$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa File: b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa (raw, json) Hash identifier: Do39EO6fimIsz/tIMAwOjBA0EqZLmutpQjSphQ6sK+8= Subject key identifier: C3:46:B7:6F:4E:17:59:9B:F1:E4:41:00:25:5A:A6:67:83:D3:F8:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849D164FEF464CC12D443850380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 0 IP address blocks: 2001:500:138::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:64:fe:f4:64:cc:12:d4:43:85:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=450a7822-d103-4667-b8aa-7c2aa46f58b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:de:0a:cf:72:d7:e8:48:b4:8b:00:06:71: 98:ea:10:c2:16:a2:6e:91:4e:3e:e5:21:b3:00:1b: 60:ba:48:9f:2d:c5:93:c5:aa:0f:40:5b:97:9e:be: 46:8a:de:95:c2:84:42:93:f5:a6:3c:ca:2d:74:93: 8f:e3:8a:a2:d8:bc:e3:b6:23:d5:59:1e:1e:13:54: 7f:1c:14:ab:b9:e3:09:10:7b:67:96:73:c9:64:81: 8c:66:6e:9a:2d:37:53:38:77:a3:0e:b4:82:8c:56: 08:b9:ef:bc:62:73:7d:15:5d:09:d5:99:28:06:04: dd:f9:e5:dc:f2:22:93:82:6f:3c:0b:45:a0:27:f1: 38:e2:6a:2c:92:a2:8f:45:a3:63:37:a6:50:06:fc: fe:1b:b1:bc:e3:f9:39:68:1a:9f:2d:bb:c9:08:62: ae:41:90:04:1f:41:4d:ca:04:a5:65:12:69:8a:08: 0c:60:c2:2f:b1:25:56:0a:14:f6:17:54:26:02:cf: 56:a2:2e:0b:7e:9d:5f:4a:e2:62:f6:85:c1:81:22: 56:3d:bf:9c:2d:98:c0:1a:48:22:3e:fe:ab:d1:c1: 1e:58:89:c1:8b:d5:66:79:60:e3:fd:23:7c:36:13: 3a:86:61:fe:71:e4:07:55:30:b2:5e:13:e2:fa:bb: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:46:B7:6F:4E:17:59:9B:F1:E4:41:00:25:5A:A6:67:83:D3:F8:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:138::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:62:ef:7e:fe:ed:90:26:71:a3:a4:da:bc:2b:0b:20:6d:19: b2:2a:9e:5c:d4:29:1a:b1:c9:be:ad:e7:e7:64:db:a9:16:13: 3a:19:41:d1:bb:7d:08:83:b6:3f:1b:b2:f2:f2:de:d3:a5:33: 31:1e:0d:0a:20:ac:10:96:35:66:86:6f:9b:7d:b4:60:b9:93: e2:11:c8:41:14:32:e8:d0:69:3b:dc:b0:1b:f3:21:72:09:03: 23:13:ec:76:d0:3c:20:f5:2f:28:0d:bf:1f:49:96:15:37:88: 3a:50:59:5a:74:5c:d4:10:13:76:30:71:0d:7f:fe:de:5c:b7: dd:6f:56:3d:e0:77:45:1d:df:27:60:05:17:58:87:3a:9b:a9: f2:54:37:0d:69:a4:82:83:6d:d8:11:99:95:31:d4:ff:21:18: a7:7b:26:58:e8:9b:cf:b3:15:60:a3:6d:e8:4d:0d:aa:74:a7: f7:9d:3a:af:86:a0:9f:91:c1:82:39:bf:9b:16:01:3a:d9:f8: 1f:bf:60:0a:7a:92:a6:28:4e:51:5f:19:73:42:95:58:06:4e: 5b:10:a2:5c:26:66:1a:c7:36:cc:4e:d7:7c:0e:35:0c:23:9b: ee:78:70:d1:bb:f3:79:bf:53:a9:bb:4f:09:cb:e4:c9:4d:3f: 42:88:f0:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnRZP70ZMwS1EOFA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NDUwYTc4MjItZDEwMy00NjY3LWI4YWEtN2MyYWE0NmY1OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxjeCs9y1+hItIsABnGY6hDCFqJukU4+5SGz ABtgukifLcWTxaoPQFuXnr5Git6VwoRCk/WmPMotdJOP44qi2LzjtiPVWR4eE1R/ HBSrueMJEHtnlnPJZIGMZm6aLTdTOHejDrSCjFYIue+8YnN9FV0J1ZkoBgTd+eXc 8iKTgm88C0WgJ/E44moskqKPRaNjN6ZQBvz+G7G84/k5aBqfLbvJCGKuQZAEH0FN ygSlZRJpiggMYMIvsSVWChT2F1QmAs9Woi4Lfp1fSuJi9oXBgSJWPb+cLZjAGkgi Pv6r0cEeWInBi9VmeWDj/SN8NhM6hmH+ceQHVTCyXhPi+rvD8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMNGt29OF1mb8eRBACVapmeD0/hfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIwZmZhN2MtZTI0NC0z Yzk4LWExZWMtZGY5MGVjOGMyM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDIAEFAAE4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACti737+7ZAmcaOk2rwrCyBtGbIqnlzUKRqxyb6t5+dk26kWEzoZ QdG7fQiDtj8bsvLy3tOlMzEeDQogrBCWNWaGb5t9tGC5k+IRyEEUMujQaTvcsBvz IXIJAyMT7HbQPCD1LygNvx9JlhU3iDpQWVp0XNQQE3YwcQ1//t5ct91vVj3gd0Ud 3ydgBRdYhzqbqfJUNw1ppIKDbdgRmZUx1P8hGKd7Jljom8+zFWCjbehNDap0p/ed Oq+GoJ+RwYI5v5sWATrZ+B+/YAp6kqYoTlFfGXNClVgGTlsQolwmZhrHNsxO13wO NQwjm+54cNG783m/U6m7TwnL5MlNP0KI8Ls= -----END CERTIFICATE-----Generated at Sun Jun 1 03:16:55 2025 by rpki-client