$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa File: 48f87b69-8da1-37e4-90c0-cf2a877ff281.roa (raw, json) Hash identifier: bqFcChkBgLhU69TnSoYnlmfaVEBTXn3Va+hr7W+595I= Subject key identifier: 57:99:89:1D:95:B3:E0:56:04:61:56:A5:7B:C5:11:94:A3:9D:BD:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F715406969D4DB4B9B3D2B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 397194 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:40:69:69:d4:db:4b:9b:3d:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=4b30b4fd-420c-4601-bc06-7080b5b3dea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:8f:e5:60:de:e9:6d:9b:63:1a:c4:7a:d0: 95:71:53:3d:76:f4:8a:c0:ec:92:98:26:fb:4d:c0: 9a:e1:c2:18:fe:ce:26:bc:b8:ba:e8:72:ac:93:23: cf:4f:3f:fa:d1:ad:5d:bd:bb:95:5a:80:53:ca:31: 36:96:fd:a5:63:c6:53:c6:75:6a:c0:ca:66:cd:d4: 6b:90:ff:72:b3:65:29:6e:51:3a:b0:c8:0d:cf:ee: d5:c5:fb:7e:f9:dc:90:27:4c:68:94:00:69:1d:e6: 08:93:89:ad:06:4a:ae:ca:05:70:f5:aa:a6:59:61: 98:ff:42:01:17:d7:5c:8d:98:ce:a8:65:1d:32:24: fc:32:e5:c3:51:f6:53:ff:69:5a:f7:fb:a7:d2:a4: 83:ab:49:a6:49:d2:ce:0c:94:bc:70:be:55:2b:a0: 66:31:e9:6b:78:2c:d9:29:e4:75:9e:6a:69:b5:e5: 5a:23:b6:fb:76:dc:54:a3:60:b7:ff:61:aa:2b:f9: ff:c9:79:fd:33:1d:cb:6e:f3:21:da:ec:3d:3c:84: 02:d9:27:7d:5a:25:9a:43:14:81:e3:bb:33:ab:e5: 00:9e:03:13:6a:f3:50:38:2c:68:17:92:c5:18:a3: 59:a7:8c:75:a2:06:fe:c0:e2:84:49:81:f2:43:e5: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:99:89:1D:95:B3:E0:56:04:61:56:A5:7B:C5:11:94:A3:9D:BD:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48f87b69-8da1-37e4-90c0-cf2a877ff281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:51:bf:8f:e9:00:77:e5:61:9e:9a:c4:ac:19:f6:c0:a3:7e: ea:45:35:6f:b6:21:b3:ae:9d:59:17:80:89:62:8a:fc:e2:32: a6:53:d7:d6:c5:15:b5:b6:d3:7a:02:be:10:07:b1:fa:ed:18: 48:f3:f7:50:e4:48:4d:a4:e0:7f:03:91:5e:88:e2:a8:c5:5c: 89:86:ef:09:4b:af:81:2e:f3:ff:43:4f:ee:1e:6c:9c:3d:1f: 21:9a:61:1f:58:27:0e:68:15:7d:98:c6:de:55:ee:3f:e6:26: 96:ae:08:6a:f5:01:69:ec:15:c5:36:dc:e9:0e:88:5b:9f:05: d6:41:e1:e8:53:d0:4a:32:60:f7:63:0a:b2:af:7f:89:6d:2a: 19:69:c3:cb:b4:3d:61:5a:cc:7e:47:d7:a3:c7:7f:9d:77:7e: 0d:7c:18:c1:ef:e9:59:28:89:4a:2f:86:6f:d2:fa:c1:c2:d3: dc:ce:f1:df:a0:71:4b:5a:61:a5:7b:e7:39:60:9c:c9:cb:cf: 8f:ae:56:bf:80:3f:c0:20:24:47:5a:de:a5:58:84:4d:41:43: cb:af:d0:12:71:87:d1:6a:7c:86:33:d1:90:01:55:4c:d9:a7: 36:cd:c3:74:c6:d0:64:3b:4f:2c:ff:84:85:e9:2d:b6:d6:2d: c8:e0:64:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FUBpadTbS5s9KwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NGIzMGI0ZmQtNDIwYy00NjAxLWJjMDYtNzA4MGI1YjNkZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgyP5WDe6W2bYxrEetCVcVM9dvSKwOySmCb7 TcCa4cIY/s4mvLi66HKskyPPTz/60a1dvbuVWoBTyjE2lv2lY8ZTxnVqwMpmzdRr kP9ys2UpblE6sMgNz+7Vxft++dyQJ0xolABpHeYIk4mtBkquygVw9aqmWWGY/0IB F9dcjZjOqGUdMiT8MuXDUfZT/2la9/un0qSDq0mmSdLODJS8cL5VK6BmMelreCzZ KeR1nmppteVaI7b7dtxUo2C3/2GqK/n/yXn9Mx3LbvMh2uw9PIQC2Sd9WiWaQxSB 47szq+UAngMTavNQOCxoF5LFGKNZp4x1ogb+wOKESYHyQ+Xf8QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFeZiR2Vs+BWBGFWpXvFEZSjnb3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhmODdiNjktOGRhMS0z N2U0LTkwYzAtY2YyYTg3N2ZmMjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBJUb+P6QB35WGemsSsGfbAo37qRTVvtiGzrp1Z F4CJYor84jKmU9fWxRW1ttN6Ar4QB7H67RhI8/dQ5EhNpOB/A5FeiOKoxVyJhu8J S6+BLvP/Q0/uHmycPR8hmmEfWCcOaBV9mMbeVe4/5iaWrghq9QFp7BXFNtzpDohb nwXWQeHoU9BKMmD3Ywqyr3+JbSoZacPLtD1hWsx+R9ejx3+dd34NfBjB7+lZKIlK L4Zv0vrBwtPczvHfoHFLWmGle+c5YJzJy8+Prla/gD/AICRHWt6lWIRNQUPLr9AS cYfRanyGM9GQAVVM2ac2zcN0xtBkO08s/4SF6S221i3I4GSR -----END CERTIFICATE-----Generated at Fri Jun 6 19:27:37 2025 by rpki-client