$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa File: b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa (raw, json) Hash identifier: RCWMWzqkvbtPcA5KA2+QVerJHTD2EIGxd2lxxFB3S/s= Subject key identifier: 8A:C4:38:9D:82:C0:C8:8A:49:F6:4D:11:5F:AA:AA:CC:18:9D:C7:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F71542B14367F91879C2C700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 396550 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:42:b1:43:67:f9:18:79:c2:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=3a1a19d7-04ae-42ab-9889-d27d827b3a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ed:60:be:8a:39:87:f7:71:fd:42:26:92:ee: 84:a9:0e:a1:97:08:30:45:cb:88:88:7e:9d:bc:3b: 1e:50:3c:e5:1e:e4:23:1b:ba:d3:20:c5:f0:e3:0b: 50:86:8e:2c:1b:16:62:a1:fa:6f:37:20:f6:08:65: 8b:2a:bf:4a:22:f9:ad:6a:1e:f3:63:c2:58:9b:b0: aa:56:2a:8f:f4:d9:33:d3:12:7d:85:5b:88:ac:4f: 93:f3:92:cd:68:69:70:07:62:48:89:41:80:5f:98: 1f:ae:66:d0:69:f3:b3:dc:a1:ec:90:9e:57:58:ef: 4a:6c:10:f1:21:26:19:3d:6e:04:fc:f0:1e:d4:bf: 64:18:2d:97:3f:23:49:bf:87:ea:d0:ca:80:17:48: 47:76:18:c9:d7:0c:0d:c3:c6:88:c3:1b:d8:73:13: 3a:ed:2a:f0:3d:e1:0d:1d:03:72:7d:cc:39:70:65: 13:00:ae:43:dc:61:d5:cb:bd:eb:89:98:80:a5:10: df:37:96:d9:7a:77:95:64:4d:dc:d9:a4:2f:62:83: 46:c3:5b:6d:0d:d7:f0:b2:33:02:64:3c:30:04:ce: 6c:61:ba:5c:0f:18:a1:78:92:8a:f3:11:0a:f0:94: 3a:5a:a8:be:d8:f7:e2:7b:9e:9f:e8:a2:5c:d3:d8: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:38:9D:82:C0:C8:8A:49:F6:4D:11:5F:AA:AA:CC:18:9D:C7:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:02:b0:7b:90:0e:5f:5b:cb:35:f5:49:97:9c:7f:a6:ac:95: 1c:00:2b:dd:e6:4b:3a:8e:32:ea:ac:57:1b:46:af:bb:d8:88: 0b:75:65:c4:9f:3f:8a:18:d7:3f:14:e5:e0:a4:1e:5c:03:9b: 12:ef:a3:70:c3:cf:03:80:42:d3:d1:16:0e:b9:97:d0:73:66: 0a:5f:da:a7:e2:1e:5d:31:5e:e2:c8:d3:cf:1c:2c:65:14:c0: 1b:94:24:cc:c8:5e:51:f3:99:18:8a:29:00:f1:41:6a:9b:1f: 6b:c2:9b:35:f1:ff:e1:b9:2f:bb:ce:bf:06:0b:00:3d:3b:e2: 61:48:38:4b:20:d6:de:e6:64:0c:42:9c:f2:d4:e6:ff:c4:e0: 5f:55:75:e9:0e:ae:8d:63:f4:d7:8f:07:db:79:50:c5:52:27: b1:d9:80:59:cf:e8:82:40:45:aa:29:d1:c1:81:ba:b9:25:ed: 52:69:43:c8:b2:8c:eb:82:f2:2c:45:95:38:38:14:61:0e:e9: 48:cd:9b:31:8a:89:89:1f:1a:92:f1:c7:44:00:96:85:f8:c2: 72:72:25:69:c7:1a:9a:1a:08:d5:d7:cf:d0:2b:4c:c9:81:83: 40:ad:35:3d:3e:98:dc:6c:68:32:02:a4:e7:4d:c6:67:c2:9f: 53:ab:74:ae -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FUKxQ2f5GHnCxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk M2ExYTE5ZDctMDRhZS00MmFiLTk4ODktZDI3ZDgyN2IzYTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje1gvoo5h/dx/UImku6EqQ6hlwgwRcuIiH6d vDseUDzlHuQjG7rTIMXw4wtQho4sGxZiofpvNyD2CGWLKr9KIvmtah7zY8JYm7Cq ViqP9Nkz0xJ9hVuIrE+T85LNaGlwB2JIiUGAX5gfrmbQafOz3KHskJ5XWO9KbBDx ISYZPW4E/PAe1L9kGC2XPyNJv4fq0MqAF0hHdhjJ1wwNw8aIwxvYcxM67SrwPeEN HQNyfcw5cGUTAK5D3GHVy73riZiApRDfN5bZeneVZE3c2aQvYoNGw1ttDdfwsjMC ZDwwBM5sYbpcDxiheJKK8xEK8JQ6Wqi+2Pfie56f6KJc09jYTwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIrEOJ2CwMiKSfZNEV+qqswYncdXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjljZjM1MWEtOTRlYi0z ZmMzLWI2ZjUtMTU0N2M0ZDg3Y2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBbArB7kA5fW8s19UmXnH+mrJUcACvd5ks6jjLq rFcbRq+72IgLdWXEnz+KGNc/FOXgpB5cA5sS76Nww88DgELT0RYOuZfQc2YKX9qn 4h5dMV7iyNPPHCxlFMAblCTMyF5R85kYiikA8UFqmx9rwps18f/huS+7zr8GCwA9 O+JhSDhLINbe5mQMQpzy1Ob/xOBfVXXpDq6NY/TXjwfbeVDFUiex2YBZz+iCQEWq KdHBgbq5Je1SaUPIsozrgvIsRZU4OBRhDulIzZsxiomJHxqS8cdEAJaF+MJyciVp xxqaGgjV18/QK0zJgYNArTU9PpjcbGgyAqTnTcZnwp9Tq3Su -----END CERTIFICATE-----Generated at Fri Jun 6 19:39:56 2025 by rpki-client