$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33497220-350a-3ed9-99be-fda9946df3c1.roa File: 33497220-350a-3ed9-99be-fda9946df3c1.roa (raw, json) Hash identifier: D8CKSjCQtxf6SdLfH8OazGFe8pMFsFnHrBOabsDeID0= Subject key identifier: 37:5F:62:73:3F:F8:52:01:A8:3B:79:CA:6F:77:FB:DD:6F:8C:73:BC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A093AA726F7033799F3560C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33497220-350a-3ed9-99be-fda9946df3c1.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 36630 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a7:26:f7:03:37:99:f3:56:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=74aa08d6-99cf-453a-83ec-106a3f19c211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1a:ff:2b:74:d9:a2:7a:1f:0a:68:7d:17:75: 79:0b:12:85:82:a3:68:95:78:a5:99:49:12:c0:41: 54:87:b3:58:de:8a:79:e8:d5:c9:8b:25:ec:5b:66: 15:3b:65:12:e4:86:f8:fd:6d:4d:3b:d3:55:c4:5d: c8:a4:95:96:c0:f2:58:85:07:46:f1:b4:06:b0:7a: 61:a2:35:fd:f8:5f:85:05:a9:6b:08:65:3b:79:00: 91:5d:b9:78:1d:58:82:2e:8d:8d:e3:7c:05:9e:d5: a1:34:41:12:e6:1b:90:f1:74:d4:d0:aa:ac:31:d9: 76:02:c7:3a:8e:61:7c:a9:b2:48:52:f7:1d:78:d2: 76:f7:ff:68:53:a1:e3:4b:0a:e5:ae:cc:50:80:3d: 4c:46:c3:b2:1d:4b:ed:a4:0d:53:ba:8b:9b:b0:5a: 08:c7:5f:df:09:a3:62:38:5c:46:58:42:67:dd:7a: a1:20:ae:ad:f0:97:57:ad:a7:3b:f0:fc:79:b1:e2: 44:2b:96:34:7f:32:9a:b4:06:85:63:a7:3d:35:0b: d6:b7:de:dc:dd:d7:ec:de:69:16:43:a8:a6:69:22: 47:cc:b0:1f:ef:85:30:8a:76:92:3b:08:43:19:7a: 75:9a:88:e7:37:19:3b:c2:52:84:54:38:4b:30:39: 55:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5F:62:73:3F:F8:52:01:A8:3B:79:CA:6F:77:FB:DD:6F:8C:73:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33497220-350a-3ed9-99be-fda9946df3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:b3:75:d8:f1:dc:7f:9d:f3:d6:ed:ed:36:f4:3e:b3:a2:35: 58:09:2e:8e:de:bc:e6:d0:92:f3:7f:1a:15:57:7e:ce:a7:8e: 83:f5:fe:69:be:b8:6b:1f:54:d8:46:11:76:a1:15:0f:27:67: 46:62:cd:71:b2:48:f0:64:66:14:64:51:97:97:40:d3:12:22: 26:a5:63:4a:df:ea:d9:91:d7:e5:9e:8e:7e:83:41:82:62:d8: 51:f0:69:34:04:66:10:61:39:21:51:8e:e2:9d:7a:c5:ed:8a: 8b:ba:1d:3a:d8:44:90:fd:ea:19:cf:52:e6:75:2f:b1:02:54: 87:63:ce:b6:c6:21:9d:b0:41:15:e1:57:82:12:6a:e1:48:d7: 4d:c6:2f:2f:34:81:e2:80:f2:0f:f4:03:11:29:a3:ba:9a:c4: e3:cf:b9:c4:de:79:b4:98:de:bf:1f:f8:5a:f2:e1:5a:b1:5b: 79:3a:13:44:41:ad:57:ea:d8:cb:8f:71:da:ac:ab:ac:fb:18: d9:f0:d6:df:52:e4:6f:df:2d:fe:6d:f8:4f:36:28:ea:fc:33: 44:f6:6f:80:e6:a8:ef:63:ac:00:ad:ff:13:b0:13:b0:64:af: 22:0d:ee:ba:a4:0a:76:9e:f7:e9:3f:52:7c:4e:7a:66:6e:63: 77:43:24:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqcm9wM3mfNWDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk NzRhYTA4ZDYtOTljZi00NTNhLTgzZWMtMTA2YTNmMTljMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxr/K3TZonofCmh9F3V5CxKFgqNolXilmUkS wEFUh7NY3op56NXJiyXsW2YVO2US5Ib4/W1NO9NVxF3IpJWWwPJYhQdG8bQGsHph ojX9+F+FBalrCGU7eQCRXbl4HViCLo2N43wFntWhNEES5huQ8XTU0KqsMdl2Asc6 jmF8qbJIUvcdeNJ29/9oU6HjSwrlrsxQgD1MRsOyHUvtpA1TuoubsFoIx1/fCaNi OFxGWEJn3XqhIK6t8JdXrac78Px5seJEK5Y0fzKatAaFY6c9NQvWt97c3dfs3mkW Q6imaSJHzLAf74UwinaSOwhDGXp1mojnNxk7wlKEVDhLMDlV6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDdfYnM/+FIBqDt5ym93+91vjHO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM0OTcyMjAtMzUwYS0z ZWQ5LTk5YmUtZmRhOTk0NmRmM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAMs3XY8dx/nfPW7e029D6zojVYCS6O3rzm0JLz fxoVV37Op46D9f5pvrhrH1TYRhF2oRUPJ2dGYs1xskjwZGYUZFGXl0DTEiImpWNK 3+rZkdflno5+g0GCYthR8Gk0BGYQYTkhUY7inXrF7YqLuh062ESQ/eoZz1LmdS+x AlSHY862xiGdsEEV4VeCEmrhSNdNxi8vNIHigPIP9AMRKaO6msTjz7nE3nm0mN6/ H/ha8uFasVt5OhNEQa1X6tjLj3HarKus+xjZ8NbfUuRv3y3+bfhPNijq/DNE9m+A 5qjvY6wArf8TsBOwZK8iDe66pAp2nvfpP1J8TnpmbmN3QySt -----END CERTIFICATE-----Generated at Fri Jun 6 19:34:26 2025 by rpki-client