$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa File: 5693ddaf-862c-3eab-933e-286d3ed8f589.roa (raw, json) Hash identifier: G+hC+xM9+GynXO6gqj85R/K3JVOko8hnAjPmoinJ+cA= Subject key identifier: D2:6F:93:AC:5A:7F:53:55:25:91:C4:4C:65:3A:CF:91:E1:7E:47:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F71543827BAD40D54EBFE5C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 396555 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:43:82:7b:ad:40:d5:4e:bf:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=9acb5982-6766-4b00-82a8-d62a36c1d05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:3a:18:01:79:ec:31:20:8b:ba:14:e3:83: 50:70:3f:fa:8d:59:16:d5:31:97:3d:2a:38:bc:1b: 1c:82:da:11:fb:17:4c:31:ad:c2:f4:36:f1:47:fc: 48:d7:61:ab:70:36:05:e7:e3:8d:0e:80:c3:55:0d: e3:bc:cf:2e:36:df:3c:88:8f:90:c0:e2:ef:b9:06: b9:6e:50:c0:94:84:4b:24:e3:09:91:a7:c1:ce:5d: 61:48:b0:04:02:ba:41:ee:de:9e:6f:8a:d4:47:fc: 4e:7f:3a:d3:4c:38:a7:94:88:d6:28:06:98:f0:2f: 90:87:67:7d:a1:f4:6b:c9:f2:39:b3:e0:41:85:69: 81:43:0d:b9:df:6a:51:fe:79:ff:be:f1:8c:eb:cb: c6:ca:37:bd:9b:fe:8d:87:88:b2:85:95:51:1c:4c: 89:bf:65:cc:92:4a:c9:e3:cf:e7:99:3d:cb:ac:47: 3c:b5:38:ec:9f:83:a5:89:5c:cd:2a:28:d0:ed:16: ca:bf:d4:15:69:e5:ee:76:81:bd:5b:3c:0c:72:b6: 4e:09:fd:c3:af:d1:44:04:70:d5:9a:c3:75:dc:98: 11:a0:35:65:c8:f6:6c:e6:b2:be:af:63:02:a7:91: 28:b9:f9:58:ec:1d:b2:15:f7:30:9d:66:a4:03:10: d6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6F:93:AC:5A:7F:53:55:25:91:C4:4C:65:3A:CF:91:E1:7E:47:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e8:a7:43:f4:54:ab:60:d8:b2:3b:c9:e5:ee:fc:0c:f3:c8: b0:39:5a:fb:56:40:b2:01:c1:e1:79:50:00:10:2c:99:9e:7a: 47:e7:63:77:8b:ca:71:2f:c3:3d:d9:55:68:ef:68:05:4e:34: 49:a4:c8:93:a5:14:ed:51:f7:d3:6b:e9:fc:3a:ba:de:e6:3a: 62:22:b8:f7:82:16:e5:cd:72:3f:18:ed:92:31:62:b5:b2:be: 3d:4d:36:a0:b7:3b:c5:0e:0d:3c:10:5e:cb:9f:cb:12:97:8f: a2:a9:7c:f2:1f:98:0a:6b:a0:09:e0:4e:f9:7a:d2:11:87:53: 6c:35:52:81:3c:e7:b2:ee:7d:f2:c1:a6:f5:bd:aa:10:ea:48: 08:23:cf:93:b4:1b:51:ae:c4:77:08:7a:71:14:a6:fb:90:21: 2a:07:7e:37:40:ca:98:bd:22:53:2b:5b:59:1e:38:81:dc:c1: 87:f0:d2:56:ff:cb:65:df:ef:09:19:86:e3:5e:83:b1:b0:ee: 30:92:e5:68:6b:10:33:ca:71:45:c3:22:dd:ff:82:41:ca:2e: 9d:0c:b4:1d:fc:39:2c:e7:b6:10:86:5a:fb:a7:ad:2d:ca:4a: 29:e9:35:cc:f3:f3:da:b9:6c:8e:9f:28:e8:f2:e5:e7:9d:c9: fe:e4:9f:f6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FUOCe61A1U6/5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk OWFjYjU5ODItNjc2Ni00YjAwLTgyYTgtZDYyYTM2YzFkMDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOo6GAF57DEgi7oU44NQcD/6jVkW1TGXPSo4 vBscgtoR+xdMMa3C9DbxR/xI12GrcDYF5+ONDoDDVQ3jvM8uNt88iI+QwOLvuQa5 blDAlIRLJOMJkafBzl1hSLAEArpB7t6eb4rUR/xOfzrTTDinlIjWKAaY8C+Qh2d9 ofRryfI5s+BBhWmBQw2532pR/nn/vvGM68vGyje9m/6Nh4iyhZVRHEyJv2XMkkrJ 48/nmT3LrEc8tTjsn4OliVzNKijQ7RbKv9QVaeXudoG9WzwMcrZOCf3Dr9FEBHDV msN13JgRoDVlyPZs5rK+r2MCp5EouflY7B2yFfcwnWakAxDWSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNJvk6xaf1NVJZHETGU6z5HhfkexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTY5M2RkYWYtODYyYy0z ZWFiLTkzM2UtMjg2ZDNlZDhmNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB26KdD9FSrYNiyO8nl7vwM88iwOVr7VkCyAcHh eVAAECyZnnpH52N3i8pxL8M92VVo72gFTjRJpMiTpRTtUffTa+n8Orre5jpiIrj3 ghblzXI/GO2SMWK1sr49TTagtzvFDg08EF7Ln8sSl4+iqXzyH5gKa6AJ4E75etIR h1NsNVKBPOey7n3ywab1vaoQ6kgII8+TtBtRrsR3CHpxFKb7kCEqB343QMqYvSJT K1tZHjiB3MGH8NJW/8tl3+8JGYbjXoOxsO4wkuVoaxAzynFFwyLd/4JByi6dDLQd /Dks57YQhlr7p60tykop6TXM8/PauWyOnyjo8uXnncn+5J/2 -----END CERTIFICATE-----Generated at Fri Jun 6 19:46:10 2025 by rpki-client