$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d4597a-c2a1-36e9-b1f8-40e9864da2a3.roa File: b5d4597a-c2a1-36e9-b1f8-40e9864da2a3.roa (raw, json) Hash identifier: uf6vKxczb2/ARsEMdMz1YDPFvCvyLG1LgyjQCpZdTRM= Subject key identifier: 11:13:DF:D4:59:5A:7C:DE:A9:45:7C:27:CE:D2:2A:67:D5:94:B9:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A17263F7F99559A9D7C6FA200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d4597a-c2a1-36e9-b1f8-40e9864da2a3.roa Signing time: Thu 05 Jun 2025 12:41:25 +0000 ROA not before: Thu 05 Jun 2025 12:41:25 +0000 ROA not after: Wed 03 Sep 2025 12:41:25 +0000 asID: 397197 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:26:3f:7f:99:55:9a:9d:7c:6f:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 5 12:41:25 2025 GMT Not After : Sep 3 12:41:25 2025 GMT Subject: CN=28715423-52ce-43ba-a1cb-7dce6a5578cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:c8:d4:77:46:d7:bd:40:cd:9f:d9:1c:c0: 50:07:dd:db:1d:02:35:8d:e1:aa:38:1f:e2:8a:a3: 48:f4:c2:c6:76:fb:cf:9d:18:ab:83:ac:1e:5e:b6: db:11:71:6d:e5:5c:ae:3a:37:ac:c4:7b:f5:51:2a: fb:3f:3e:1a:5c:69:0b:57:b6:d7:79:86:f1:17:78: 4f:44:ad:95:c8:c1:9f:b9:f4:17:15:f7:8d:f3:0f: f2:c9:a0:da:0c:a9:3d:01:e3:1d:0b:1b:5a:34:03: e1:28:e0:1b:0a:76:c0:1b:d0:1b:66:57:91:1a:a5: df:2f:f5:11:02:70:e5:4c:1d:2a:84:2e:7a:0e:f2: 3f:97:3a:e1:72:61:b2:25:a7:64:fd:dc:92:31:4f: b2:6c:50:8b:55:d8:e1:a2:1e:92:37:e8:17:60:b3: 73:65:e0:09:86:70:14:9c:8a:4d:54:7c:74:c5:1f: c8:b1:22:d5:3c:c2:79:5e:06:42:15:c8:06:22:55: 25:df:fb:2f:21:51:24:5c:d6:fc:82:4b:92:ec:02: e1:35:cb:2a:22:34:93:6c:da:98:6b:c3:8d:1c:d9: 4c:7f:de:d1:2d:3f:ed:bb:a3:46:1d:a3:29:76:f5: 7f:e4:a3:4a:bd:6a:22:8a:c7:45:7e:4c:fc:8d:bc: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:13:DF:D4:59:5A:7C:DE:A9:45:7C:27:CE:D2:2A:67:D5:94:B9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d4597a-c2a1-36e9-b1f8-40e9864da2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7c:e6:22:23:61:17:62:44:70:89:ab:d7:a3:a1:00:4b:b9: 6b:23:f4:24:aa:de:3a:d6:ef:a8:0d:4e:53:f1:5d:6f:04:dc: f5:0a:22:46:4c:1f:2a:9d:85:78:63:64:e4:7f:f8:60:fa:24: 35:fd:ae:cf:ed:31:67:72:68:f5:63:f2:83:d6:56:6a:c3:65: 47:d8:bd:88:5f:83:c8:e3:43:4d:02:ab:6d:72:88:a7:bb:78: 4f:46:26:8e:9a:9e:62:03:eb:3b:f5:fa:c2:ee:9c:08:7b:d1: 05:97:b3:69:3b:77:4b:3d:2a:5e:d4:50:4f:05:c2:f1:96:18: f1:ac:53:e7:af:6c:ff:b5:0c:6c:3d:d9:bd:d3:ec:35:0d:0d: 32:88:77:04:8c:74:0c:38:0c:9b:6a:8d:bb:e7:6f:06:f1:e5: b4:91:db:d4:d1:18:f5:c6:1e:a2:5e:db:cf:04:fa:d1:2c:3c: 5b:2d:7d:94:8c:07:df:92:06:42:fe:34:14:43:a4:25:71:66: 60:98:d4:6d:1d:08:ac:7e:2b:e3:c5:c7:e0:23:e6:35:6b:c1: e8:45:84:7a:a0:f9:1f:bd:76:57:10:04:20:60:4a:7b:b4:89: 4b:65:a0:03:96:95:a1:2c:d4:d4:ec:c1:1f:a3:1d:94:86:03: 4e:05:ab:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoXJj9/mVWanXxvogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNTEyNDEyNVoXDTI1MDkwMzEyNDEyNVowLzEtMCsGA1UEAxMk Mjg3MTU0MjMtNTJjZS00M2JhLWExY2ItN2RjZTZhNTU3OGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmLI1HdG171AzZ/ZHMBQB93bHQI1jeGqOB/i iqNI9MLGdvvPnRirg6weXrbbEXFt5VyuOjesxHv1USr7Pz4aXGkLV7bXeYbxF3hP RK2VyMGfufQXFfeN8w/yyaDaDKk9AeMdCxtaNAPhKOAbCnbAG9AbZleRGqXfL/UR AnDlTB0qhC56DvI/lzrhcmGyJadk/dySMU+ybFCLVdjhoh6SN+gXYLNzZeAJhnAU nIpNVHx0xR/IsSLVPMJ5XgZCFcgGIlUl3/svIVEkXNb8gkuS7ALhNcsqIjSTbNqY a8ONHNlMf97RLT/tu6NGHaMpdvV/5KNKvWoiisdFfkz8jbzD+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBET39RZWnzeqUV8J87SKmfVlLnsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjVkNDU5N2EtYzJhMS0z NmU5LWIxZjgtNDBlOTg2NGRhMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABR85iIjYRdiRHCJq9ejoQBLuWsj9CSq3jrW76gNTlPxXW8E3PUK IkZMHyqdhXhjZOR/+GD6JDX9rs/tMWdyaPVj8oPWVmrDZUfYvYhfg8jjQ00Cq21y iKe7eE9GJo6anmID6zv1+sLunAh70QWXs2k7d0s9Kl7UUE8FwvGWGPGsU+evbP+1 DGw92b3T7DUNDTKIdwSMdAw4DJtqjbvnbwbx5bSR29TRGPXGHqJe288E+tEsPFst fZSMB9+SBkL+NBRDpCVxZmCY1G0dCKx+K+PFx+Aj5jVrwehFhHqg+R+9dlcQBCBg Snu0iUtloAOWlaEs1NTswR+jHZSGA04Fq7E= -----END CERTIFICATE-----Generated at Sat Jun 7 04:16:31 2025 by rpki-client