$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/056a4d11-9e9d-36c6-a35e-9c485b5f2ee0.roa File: 056a4d11-9e9d-36c6-a35e-9c485b5f2ee0.roa (raw, json) Hash identifier: z43oSvhDQrAtW+Es4JRnjQLdIqwwUeefLueja+5XMZo= Subject key identifier: 72:7A:E6:6C:6F:B8:60:0B:D4:AD:69:31:29:51:D3:8C:67:9F:AB:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB2BBD5B52AA1D3C395920 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/056a4d11-9e9d-36c6-a35e-9c485b5f2ee0.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396589 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:2b:bd:5b:52:aa:1d:3c:39:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=bf35a3e5-637e-4267-81a8-852650896992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f9:ba:57:83:94:ed:4e:25:11:5f:68:29:a0: 23:72:76:76:35:44:18:57:9a:44:c8:bf:a8:99:c7: 6a:51:1d:1f:b1:e5:a7:ec:8f:ea:b4:5d:11:21:69: 60:4a:49:1f:10:70:23:4b:33:76:7e:02:cd:71:16: ef:b1:bc:0a:66:bc:5f:57:2b:0b:cf:70:c5:11:83: 5c:41:e0:c8:e8:a0:5a:21:00:98:8b:8f:b2:ed:84: 36:8c:ab:58:fe:a7:ed:21:1f:09:b7:b4:ff:13:89: 3b:4d:66:94:c9:22:36:61:72:87:00:bd:d3:61:ff: 85:3e:72:8a:72:d1:87:ca:51:3b:ee:5f:4d:f6:72: 13:d3:0b:78:05:a4:78:3c:ce:78:98:92:77:50:81: 44:1c:21:87:cd:84:3e:ff:fb:23:f3:38:1f:6b:e7: 08:9f:34:3e:4e:ae:d3:13:26:33:dd:9f:05:9a:1f: 87:30:4c:b5:4b:4b:52:f1:59:53:1b:4c:a1:41:a1: f9:6f:80:ff:a8:3e:c9:5d:be:88:3e:89:6e:a5:b5: c7:2d:95:23:0c:35:e4:44:11:6a:3c:4b:d2:0e:33: 9f:a9:a1:2a:26:19:72:3c:f4:d7:b8:69:93:75:2f: b1:02:b4:7e:93:dd:02:ce:96:27:59:02:1a:f3:18: 00:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7A:E6:6C:6F:B8:60:0B:D4:AD:69:31:29:51:D3:8C:67:9F:AB:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/056a4d11-9e9d-36c6-a35e-9c485b5f2ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:25:d2:bd:6c:9b:79:32:5c:ec:d3:99:09:0d:d2:64:f9:2d: 54:cf:07:7a:d1:f2:28:d6:57:38:c6:d9:59:07:82:46:cc:a2: f1:b6:2b:34:a6:f1:1d:1b:ca:b9:1b:5e:39:ae:7d:d4:6a:4f: 15:9a:f0:8a:f1:50:78:64:b7:d3:47:dd:b6:57:e1:8d:e9:00: d5:f7:94:4c:34:6c:8b:9b:eb:77:d3:58:c2:f3:38:07:ea:a9: d9:74:b4:5e:81:60:e1:60:1e:97:97:12:cb:8f:ef:16:40:bb: 14:a0:4e:e7:be:be:35:3d:97:34:b9:58:6a:b9:6e:33:d6:d0: 6b:41:71:55:b4:e5:95:a0:37:58:09:75:fc:6d:f7:37:4b:8a: 66:56:86:cc:8b:86:10:21:f0:4c:20:a2:65:fe:f3:86:0b:0b: a0:56:21:93:4e:0b:ff:8d:e7:a5:ea:94:bd:f3:a3:94:d1:53: cd:84:04:20:ec:4b:a7:ad:5c:39:91:aa:2f:9c:fa:bd:4c:7c: b1:f8:ef:a6:4b:f5:be:4a:c3:6c:c8:e5:cb:47:61:af:ca:33: 45:94:10:30:b6:3f:e3:0e:5c:59:31:91:2a:e1:f1:a9:2e:57: cf:fb:73:2d:52:36:e3:f2:ee:80:b7:db:f4:20:e0:50:0e:4a: 9b:89:5a:27 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2yu9W1KqHTw5WSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YmYzNWEzZTUtNjM3ZS00MjY3LTgxYTgtODUyNjUwODk2OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfm6V4OU7U4lEV9oKaAjcnZ2NUQYV5pEyL+o mcdqUR0fseWn7I/qtF0RIWlgSkkfEHAjSzN2fgLNcRbvsbwKZrxfVysLz3DFEYNc QeDI6KBaIQCYi4+y7YQ2jKtY/qftIR8Jt7T/E4k7TWaUySI2YXKHAL3TYf+FPnKK ctGHylE77l9N9nIT0wt4BaR4PM54mJJ3UIFEHCGHzYQ+//sj8zgfa+cInzQ+Tq7T EyYz3Z8Fmh+HMEy1S0tS8VlTG0yhQaH5b4D/qD7JXb6IPolupbXHLZUjDDXkRBFq PEvSDjOfqaEqJhlyPPTXuGmTdS+xArR+k90CzpYnWQIa8xgABQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHJ65mxvuGAL1K1pMSlR04xnn6usMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDU2YTRkMTEtOWU5ZC0z NmM2LWEzNWUtOWM0ODViNWYyZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnJdK9bJt5Mlzs05kJDdJk+S1Uzwd60fIo1lc4 xtlZB4JGzKLxtis0pvEdG8q5G145rn3Uak8VmvCK8VB4ZLfTR922V+GN6QDV95RM NGyLm+t301jC8zgH6qnZdLRegWDhYB6XlxLLj+8WQLsUoE7nvr41PZc0uVhquW4z 1tBrQXFVtOWVoDdYCXX8bfc3S4pmVobMi4YQIfBMIKJl/vOGCwugViGTTgv/jeel 6pS986OU0VPNhAQg7EunrVw5kaovnPq9THyx+O+mS/W+SsNsyOXLR2GvyjNFlBAw tj/jDlxZMZEq4fGpLlfP+3MtUjbj8u6At9v0IOBQDkqbiVon -----END CERTIFICATE-----Generated at Sat Jun 7 04:11:48 2025 by rpki-client