$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96da247-c107-3343-b61e-f82d153eae9a.roa File: e96da247-c107-3343-b61e-f82d153eae9a.roa (raw, json) Hash identifier: O3i6ui8fV3IQEOgz9Ps7r8poJxWFOMkFWUvelRGqOGU= Subject key identifier: 24:A6:D2:8D:C5:2D:D6:A1:7E:BF:90:DD:B3:1C:0B:18:C1:22:8C:52 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D758ACD3974B96D11931CA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96da247-c107-3343-b61e-f82d153eae9a.roa Signing time: Tue 13 May 2025 16:11:17 +0000 ROA not before: Tue 13 May 2025 16:11:17 +0000 ROA not after: Mon 11 Aug 2025 16:11:17 +0000 asID: 396549 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d7:58:ac:d3:97:4b:96:d1:19:31:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 13 16:11:17 2025 GMT Not After : Aug 11 16:11:17 2025 GMT Subject: CN=cecaae43-1f27-461c-aa28-1a49592d09ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5d:47:2e:cf:00:40:e0:1c:5b:3b:5b:84:40: ad:7d:21:18:d1:13:e9:2e:d7:75:56:b9:d9:27:61: 5b:58:72:8e:5c:90:cc:0e:21:6f:b3:c9:a3:cc:41: c2:0a:e2:d6:23:31:67:10:0d:a7:a6:ee:63:2f:ae: 4a:f2:54:9d:fb:17:20:d7:52:3f:de:38:d0:79:d2: 02:38:1e:8f:91:f1:3d:e1:66:54:17:7d:22:e2:73: b5:1d:5d:66:d4:b0:39:a3:26:35:7f:2f:ba:6f:81: 04:aa:ba:c2:6f:21:a4:6a:10:2b:e6:a1:2f:25:f2: 6c:82:99:04:80:ac:bd:ae:04:ac:4d:9a:ac:29:29: 22:0e:4d:01:bd:b2:26:6a:95:b9:fb:d1:ea:f6:3b: dd:74:45:40:88:e3:b1:ad:c1:fd:3b:f0:53:8f:87: f3:a3:26:2f:31:8e:58:ec:59:7f:11:e5:85:ef:05: 61:7f:a4:aa:05:fd:ad:03:cc:3f:9f:cb:21:7d:fb: 94:d5:a1:d2:7c:5e:18:8d:62:65:e8:b9:c8:7f:d6: ed:5d:4d:8e:9b:d6:0c:8d:c5:3b:a3:9f:82:df:4e: 02:d2:9b:b3:9b:9f:bc:88:8f:cc:d2:11:08:1f:53: 3e:f8:a5:31:14:e8:21:9e:79:db:6b:5e:9c:b2:43: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A6:D2:8D:C5:2D:D6:A1:7E:BF:90:DD:B3:1C:0B:18:C1:22:8C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e96da247-c107-3343-b61e-f82d153eae9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:90:d6:c6:da:45:90:51:12:24:97:34:b5:be:7a:31:24:e4: a1:e0:fb:bf:bc:45:7a:29:09:42:fc:be:21:aa:62:66:51:2f: 9b:87:8a:dc:c0:39:26:0d:c7:10:7b:34:6c:6b:8d:71:74:4d: 54:0e:6f:a5:d1:21:d8:9e:19:39:94:ed:b4:b9:56:fe:24:59: 5d:f4:b8:d2:7c:c5:b4:74:c9:bb:81:5e:df:a4:d1:83:34:37: 41:da:a4:bc:27:57:c2:b6:3d:fd:8a:e4:3c:a7:da:7e:9a:21: ac:16:04:fb:0a:c6:e3:40:b2:1b:3b:04:17:67:ba:9f:87:fb: db:5c:5e:dc:c4:e4:5c:c6:29:ff:ff:8d:6e:a4:b3:5e:36:4e: 8f:4b:57:1d:90:a9:8a:4c:81:7d:2d:dd:18:f1:bf:44:b2:7b: 56:9b:54:c1:be:74:d9:69:ca:43:36:66:a9:61:88:c3:93:24: c6:f7:71:2c:20:cb:b1:2b:b6:af:35:1c:59:8b:72:17:30:f2: 0f:c6:8f:a9:2f:88:5f:b1:4a:86:22:1f:e4:53:78:2e:b7:2b: 17:6b:4e:ed:66:40:46:4d:1a:de:85:7f:95:01:f7:00:55:6e: 5c:42:54:7d:5b:e2:fc:f4:5d:d9:81:cc:6f:04:fb:d8:e5:e9: d5:b2:be:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWKzTl0uW0RkxygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMzE2MTExN1oXDTI1MDgxMTE2MTExN1owLzEtMCsGA1UEAxMk Y2VjYWFlNDMtMWYyNy00NjFjLWFhMjgtMWE0OTU5MmQwOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj11HLs8AQOAcWztbhECtfSEY0RPpLtd1VrnZ J2FbWHKOXJDMDiFvs8mjzEHCCuLWIzFnEA2npu5jL65K8lSd+xcg11I/3jjQedIC OB6PkfE94WZUF30i4nO1HV1m1LA5oyY1fy+6b4EEqrrCbyGkahAr5qEvJfJsgpkE gKy9rgSsTZqsKSkiDk0BvbImapW5+9Hq9jvddEVAiOOxrcH9O/BTj4fzoyYvMY5Y 7Fl/EeWF7wVhf6SqBf2tA8w/n8shffuU1aHSfF4YjWJl6LnIf9btXU2Om9YMjcU7 o5+C304C0puzm5+8iI/M0hEIH1M++KUxFOghnnnba16cskN+qQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCSm0o3FLdahfr+Q3bMcCxjBIoxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTk2ZGEyNDctYzEwNy0z MzQzLWI2MWUtZjgyZDE1M2VhZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJSQ1sbaRZBREiSXNLW+ejEk5KHg+7+8RXopCUL8viGqYmZRL5uH itzAOSYNxxB7NGxrjXF0TVQOb6XRIdieGTmU7bS5Vv4kWV30uNJ8xbR0ybuBXt+k 0YM0N0HapLwnV8K2Pf2K5Dyn2n6aIawWBPsKxuNAshs7BBdnup+H+9tcXtzE5FzG Kf//jW6ks142To9LVx2QqYpMgX0t3Rjxv0Sye1abVMG+dNlpykM2ZqlhiMOTJMb3 cSwgy7Ertq81HFmLchcw8g/Gj6kviF+xSoYiH+RTeC63KxdrTu1mQEZNGt6Ff5UB 9wBVblxCVH1b4vz0XdmBzG8E+9jl6dWyvp0= -----END CERTIFICATE-----Generated at Mon Jun 16 08:16:50 2025 by rpki-client