$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa File: 21aa4f37-1aef-3131-91eb-374125dffe2b.roa (raw, json) Hash identifier: IQFrkd32IA7Ht7JdtJB5VbvjD1615feEcJYoBmFqCI0= Subject key identifier: E2:B3:6B:1C:6D:8C:95:26:61:FD:FF:AC:9E:5C:69:A6:5B:FF:B6:B0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB22850961C685E150A223 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396617 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:22:85:09:61:c6:85:e1:50:a2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=cca20aaf-1d17-4b76-8ca0-84fcb6859bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:37:e4:55:94:1f:1d:6f:e5:97:62:1b:f7:b9: 5a:97:3a:e4:b4:80:76:45:51:60:3a:4a:9a:12:87: c2:d7:d6:6b:d4:1b:cf:1d:02:e6:53:8b:a7:15:53: 7c:16:4f:2d:14:3e:c8:f2:b5:78:7b:cb:d1:bf:b3: ca:b7:55:05:ec:2c:4b:f1:14:27:c2:bb:0e:b7:f9: ec:88:0a:4a:3d:94:c3:88:a2:7a:23:ca:86:a3:43: 30:26:9c:28:5a:a9:3f:0e:de:34:db:f0:8d:31:38: 98:82:96:b6:d9:c5:40:4a:cb:04:8d:e7:46:87:ed: ae:11:3a:94:70:33:4b:2e:a4:6e:1c:91:a6:18:c1: 97:6d:13:99:35:04:ce:be:85:21:9f:a1:db:d5:70: c5:6b:a4:68:3e:ad:03:29:c1:b0:92:56:19:2d:a4: 18:ee:b0:28:bb:56:f4:52:7e:59:6f:13:77:ba:28: 12:b3:9b:c1:48:e7:c8:cc:6e:e2:1c:35:e6:32:c5: fc:86:55:20:35:62:a4:1b:d6:b6:e8:d3:fd:bc:e5: 23:37:7c:db:5a:cd:53:bb:67:cb:84:00:0e:05:0c: 45:a3:95:d6:5e:67:c1:bd:3c:ac:7e:ba:48:8b:4e: 63:7b:07:04:a9:7d:f2:97:69:e2:28:50:cc:93:95: e7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B3:6B:1C:6D:8C:95:26:61:FD:FF:AC:9E:5C:69:A6:5B:FF:B6:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:0c:96:e6:47:dd:2d:63:f8:ba:09:13:33:e7:e3:a4:19:9c: f1:75:3c:59:65:45:33:55:69:60:55:39:5b:33:d8:89:c7:45: 4a:ec:27:48:d8:a2:80:91:cc:81:9a:6c:58:65:cc:d7:1c:f8: 49:62:1a:8c:52:76:22:64:c8:f5:c8:b9:d2:52:fc:0a:75:1c: 7a:06:84:a3:ac:da:ae:46:51:96:ef:2f:e0:73:cc:f8:10:e8: 04:64:01:db:71:80:29:7d:1d:52:4f:a8:27:70:b5:05:be:37: cf:cb:5c:38:53:c8:53:6f:56:e5:df:3b:7f:0c:09:a1:96:e7: 19:4d:44:3f:8e:1a:d4:96:76:b9:d5:92:53:2b:5e:7c:f2:ed: 8d:50:f8:cc:84:48:a7:22:42:92:2c:f9:b7:3a:9f:85:31:64: 38:08:a9:07:e4:09:39:6e:64:92:43:9a:79:33:05:cd:dc:54: 91:4f:5c:ce:98:29:2e:17:5a:da:a1:84:fd:e8:9b:7b:e6:62: e9:7d:15:f2:f9:53:4b:c4:50:15:de:8a:a7:82:41:62:53:c3: c0:a1:7b:31:29:78:33:b4:18:de:a5:42:26:35:5a:e8:ed:55: 6a:3d:7a:9b:18:31:3e:c3:cb:46:b6:03:6f:53:81:53:f9:53: 2f:77:be:72 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2yKFCWHGheFQoiMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk Y2NhMjBhYWYtMWQxNy00Yjc2LThjYTAtODRmY2I2ODU5YmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzfkVZQfHW/ll2Ib97lalzrktIB2RVFgOkqa EofC19Zr1BvPHQLmU4unFVN8Fk8tFD7I8rV4e8vRv7PKt1UF7CxL8RQnwrsOt/ns iApKPZTDiKJ6I8qGo0MwJpwoWqk/Dt402/CNMTiYgpa22cVASssEjedGh+2uETqU cDNLLqRuHJGmGMGXbROZNQTOvoUhn6Hb1XDFa6RoPq0DKcGwklYZLaQY7rAou1b0 Un5ZbxN3uigSs5vBSOfIzG7iHDXmMsX8hlUgNWKkG9a26NP9vOUjN3zbWs1Tu2fL hAAOBQxFo5XWXmfBvTysfrpIi05jewcEqX3yl2niKFDMk5XnPQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOKzaxxtjJUmYf3/rJ5caaZb/7awMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFhYTRmMzctMWFlZi0z MTMxLTkxZWItMzc0MTI1ZGZmZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC6DJbmR90tY/i6CRMz5+OkGZzxdTxZZUUzVWlg VTlbM9iJx0VK7CdI2KKAkcyBmmxYZczXHPhJYhqMUnYiZMj1yLnSUvwKdRx6BoSj rNquRlGW7y/gc8z4EOgEZAHbcYApfR1ST6gncLUFvjfPy1w4U8hTb1bl3zt/DAmh lucZTUQ/jhrUlna51ZJTK1588u2NUPjMhEinIkKSLPm3Op+FMWQ4CKkH5Ak5bmSS Q5p5MwXN3FSRT1zOmCkuF1raoYT96Jt75mLpfRXy+VNLxFAV3oqngkFiU8PAoXsx KXgztBjepUImNVro7VVqPXqbGDE+w8tGtgNvU4FT+VMvd75y -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:25 2025 by rpki-client