$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e4983-8132-358b-9901-3af64ac986b8.roa File: 152e4983-8132-358b-9901-3af64ac986b8.roa (raw, json) Hash identifier: BMwX3T4PXglsKf847cCtqCF1/MOQhINyq33ApCfP6rk= Subject key identifier: D3:3E:49:D2:D7:D0:C1:BF:65:F0:9B:15:95:5B:84:D2:72:43:F8:06 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A03A567CEDA82FE524DF8EE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e4983-8132-358b-9901-3af64ac986b8.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 396591 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:67:ce:da:82:fe:52:4d:f8:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=a3a2329a-64f4-45fe-9354-fd2886fe2d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:84:3a:8b:b6:c4:40:55:91:69:48:ee:4f:7e: 96:a2:ec:d2:de:86:ee:bb:2f:6c:5a:50:f0:d7:f8: de:f0:2d:1e:ca:e8:b4:3f:18:b0:87:a7:44:35:6d: fb:81:bb:a2:34:57:48:e1:a4:3b:c3:f1:34:14:1b: 8f:5c:9d:08:6b:b9:49:d7:3d:8c:0c:29:10:b7:c6: 8c:a6:9e:dd:18:db:8d:81:9b:c7:8d:38:7b:db:6f: f2:15:3f:c7:e5:2c:3e:7a:b2:4c:99:6e:b1:61:96: bc:4e:70:ac:fb:0d:fb:cc:cb:6a:36:5e:98:f0:26: c1:11:c7:d2:b1:f2:96:2b:c1:90:45:43:e8:07:cf: 10:9e:a7:9f:5a:8c:72:9e:8f:96:1f:43:ef:4c:c9: 4f:b8:f7:f0:2b:3d:0d:cf:ad:38:73:7e:75:61:b3: c0:68:dd:ea:4a:a8:58:6a:0e:03:ce:4d:e1:72:63: 48:16:94:f4:e7:b0:d9:fb:b9:e8:34:90:42:50:4e: d9:65:2f:de:92:22:1e:ca:c4:f8:17:72:b9:f2:ee: f1:6f:9b:bd:fe:35:8f:26:66:15:9e:66:6b:0a:ac: d9:19:a8:ab:3a:b7:8d:e0:9e:06:2d:84:b4:6d:f1: f1:83:ef:2e:cc:7c:fe:c5:8e:5f:71:4f:a3:5a:65: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3E:49:D2:D7:D0:C1:BF:65:F0:9B:15:95:5B:84:D2:72:43:F8:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e4983-8132-358b-9901-3af64ac986b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:0c:09:2d:e1:07:4c:63:36:f1:18:5b:8e:1a:f1:7a:e0:1d: cc:62:fe:80:ca:65:34:d0:37:e3:c7:7e:32:ae:10:84:2c:ce: 77:84:7d:fc:ef:09:95:ba:5c:f5:db:e2:da:aa:6f:af:34:a4: 6f:64:7c:16:ff:24:92:43:22:8e:33:5a:bc:38:6e:fc:39:c0: aa:74:13:76:86:37:cc:21:12:3a:a6:fe:53:26:e9:09:b6:04: e1:55:c0:0f:df:4e:e9:93:0a:e7:32:47:e7:b2:e4:0a:22:df: ba:7f:83:e5:0b:0e:80:49:7b:b3:7b:80:ea:8e:74:e6:ec:95: 78:e3:39:e7:f6:7b:f8:38:cd:e9:f5:09:4a:64:97:bc:3e:5c: a0:16:d9:55:93:62:93:ad:4c:f1:87:cb:91:73:b6:88:34:5d: a3:1a:6f:d1:09:c1:ec:47:2c:37:a3:71:82:fa:f4:db:b2:d1: 86:c0:74:48:0d:de:ab:1c:22:f9:62:bd:06:8c:76:09:45:96: c9:2a:47:2c:f9:67:e7:73:f1:79:79:16:b2:47:d6:b1:64:42: ef:d7:b2:04:f9:a0:47:d9:79:46:92:3e:6f:8e:ba:30:fb:dd: 6b:00:21:67:5e:3b:8b:34:de:9d:9b:90:ef:8d:b6:c4:26:02: 8c:e3:39:95 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoDpWfO2oL+Uk347gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk YTNhMjMyOWEtNjRmNC00NWZlLTkzNTQtZmQyODg2ZmUyZDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioQ6i7bEQFWRaUjuT36WouzS3obuuy9sWlDw 1/je8C0eyui0Pxiwh6dENW37gbuiNFdI4aQ7w/E0FBuPXJ0Ia7lJ1z2MDCkQt8aM pp7dGNuNgZvHjTh722/yFT/H5Sw+erJMmW6xYZa8TnCs+w37zMtqNl6Y8CbBEcfS sfKWK8GQRUPoB88QnqefWoxyno+WH0PvTMlPuPfwKz0Nz604c351YbPAaN3qSqhY ag4Dzk3hcmNIFpT057DZ+7noNJBCUE7ZZS/ekiIeysT4F3K58u7xb5u9/jWPJmYV nmZrCqzZGairOreN4J4GLYS0bfHxg+8uzHz+xY5fcU+jWmVUdwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNM+SdLX0MG/ZfCbFZVbhNJyQ/gGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyZTQ5ODMtODEzMi0z NThiLTk5MDEtM2FmNjRhYzk4NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBXDAkt4QdMYzbxGFuOGvF64B3MYv6AymU00Dfj x34yrhCELM53hH387wmVulz12+Laqm+vNKRvZHwW/ySSQyKOM1q8OG78OcCqdBN2 hjfMIRI6pv5TJukJtgThVcAP307pkwrnMkfnsuQKIt+6f4PlCw6ASXuze4DqjnTm 7JV44znn9nv4OM3p9QlKZJe8PlygFtlVk2KTrUzxh8uRc7aINF2jGm/RCcHsRyw3 o3GC+vTbstGGwHRIDd6rHCL5Yr0GjHYJRZbJKkcs+Wfnc/F5eRayR9axZELv17IE +aBH2XlGkj5vjrow+91rACFnXjuLNN6dm5DvjbbEJgKM4zmV -----END CERTIFICATE-----Generated at Sun Jun 8 13:50:53 2025 by rpki-client