$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa File: be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa (raw, json) Hash identifier: Geqy6zbpaISkaauyAtOCQbeRNIYr0MvKJY3e3GiDWSM= Subject key identifier: 6E:02:0C:40:73:44:31:BD:1E:4D:D6:1F:1B:8C:A8:1E:A6:51:CE:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DAFC156040B0D745AD5040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 36624 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:fc:15:60:40:b0:d7:45:ad:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=89fcceb2-8f20-45f3-be58-383b458a5bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2d:0c:f3:c0:ea:d5:27:40:48:91:31:69:42: 0d:d9:02:5a:30:8c:8e:54:f3:65:73:11:19:4e:36: 33:27:ff:0d:2d:db:11:21:bd:75:bd:4c:27:6a:7d: 69:fa:1d:72:f7:71:2b:94:5a:32:18:0f:09:0a:d2: 78:ca:f2:61:76:91:45:41:12:b2:14:04:22:60:d2: ba:87:53:b0:2f:67:20:74:0d:e0:96:4b:d9:cb:5b: 5e:9c:c0:c3:bc:8f:17:3f:5f:06:cf:00:8e:bf:c6: 9a:ae:30:da:1c:77:fe:92:c9:da:4b:01:cb:3b:c1: a5:f8:6f:2a:02:1c:80:de:0c:be:9f:37:4f:ae:5e: f4:0e:e4:8c:5b:0d:1c:0b:3c:02:0e:d3:63:1d:dd: d4:59:0b:a0:81:92:63:a4:b6:17:5f:26:fd:25:1d: 2c:e9:6b:2e:00:1f:f3:d4:03:d8:7e:c0:39:0d:ce: 1c:3e:ba:94:71:94:44:d6:33:21:f2:aa:ff:7f:a4: 62:37:06:0a:6f:93:34:ff:8d:0a:04:ce:b4:07:a6: ab:48:e3:e5:98:0f:c2:db:9f:bc:64:6d:01:5e:77: 61:3a:da:ac:1e:ba:b2:c1:ae:c3:6d:e6:a9:c5:d2: 50:f9:33:96:be:49:75:ff:50:5a:e9:50:18:36:56: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:02:0C:40:73:44:31:BD:1E:4D:D6:1F:1B:8C:A8:1E:A6:51:CE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:46:d2:cc:58:b6:6b:18:3b:c2:28:16:08:77:e7:2e:88:fc: ed:0c:98:0a:68:8b:90:fe:12:10:9d:74:b9:9b:d0:1f:eb:c4: a3:dd:5b:0c:a4:63:4c:09:ff:fe:1c:16:44:a9:c9:ca:6d:46: 86:c9:3d:08:96:74:8d:e9:7f:ab:b4:99:cc:e6:66:bb:43:ae: 77:86:1c:af:b3:8e:10:b7:9a:4d:74:68:1c:8f:db:9f:d0:f5: 88:d9:d0:16:7e:75:2e:2f:1b:e0:fc:1a:9d:5f:84:ec:78:64: 86:ff:d8:af:14:bb:6a:cd:b2:29:84:dc:2e:e2:54:24:31:df: 2c:5d:5b:71:70:b3:f2:b0:fb:d1:c3:4c:23:49:19:11:22:54: d4:f5:c8:41:c1:cd:c9:61:c4:6c:26:72:cd:32:4f:33:23:a5: 29:b2:bb:21:ed:c7:93:f8:0d:9b:db:d5:ea:22:d5:76:dd:16: 2c:fa:e1:d4:b0:8c:32:f0:da:48:85:3c:af:a1:5a:7d:3a:79: 76:69:00:18:92:d1:fc:6b:4b:6a:e3:37:da:08:b5:ea:52:89: 42:5e:d6:ff:fd:95:bc:fd:40:c5:3e:22:68:7e:65:92:da:c3: 52:56:56:e9:04:d9:ba:45:82:8c:d5:33:dc:d0:3c:af:00:fc: 52:95:d5:6d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2vwVYECw10WtUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ODlmY2NlYjItOGYyMC00NWYzLWJlNTgtMzgzYjQ1OGE1YmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly0M88Dq1SdASJExaUIN2QJaMIyOVPNlcxEZ TjYzJ/8NLdsRIb11vUwnan1p+h1y93ErlFoyGA8JCtJ4yvJhdpFFQRKyFAQiYNK6 h1OwL2cgdA3glkvZy1tenMDDvI8XP18GzwCOv8aarjDaHHf+ksnaSwHLO8Gl+G8q AhyA3gy+nzdPrl70DuSMWw0cCzwCDtNjHd3UWQuggZJjpLYXXyb9JR0s6WsuAB/z 1APYfsA5Dc4cPrqUcZRE1jMh8qr/f6RiNwYKb5M0/40KBM60B6arSOPlmA/C25+8 ZG0BXndhOtqsHrqywa7DbeapxdJQ+TOWvkl1/1Ba6VAYNlZLmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG4CDEBzRDG9Hk3WHxuMqB6mUc4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmU4ZGRlYTYtNzNiMS0z MTliLWE4YTAtMTZmMWIyZjhkNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAIRtLMWLZrGDvCKBYId+cuiPztDJgKaIuQ/hIQ nXS5m9Af68Sj3VsMpGNMCf/+HBZEqcnKbUaGyT0IlnSN6X+rtJnM5ma7Q653hhyv s44Qt5pNdGgcj9uf0PWI2dAWfnUuLxvg/BqdX4TseGSG/9ivFLtqzbIphNwu4lQk Md8sXVtxcLPysPvRw0wjSRkRIlTU9chBwc3JYcRsJnLNMk8zI6Upsrsh7ceT+A2b 29XqItV23RYs+uHUsIwy8NpIhTyvoVp9Onl2aQAYktH8a0tq4zfaCLXqUolCXtb/ /ZW8/UDFPiJofmWS2sNSVlbpBNm6RYKM1TPc0DyvAPxSldVt -----END CERTIFICATE-----Generated at Sat Jun 7 04:14:46 2025 by rpki-client