Subject key identifier: 87:6B:B9:DA:87:2E:BC:76:25:E7:D6:90:05:92:9B:D6:17:A0:EF:93 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758AE5FE260BD1185C92180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa Signing time: Tue 13 May 2025 16:11:18 +0000 ROA not before: Tue 13 May 2025 16:11:18 +0000 ROA not after: Mon 11 Aug 2025 16:11:18 +0000 asID: 20172 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:ae:5f:e2:60:bd:11:85:c9:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:18 2025 GMT Not After : Aug 11 16:11:18 2025 GMT Subject: CN=4cec91b4-8689-4cc6-b91e-4263b0c70937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:85:33:04:cb:8a:5f:54:ca:2b:3f:04:49:0c: d9:1a:18:45:17:e9:55:10:51:50:9a:e4:98:2e:86: cc:b4:d8:34:a8:8b:ce:f5:d0:7a:af:f0:bb:a0:84: 90:70:d4:ab:73:fb:da:94:47:7b:94:0c:38:40:ab: e8:57:cb:37:fe:51:52:c8:c0:dd:4f:45:13:7e:47: 17:d7:d8:0b:f6:7d:8a:1d:c6:a1:03:92:1a:4b:ae: 48:1c:e8:8f:ab:69:12:6e:1f:0e:7e:38:05:9c:98: c6:97:51:bf:8f:15:6b:87:82:ad:5a:cf:20:84:d7: 55:ec:32:5b:94:fd:03:a6:e2:90:71:52:3d:b2:e5: a2:bf:1e:ca:46:62:20:9a:d9:65:a5:e3:d2:21:02: a3:e5:8a:9b:b8:8a:a2:b8:85:92:fa:56:59:ad:24: 3d:dd:08:40:93:94:0c:b1:f4:a6:16:67:3a:c1:1e: 35:c1:a1:c0:5b:10:62:79:a2:cd:4a:cc:da:1e:d3: 20:c0:ef:51:2c:92:24:23:fd:34:69:b9:79:9c:d9: a5:ac:63:4b:53:c6:4e:44:a1:94:e9:c1:44:a8:94: 0d:ed:d3:88:85:2f:14:8d:07:12:36:ab:e5:a7:db: 6c:0b:81:e1:32:cf:ae:28:8e:45:f7:72:23:cc:da: 6c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:6B:B9:DA:87:2E:BC:76:25:E7:D6:90:05:92:9B:D6:17:A0:EF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c441bda4-cd7d-3a4b-b1e6-8736bfba4392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:40:2a:d2:73:27:c5:86:4d:e0:5c:70:5b:d4:59:40:15:5d: f7:25:be:56:e3:ff:20:01:71:22:2d:f9:61:b8:85:90:b8:ee: 8c:ee:65:ea:2e:c4:61:3f:90:3d:fb:46:68:54:43:4b:0a:71: f7:ba:79:98:11:ff:59:0a:2c:cc:bc:84:e5:cd:28:ee:cf:3f: 2c:a2:91:b0:fc:0a:48:b8:26:f8:37:27:b6:ab:17:1a:7d:7c: bc:50:92:e8:03:a7:7a:29:d7:72:98:80:10:65:92:15:09:02: e7:3e:47:3c:c5:32:29:1a:4d:be:5f:dc:ed:0d:38:ac:e4:eb: b4:b7:e2:56:3f:4c:b8:a8:c9:27:72:c3:5a:e5:08:4f:f7:f7: 6c:4d:87:84:d6:28:24:f7:dd:15:56:08:36:1b:bf:35:84:4b: 3f:2b:cd:34:05:a4:b0:7c:f0:78:6d:e8:53:5b:df:44:fc:c4: 0d:bb:6b:05:c8:7b:94:77:f0:d6:aa:ca:b0:bc:07:a4:35:6e: ad:43:01:0c:18:85:82:97:27:43:84:20:f0:46:9a:7a:b5:77: 14:0d:0f:a5:31:f4:75:32:de:44:26:bc:e9:06:86:c9:10:69: bd:2d:65:b0:8d:8b:c9:73:dd:eb:34:3f:75:67:83:6b:52:f0: 9c:6d:55:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWK5f4mC9EYXJIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExOFoXDTI1MDgxMTE2MTExOFowLzEtMCsGA1UEAxMk NGNlYzkxYjQtODY4OS00Y2M2LWI5MWUtNDI2M2IwYzcwOTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloUzBMuKX1TKKz8ESQzZGhhFF+lVEFFQmuSY LobMtNg0qIvO9dB6r/C7oISQcNSrc/valEd7lAw4QKvoV8s3/lFSyMDdT0UTfkcX 19gL9n2KHcahA5IaS65IHOiPq2kSbh8OfjgFnJjGl1G/jxVrh4KtWs8ghNdV7DJb lP0DpuKQcVI9suWivx7KRmIgmtllpePSIQKj5YqbuIqiuIWS+lZZrSQ93QhAk5QM sfSmFmc6wR41waHAWxBieaLNSszaHtMgwO9RLJIkI/00abl5nNmlrGNLU8ZORKGU 6cFEqJQN7dOIhS8UjQcSNqvlp9tsC4HhMs+uKI5F93IjzNps/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIdrudqHLrx2JefWkAWSm9YXoO+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQ0MWJkYTQtY2Q3ZC0z YTRiLWIxZTYtODczNmJmYmE0MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF5AKtJzJ8WGTeBccFvUWUAVXfclvlbj/yABcSIt+WG4hZC47ozu ZeouxGE/kD37RmhUQ0sKcfe6eZgR/1kKLMy8hOXNKO7PPyyikbD8Cki4Jvg3J7ar Fxp9fLxQkugDp3op13KYgBBlkhUJAuc+RzzFMikaTb5f3O0NOKzk67S34lY/TLio ySdyw1rlCE/392xNh4TWKCT33RVWCDYbvzWESz8rzTQFpLB88Hht6FNb30T8xA27 awXIe5R38NaqyrC8B6Q1bq1DAQwYhYKXJ0OEIPBGmnq1dxQND6Ux9HUy3kQmvOkG hskQab0tZbCNi8lz3es0P3Vng2tS8JxtVdU= -----END CERTIFICATE-----Generated at Mon Jun 16 04:14:49 2025 by rpki-client