$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a443d24-aa48-3f65-84bc-fbddf3145071.roa File: 0a443d24-aa48-3f65-84bc-fbddf3145071.roa (raw, json) Hash identifier: /INSW3y38SC49iWrqdhmZQYBA2+X5f9DeBUpvV+Gxa8= Subject key identifier: 18:9D:E4:16:6B:7F:74:1C:4B:B8:A8:62:5D:A9:9E:0A:1B:81:78:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB22DF91762561C1A703C4 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a443d24-aa48-3f65-84bc-fbddf3145071.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 21313 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:22:df:91:76:25:61:c1:a7:03:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=86a3ccc3-ff48-414c-8998-20d18edb5a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:11:0f:7e:84:2f:d4:1f:7e:94:21:92:81:d1: d9:61:b6:24:b5:4d:9b:73:8c:48:b6:bb:dc:b1:59: 8c:e2:8b:a0:92:6a:09:70:f2:1c:9f:85:96:68:d8: 04:a3:0b:0b:6c:14:5c:78:0f:62:ae:7f:65:95:19: ea:41:0b:dd:a6:79:ab:6c:d1:ec:ca:b5:a2:0c:3c: c8:66:33:e7:66:02:d5:8d:67:84:30:9c:f1:67:ba: 7a:a8:ab:7e:d5:2d:d7:99:cd:ca:0b:ac:2f:4a:3a: 2d:4b:46:c4:30:f9:ff:83:d6:59:ca:30:83:e7:20: ef:f7:aa:9e:ab:fa:76:cc:89:38:42:d2:54:54:67: 03:3e:14:5e:db:58:6a:ea:14:21:45:82:7a:55:1a: c6:73:23:b2:e8:bc:40:0e:58:b0:be:e6:04:aa:f5: 50:d6:ec:cb:2f:d9:63:6f:f9:35:3d:2a:ff:a4:57: 49:cd:05:88:8e:50:58:10:65:ca:ef:c3:78:e1:8d: a8:3b:8e:b5:a6:67:f6:b8:a4:fc:fd:48:77:ee:c4: 36:cf:96:ec:bc:07:37:d5:0e:73:22:8f:12:a6:fe: f8:46:91:70:13:65:dd:27:81:c2:b4:f4:8e:cb:15: 8f:3a:07:98:87:6f:58:73:ed:0f:06:6e:fd:d3:9b: 20:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9D:E4:16:6B:7F:74:1C:4B:B8:A8:62:5D:A9:9E:0A:1B:81:78:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a443d24-aa48-3f65-84bc-fbddf3145071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f2:e0:d6:65:d4:84:79:fa:27:f7:5d:f8:a2:b2:5a:c4:67: ee:8b:d3:1e:1a:b0:4c:40:95:e0:5f:80:ac:6b:11:ea:ca:37: bc:8d:a8:d2:03:5b:3b:bd:07:74:2e:fe:3d:b3:af:a3:f7:a0: f6:bd:14:a8:3b:75:02:06:3e:d9:d0:98:5b:4d:c3:74:3d:ea: f3:fc:85:cb:38:92:46:5c:4d:10:77:cb:aa:ad:d8:4f:7e:de: 5c:f1:6c:6d:7d:38:6b:52:a3:8d:c8:45:44:53:02:71:74:c6: 96:ba:18:2f:61:51:db:5b:5d:86:d6:4b:7d:96:9b:67:7e:c3: c4:1b:73:57:39:b8:a2:7b:bf:68:f5:58:e7:58:dd:ec:22:17: ee:3a:cc:87:71:6f:50:ee:f4:af:01:c9:6d:6d:1f:3e:c8:5b: 65:72:78:af:32:c8:3b:fb:b9:78:63:11:2e:c9:6a:33:ae:70: 47:64:ae:01:ab:92:f8:19:be:43:bc:c4:6c:af:04:f9:c2:d4: bb:cb:7c:00:33:a9:63:2e:72:3b:3f:f5:4d:79:e0:24:17:65: 9c:31:95:5b:90:1a:a7:b6:8c:69:f3:5a:cf:76:a0:21:58:12: 9a:fa:03:32:60:16:61:c9:4f:9d:30:15:c7:79:72:87:15:74: 64:96:3a:c0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2yLfkXYlYcGnA8QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ODZhM2NjYzMtZmY0OC00MTRjLTg5OTgtMjBkMThlZGI1YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlREPfoQv1B9+lCGSgdHZYbYktU2bc4xItrvc sVmM4ougkmoJcPIcn4WWaNgEowsLbBRceA9irn9llRnqQQvdpnmrbNHsyrWiDDzI ZjPnZgLVjWeEMJzxZ7p6qKt+1S3Xmc3KC6wvSjotS0bEMPn/g9ZZyjCD5yDv96qe q/p2zIk4QtJUVGcDPhRe21hq6hQhRYJ6VRrGcyOy6LxADliwvuYEqvVQ1uzLL9lj b/k1PSr/pFdJzQWIjlBYEGXK78N44Y2oO461pmf2uKT8/Uh37sQ2z5bsvAc31Q5z Io8Spv74RpFwE2XdJ4HCtPSOyxWPOgeYh29Yc+0PBm7905sgcwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBid5BZrf3QcS7ioYl2pngobgXhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGE0NDNkMjQtYWE0OC0z ZjY1LTg0YmMtZmJkZGYzMTQ1MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBi8uDWZdSEefon9134orJaxGfui9MeGrBMQJXg X4CsaxHqyje8jajSA1s7vQd0Lv49s6+j96D2vRSoO3UCBj7Z0JhbTcN0Perz/IXL OJJGXE0Qd8uqrdhPft5c8WxtfThrUqONyEVEUwJxdMaWuhgvYVHbW12G1kt9lptn fsPEG3NXObiie79o9VjnWN3sIhfuOsyHcW9Q7vSvAcltbR8+yFtlcnivMsg7+7l4 YxEuyWozrnBHZK4Bq5L4Gb5DvMRsrwT5wtS7y3wAM6ljLnI7P/VNeeAkF2WcMZVb kBqntoxp81rPdqAhWBKa+gMyYBZhyU+dMBXHeXKHFXRkljrA -----END CERTIFICATE-----Generated at Sun Jun 8 15:24:58 2025 by rpki-client