$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b567789f-f555-30ee-95c7-fc276c5cf560.roa File: b567789f-f555-30ee-95c7-fc276c5cf560.roa (raw, json) Hash identifier: iyegaiwIX+CsTKaOEIx16cEB4jc415x4UDUFEMRTerE= Subject key identifier: CC:39:24:D3:85:66:13:C0:45:9D:B9:1F:EE:EE:FE:2E:6D:74:8D:4A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F7153E818288FC2CB6245C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b567789f-f555-30ee-95c7-fc276c5cf560.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 396826 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:3e:81:82:88:fc:2c:b6:24:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=1b766f42-7bfb-496b-8c91-f9af2963020e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:67:4a:da:73:17:e7:b2:d3:6b:51:5d:e1:16: 8e:ac:7d:94:7c:e1:3c:c5:49:9d:f0:19:62:c0:78: af:1c:9d:a2:a7:55:06:67:09:f8:ea:ae:fe:7f:15: 31:c1:3d:83:09:f1:de:d1:75:d1:e7:de:fc:25:e6: a7:2a:cf:b7:c6:b1:45:05:2a:50:38:37:5d:ad:24: 59:90:22:c2:24:92:8b:a0:67:39:00:09:c0:e3:91: 37:f9:38:c2:5f:59:3c:f4:e3:c7:a0:22:a9:2c:03: 2e:9c:92:7c:eb:36:a1:0c:f8:4f:76:1b:78:ef:10: 9a:28:a6:81:aa:ae:56:49:3e:a3:0d:42:36:cb:f2: 35:ec:61:32:3f:24:41:3b:c0:c1:54:34:a0:0a:02: d7:36:f2:e1:ed:e9:17:42:2b:4d:b4:09:cd:6d:c0: d9:7a:82:af:cc:a0:76:ad:4e:70:d9:5b:37:8f:ce: 00:e0:bf:69:d9:73:04:66:f7:96:5b:8e:53:86:8b: ee:a3:07:d2:25:bb:dc:e4:cd:99:22:4f:cf:23:56: 52:cc:16:55:a9:f0:63:4f:c3:64:d9:1c:1b:63:f5: 90:6b:90:5a:4e:e3:0c:af:b0:3b:23:38:26:bd:97: 70:92:aa:2b:de:53:a8:84:89:a7:29:f8:15:00:f6: 17:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:39:24:D3:85:66:13:C0:45:9D:B9:1F:EE:EE:FE:2E:6D:74:8D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b567789f-f555-30ee-95c7-fc276c5cf560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:3f:9b:73:a5:d9:a3:5d:69:68:b6:61:96:0f:e2:43:b4:c5: d1:72:1d:08:14:3a:44:1c:2e:70:b8:e0:78:90:ae:4a:7a:9e: 6c:93:17:53:1a:ed:b7:6b:34:3e:86:22:06:a3:23:9a:ce:25: b4:31:56:fb:3b:ff:ac:56:e4:20:6d:72:12:5d:f5:30:7a:a8: 8e:06:4c:c3:24:b3:c2:4e:a3:64:84:f2:85:96:7e:7f:df:5c: b1:03:5e:dd:61:cb:6c:a5:56:c2:c1:cf:53:d2:61:6d:ed:7a: 95:57:eb:06:e8:be:e3:b9:4e:97:33:a6:90:25:4b:6e:11:19: 61:15:9c:57:5a:6b:86:60:aa:1b:b7:ef:c7:0c:28:28:51:c0: 1c:fb:a7:05:d3:0a:69:6e:65:60:5c:a2:69:0f:82:af:74:cd: 27:4a:bb:b6:9c:b1:3f:3a:56:6b:25:be:1d:e2:4c:cf:97:ec: 39:a5:01:b0:85:28:ab:d9:58:04:e6:58:11:c1:8e:e8:50:6c: 11:9a:1a:73:ba:c4:4e:d2:47:35:97:27:52:71:c9:73:a2:79: 57:27:f4:fd:e6:34:d2:82:89:4e:62:43:0e:51:78:24:fa:2b: 7a:06:62:44:f0:ed:e0:f9:66:fe:cb:d3:b9:4c:ca:63:db:62: 5a:c2:cb:9d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FT6Bgoj8LLYkXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MWI3NjZmNDItN2JmYi00OTZiLThjOTEtZjlhZjI5NjMwMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmdK2nMX57LTa1Fd4RaOrH2UfOE8xUmd8Bli wHivHJ2ip1UGZwn46q7+fxUxwT2DCfHe0XXR5978JeanKs+3xrFFBSpQODddrSRZ kCLCJJKLoGc5AAnA45E3+TjCX1k89OPHoCKpLAMunJJ86zahDPhPdht47xCaKKaB qq5WST6jDUI2y/I17GEyPyRBO8DBVDSgCgLXNvLh7ekXQitNtAnNbcDZeoKvzKB2 rU5w2Vs3j84A4L9p2XMEZveWW45ThovuowfSJbvc5M2ZIk/PI1ZSzBZVqfBjT8Nk 2RwbY/WQa5BaTuMMr7A7IzgmvZdwkqor3lOohImnKfgVAPYXHQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMw5JNOFZhPARZ25H+7u/i5tdI1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjU2Nzc4OWYtZjU1NS0z MGVlLTk1YzctZmMyNzZjNWNmNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCQP5tzpdmjXWlotmGWD+JDtMXRch0IFDpEHC5w uOB4kK5Kep5skxdTGu23azQ+hiIGoyOaziW0MVb7O/+sVuQgbXISXfUweqiOBkzD JLPCTqNkhPKFln5/31yxA17dYctspVbCwc9T0mFt7XqVV+sG6L7juU6XM6aQJUtu ERlhFZxXWmuGYKobt+/HDCgoUcAc+6cF0wppbmVgXKJpD4KvdM0nSru2nLE/OlZr Jb4d4kzPl+w5pQGwhSir2VgE5lgRwY7oUGwRmhpzusRO0kc1lydScclzonlXJ/T9 5jTSgolOYkMOUXgk+it6BmJE8O3g+Wb+y9O5TMpj22Jawsud -----END CERTIFICATE-----Generated at Sat Jun 7 06:07:51 2025 by rpki-client