$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b8ef084-52b0-309e-b90d-78e265d1b91d.roa File: 0b8ef084-52b0-309e-b90d-78e265d1b91d.roa (raw, json) Hash identifier: eQ8ywX3uLJE7FD8MqF2YwKN3b70Qs48Hq16a2AhyVyA= Subject key identifier: 29:28:9B:4B:EA:40:CD:38:32:20:6F:F2:B5:E7:DD:85:B4:87:A8:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB23F0CC271D8594B187E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b8ef084-52b0-309e-b90d-78e265d1b91d.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396569 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:23:f0:cc:27:1d:85:94:b1:87:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=323514b3-13d0-4d1b-ad57-a14560e12097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:31:9f:ce:59:03:96:80:a4:30:50:f9:b2: c3:a7:5f:2a:a5:12:a6:77:2a:71:3d:d3:de:bb:95: ff:2c:36:40:f3:dc:5f:c9:82:f3:c3:f3:70:cf:0f: f1:31:f2:79:5f:3a:7a:9a:34:8b:0f:e2:3a:10:24: a0:bd:38:b7:de:2d:be:e1:0d:f6:63:6b:eb:2d:03: e7:ee:ce:b8:5e:c9:8d:e8:e0:d6:c3:d5:9b:9c:66: f3:c0:f4:ba:a6:b8:3e:7d:63:6c:2c:ad:a0:14:21: 7f:6b:b8:b6:a9:e9:cb:81:d7:d5:b9:d1:81:e7:94: c6:b9:e0:ca:27:28:47:1e:1b:2f:14:47:99:f6:6f: cd:da:21:59:d6:3e:7b:d9:35:87:e8:cc:de:00:7e: aa:30:91:ad:4b:19:82:3b:4f:32:99:34:c6:0f:70: 87:0f:41:44:b6:aa:9d:ce:e8:d1:49:b2:97:ed:ac: 45:58:fa:0d:b9:1b:87:3f:3a:91:02:11:e3:e2:5b: 9f:2a:94:e7:71:77:16:69:3a:5d:fb:9b:4d:25:cc: a8:58:7c:13:23:9f:98:ef:ea:c5:90:e0:20:fa:5d: 99:ae:56:b3:97:b0:14:0e:72:b1:53:52:b7:58:9e: e0:6a:07:24:e7:be:ea:b3:07:d0:55:aa:34:0d:74: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:9B:4B:EA:40:CD:38:32:20:6F:F2:B5:E7:DD:85:B4:87:A8:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b8ef084-52b0-309e-b90d-78e265d1b91d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6e:00:bf:cd:57:bf:ad:46:88:a9:47:39:98:47:03:a2:48: 62:e2:cc:92:bd:31:58:a1:9b:ba:00:38:ac:5e:b1:46:29:d9: 53:b5:08:90:c6:3a:c0:94:fd:53:af:75:f3:fe:43:25:68:7f: 01:70:a6:d2:5b:66:7d:fb:ac:4c:ec:a1:d0:ff:e4:2f:b2:68: e5:7b:62:3e:09:fd:8a:f6:00:9c:dc:51:50:32:99:02:5e:02: e9:52:8b:10:ff:6f:ef:54:1b:05:8b:e8:d1:f5:fd:b8:2f:78: 48:1d:9b:c9:0d:b2:75:49:28:f7:be:c8:9e:8f:e8:94:81:4b: 04:ac:e9:47:7b:a4:bd:6f:36:90:0c:5c:e6:aa:07:7a:b1:06: c5:c8:fa:b7:e3:02:a3:51:95:a5:3a:b6:d8:f9:80:65:4b:b6: e2:7a:51:82:f2:c3:74:bf:62:1a:ea:cf:88:68:d7:96:98:ce: 8b:90:3f:53:bc:fc:22:19:e7:c5:0f:c9:6c:da:af:66:55:56: 25:05:45:d6:26:1d:dd:e4:bc:3c:88:31:1f:ef:23:16:d5:04: c2:b0:60:b9:d4:e6:75:32:22:3a:3a:d7:8a:8c:5e:fe:b6:4e: d0:29:bd:b2:c9:7f:e2:62:09:d4:7e:6f:58:f3:42:2d:5a:d8: 6b:13:bc:92 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2yPwzCcdhZSxh+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MzIzNTE0YjMtMTNkMC00ZDFiLWFkNTctYTE0NTYwZTEyMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZExn85ZA5aApDBQ+bLDp18qpRKmdypxPdPe u5X/LDZA89xfyYLzw/Nwzw/xMfJ5Xzp6mjSLD+I6ECSgvTi33i2+4Q32Y2vrLQPn 7s64XsmN6ODWw9WbnGbzwPS6prg+fWNsLK2gFCF/a7i2qenLgdfVudGB55TGueDK JyhHHhsvFEeZ9m/N2iFZ1j572TWH6MzeAH6qMJGtSxmCO08ymTTGD3CHD0FEtqqd zujRSbKX7axFWPoNuRuHPzqRAhHj4lufKpTncXcWaTpd+5tNJcyoWHwTI5+Y7+rF kOAg+l2Zrlazl7AUDnKxU1K3WJ7gagck577qswfQVao0DXSSgwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCkom0vqQM04MiBv8rXn3YW0h6j0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI4ZWYwODQtNTJiMC0z MDllLWI5MGQtNzhlMjY1ZDFiOTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAjbgC/zVe/rUaIqUc5mEcDokhi4sySvTFYoZu6 ADisXrFGKdlTtQiQxjrAlP1Tr3Xz/kMlaH8BcKbSW2Z9+6xM7KHQ/+Qvsmjle2I+ Cf2K9gCc3FFQMpkCXgLpUosQ/2/vVBsFi+jR9f24L3hIHZvJDbJ1SSj3vsiej+iU gUsErOlHe6S9bzaQDFzmqgd6sQbFyPq34wKjUZWlOrbY+YBlS7bielGC8sN0v2Ia 6s+IaNeWmM6LkD9TvPwiGefFD8ls2q9mVVYlBUXWJh3d5Lw8iDEf7yMW1QTCsGC5 1OZ1MiI6OteKjF7+tk7QKb2yyX/iYgnUfm9Y80ItWthrE7yS -----END CERTIFICATE-----Generated at Fri Jun 6 19:40:35 2025 by rpki-client