$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04e73404-7046-3213-968f-944a3436c4cc.roa File: 04e73404-7046-3213-968f-944a3436c4cc.roa (raw, json) Hash identifier: dMM/0qh68Q/Ab744FV3+4DxTA8FMMo6ZWGbszaW6JSM= Subject key identifier: A3:4C:70:82:3F:6B:6A:75:D5:AB:1B:A5:17:E9:F1:24:60:36:E6:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A17264188035DE7C23FE68700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04e73404-7046-3213-968f-944a3436c4cc.roa Signing time: Thu 05 Jun 2025 12:41:26 +0000 ROA not before: Thu 05 Jun 2025 12:41:26 +0000 ROA not after: Wed 03 Sep 2025 12:41:26 +0000 asID: 20172 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:26:41:88:03:5d:e7:c2:3f:e6:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 5 12:41:26 2025 GMT Not After : Sep 3 12:41:26 2025 GMT Subject: CN=d8b7e3a0-d2a6-4443-9add-9d7884e59dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b2:97:27:b7:bc:88:5d:bc:93:00:15:b1:24: bd:26:86:8f:e2:77:11:76:23:be:46:e7:0b:c9:14: aa:e7:32:58:85:31:63:40:96:4e:84:28:43:fe:a5: 21:9d:ab:58:5c:72:e8:21:85:52:aa:0e:8f:6c:bb: 33:60:36:d2:25:88:10:4f:cc:8b:00:d6:e8:b6:4e: 61:10:51:2d:c1:8b:60:a9:3b:90:5e:2d:89:62:0d: fa:ce:6b:40:94:8e:ef:75:3d:32:c5:c3:3b:82:7a: 69:9c:6e:90:f7:b7:59:c6:b0:6d:09:f8:44:d7:94: 58:2c:6f:f3:a3:ec:fc:f1:9a:9c:23:31:d1:d4:2b: a5:36:66:b9:10:11:4f:31:bd:e3:d5:f8:eb:a2:b3: 40:62:f4:d1:1d:4d:89:ce:1c:95:86:20:36:d3:c3: f3:ae:b4:fc:4b:50:25:34:79:ec:92:85:81:9e:72: a3:71:75:08:f9:1c:00:06:2c:31:da:6f:eb:b6:04: e9:75:2d:35:52:91:4a:ea:51:0f:7e:3f:e8:26:f2: 72:dc:a5:53:91:b1:6b:a6:a6:da:9a:65:26:0c:71: f9:d8:58:d9:a0:7f:6c:62:a6:4e:65:d4:47:b6:d7: cd:f0:aa:f9:28:9e:6f:ce:c8:84:5e:21:10:0c:f4: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4C:70:82:3F:6B:6A:75:D5:AB:1B:A5:17:E9:F1:24:60:36:E6:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04e73404-7046-3213-968f-944a3436c4cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c9:3d:d4:a9:e2:7b:6c:63:17:69:7b:b5:f0:69:a8:db:ec: e2:12:2f:7f:50:4a:04:aa:83:1a:f1:e1:f9:7d:1e:a4:70:15: 6e:b1:1a:06:ac:b9:89:9a:8a:94:64:54:39:b5:eb:7d:cb:de: ee:0d:84:a2:93:9e:13:c7:bd:34:c2:05:33:08:4d:80:db:87: 01:40:02:d3:59:9d:ff:6e:1f:b4:a2:4a:f2:17:b9:6c:23:1d: 6c:51:96:ae:21:df:46:e5:36:be:d3:76:6c:0f:c5:b5:ec:56: 76:34:41:57:32:de:51:f9:ff:c3:a1:f5:d0:31:a7:f5:38:e8: 2d:10:24:94:80:62:b4:23:c7:10:b8:98:e7:ce:a7:bb:07:36: 7b:1c:a9:af:a3:80:fb:9e:56:99:f4:bb:a8:c4:11:a2:85:d7: bb:fa:79:78:0a:7d:e0:47:c9:23:a7:92:40:da:bb:e5:9e:08: 3a:5a:4e:bd:9b:aa:e3:f2:c4:63:6d:ec:f0:7e:26:9d:89:62: 2f:a0:2f:3c:3e:15:e3:83:5f:68:a5:32:20:6a:4f:a3:b5:ef: e3:a4:b9:9e:ac:04:4a:dc:4a:ab:0b:bf:4b:ad:c4:af:f0:cf: 34:35:12:81:31:cd:7b:39:07:7a:e7:12:6d:c7:8a:da:59:fc: 3d:fe:c1:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoXJkGIA13nwj/mhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNTEyNDEyNloXDTI1MDkwMzEyNDEyNlowLzEtMCsGA1UEAxMk ZDhiN2UzYTAtZDJhNi00NDQzLTlhZGQtOWQ3ODg0ZTU5ZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLKXJ7e8iF28kwAVsSS9JoaP4ncRdiO+RucL yRSq5zJYhTFjQJZOhChD/qUhnatYXHLoIYVSqg6PbLszYDbSJYgQT8yLANbotk5h EFEtwYtgqTuQXi2JYg36zmtAlI7vdT0yxcM7gnppnG6Q97dZxrBtCfhE15RYLG/z o+z88ZqcIzHR1CulNma5EBFPMb3j1fjrorNAYvTRHU2JzhyVhiA208PzrrT8S1Al NHnskoWBnnKjcXUI+RwABiwx2m/rtgTpdS01UpFK6lEPfj/oJvJy3KVTkbFrpqba mmUmDHH52FjZoH9sYqZOZdRHttfN8Kr5KJ5vzsiEXiEQDPTabwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNMcII/a2p11asbpRfp8SRgNuYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDRlNzM0MDQtNzA0Ni0z MjEzLTk2OGYtOTQ0YTM0MzZjNGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHfJPdSp4ntsYxdpe7Xwaajb7OISL39QSgSqgxrx4fl9HqRwFW6x GgasuYmaipRkVDm1633L3u4NhKKTnhPHvTTCBTMITYDbhwFAAtNZnf9uH7SiSvIX uWwjHWxRlq4h30blNr7TdmwPxbXsVnY0QVcy3lH5/8Oh9dAxp/U46C0QJJSAYrQj xxC4mOfOp7sHNnscqa+jgPueVpn0u6jEEaKF17v6eXgKfeBHySOnkkDau+WeCDpa Tr2bquPyxGNt7PB+Jp2JYi+gLzw+FeODX2ilMiBqT6O17+OkuZ6sBErcSqsLv0ut xK/wzzQ1EoExzXs5B3rnEm3HitpZ/D3+wcc= -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:40 2025 by rpki-client