$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33645eec-6398-3098-8d26-01cb165ce9f7.roa File: 33645eec-6398-3098-8d26-01cb165ce9f7.roa (raw, json) Hash identifier: 843+UX/qXuJempQKKp0PbUyZbOfK3oanLbmAwrg64jY= Subject key identifier: F2:5A:A9:7F:7E:BD:AD:F1:19:D7:B4:22:BD:DA:CC:C6:18:76:65:72 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A18955D1DA10C5F398D85C600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33645eec-6398-3098-8d26-01cb165ce9f7.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 396564 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:5d:1d:a1:0c:5f:39:8d:85:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=c87e36d2-a062-4e62-9b92-b9908d9a5def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:93:d9:b4:d5:c8:ab:59:4c:89:8b:c8:15: bc:bb:02:e8:4a:10:98:7f:41:05:cd:00:9a:ab:cc: f3:49:e3:13:39:84:a4:a6:3d:da:95:e3:39:e4:9f: 0a:11:b4:24:af:70:08:8f:c5:60:e5:77:84:d2:6b: 4a:1e:45:01:74:1b:d7:bf:13:72:63:1f:17:cd:d5: 89:17:cb:c0:c8:4f:45:8d:a2:9c:f8:96:47:25:fa: bc:e6:f2:19:b1:ea:e8:f7:53:40:a6:a0:99:01:2e: 43:c7:26:f3:a8:8b:22:ce:ee:a2:00:16:27:25:e1: 88:42:a6:69:dc:c7:42:57:ca:72:a7:fe:9b:8c:f7: 3d:4c:9c:4b:4d:74:88:74:e3:72:22:96:6b:37:2a: e8:bb:16:88:84:d9:59:f0:7c:6e:77:ca:2a:c9:aa: a1:2f:35:9c:65:89:92:f4:2e:c9:ef:5d:ac:9e:73: 6c:71:36:e6:c7:dc:66:3f:cc:0e:da:37:be:92:5f: 4e:0a:65:e5:d0:65:70:02:28:50:30:ad:69:60:40: 6c:bf:0d:eb:f5:d9:d8:31:20:bb:dc:d8:ae:bd:9a: 17:f6:ed:19:a7:35:53:d5:d5:b0:e7:19:0a:50:6e: de:98:f1:0e:01:38:14:11:6e:1f:11:79:d6:1f:33: 6e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5A:A9:7F:7E:BD:AD:F1:19:D7:B4:22:BD:DA:CC:C6:18:76:65:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33645eec-6398-3098-8d26-01cb165ce9f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:aa:4c:ef:ab:ab:de:cd:17:a1:c2:6d:19:47:37:92:93:10: 4f:0d:c7:82:69:64:3c:c1:16:68:c5:ad:8a:9f:dd:80:87:0a: eb:5a:dd:f6:c7:1a:2b:82:9b:d4:b7:03:19:11:8b:81:4c:11: b1:7d:8d:f3:37:36:c1:cc:da:51:6f:40:bd:13:65:bb:79:a8: d3:c4:c6:4b:0b:06:74:43:7d:c6:63:e7:dd:d4:a0:f7:b5:a4: b3:d8:cb:85:7b:29:24:fd:24:65:0e:53:50:4d:4b:26:11:b9: e6:02:b3:03:3a:4c:95:62:1d:74:bd:be:71:10:c5:b6:15:14: ca:63:d5:b6:0b:ef:66:49:24:33:20:2e:60:1d:ab:bf:b1:c2: 33:31:f3:ae:92:24:3d:49:56:17:47:f8:4b:7e:77:0e:47:55: 6a:2c:95:56:c2:5c:ec:b3:28:79:f9:32:f6:f6:a2:b3:35:2c: 5d:00:bb:42:31:1a:68:77:ca:4e:c7:99:de:01:40:64:f8:20: 72:9c:78:bf:3b:f2:6a:79:46:78:67:c4:bd:46:a5:9a:3a:c4: 3c:70:0b:ed:34:0c:69:65:f7:f6:5b:62:f6:f4:e7:84:fe:eb: 96:00:d8:17:d3:09:ea:31:d5:c1:c9:9a:ca:e0:e7:2d:27:d9: 26:cb:ef:94 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlV0doQxfOY2FxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk Yzg3ZTM2ZDItYTA2Mi00ZTYyLTliOTItYjk5MDhkOWE1ZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmWT2bTVyKtZTImLyBW8uwLoShCYf0EFzQCa q8zzSeMTOYSkpj3aleM55J8KEbQkr3AIj8Vg5XeE0mtKHkUBdBvXvxNyYx8XzdWJ F8vAyE9FjaKc+JZHJfq85vIZsero91NApqCZAS5DxybzqIsizu6iABYnJeGIQqZp 3MdCV8pyp/6bjPc9TJxLTXSIdONyIpZrNyrouxaIhNlZ8Hxud8oqyaqhLzWcZYmS 9C7J712snnNscTbmx9xmP8wO2je+kl9OCmXl0GVwAihQMK1pYEBsvw3r9dnYMSC7 3NiuvZoX9u0ZpzVT1dWw5xkKUG7emPEOATgUEW4fEXnWHzNucQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPJaqX9+va3xGde0Ir3azMYYdmVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM2NDVlZWMtNjM5OC0z MDk4LThkMjYtMDFjYjE2NWNlOWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBnqkzvq6vezRehwm0ZRzeSkxBPDceCaWQ8wRZo xa2Kn92AhwrrWt32xxorgpvUtwMZEYuBTBGxfY3zNzbBzNpRb0C9E2W7eajTxMZL CwZ0Q33GY+fd1KD3taSz2MuFeykk/SRlDlNQTUsmEbnmArMDOkyVYh10vb5xEMW2 FRTKY9W2C+9mSSQzIC5gHau/scIzMfOukiQ9SVYXR/hLfncOR1VqLJVWwlzssyh5 +TL29qKzNSxdALtCMRpod8pOx5neAUBk+CBynHi/O/JqeUZ4Z8S9RqWaOsQ8cAvt NAxpZff2W2L29OeE/uuWANgX0wnqMdXByZrK4OctJ9kmy++U -----END CERTIFICATE-----Generated at Fri Jun 6 19:45:57 2025 by rpki-client