$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2856f54-118c-3cb0-87f1-b8e1df00ca2d.roa File: c2856f54-118c-3cb0-87f1-b8e1df00ca2d.roa (raw, json) Hash identifier: hq/1IHYgCGFbbtGrcLTEiCJJSsLY2a7fMC2ILV2nUxo= Subject key identifier: BB:35:07:D3:34:90:EA:59:57:A5:D3:99:2C:D3:6E:00:65:4F:FE:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F7153CFB32730EF25AACA040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2856f54-118c-3cb0-87f1-b8e1df00ca2d.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 397209 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:3c:fb:32:73:0e:f2:5a:ac:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=938928b9-cf2a-4892-a06b-e1338689adb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:a8:8a:03:5b:eb:8f:8f:4c:0c:7c:14:f0: d4:60:09:14:47:61:7b:0a:0e:d1:4f:fd:67:b2:43: 0b:5b:45:5d:ef:92:18:76:34:5a:b8:3a:5d:59:c7: f4:a6:4f:fb:ab:b1:a7:db:33:54:46:5a:c9:7d:6a: a9:11:17:be:a3:bc:fb:af:4f:a9:31:c2:5f:79:fb: 70:b1:26:e3:91:3d:97:34:21:b1:8f:b4:a5:a1:d1: 81:dd:0c:57:2b:81:92:ad:69:cc:a6:83:c3:15:d4: fa:50:17:1f:8c:38:9a:5f:6e:7c:47:6b:db:9b:88: 04:fd:df:cc:63:59:e1:a0:5a:91:cb:ab:af:3f:2c: 71:62:66:95:4c:83:c6:0e:c4:18:77:d8:e0:e7:55: ed:88:5b:8e:10:4f:3b:48:94:25:17:38:bb:0f:d7: 40:b0:bc:7c:16:3e:6d:ea:cf:c8:e3:3e:bb:b6:9f: f4:e0:38:08:8e:90:bd:d7:5a:d0:32:0f:2a:b6:d0: 23:ff:0e:7d:56:b1:92:bf:9d:f8:0d:8a:26:96:ad: f2:73:cf:48:54:b3:a5:11:f9:d8:ed:e8:d9:3a:4e: 0b:f6:fc:30:a8:ae:85:1d:c3:d1:df:aa:07:ce:b2: 7b:89:07:fa:c7:d4:1b:0f:02:17:f3:07:ec:87:86: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:35:07:D3:34:90:EA:59:57:A5:D3:99:2C:D3:6E:00:65:4F:FE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2856f54-118c-3cb0-87f1-b8e1df00ca2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c2:3d:55:9a:04:8c:c9:3d:48:94:fd:3f:d1:4d:ce:78:17: 04:c8:d0:07:29:08:1a:70:ca:44:03:49:27:3f:5c:c0:af:1e: f2:05:ac:60:ee:07:a2:da:24:98:7d:d4:a5:9b:9b:a0:27:f6: 93:9d:21:45:8f:28:bb:eb:1f:0a:df:a0:f7:65:e6:a6:4f:14: f4:6b:bb:4d:bc:1d:1a:7f:12:81:e7:d6:a2:84:b0:7e:5d:6e: 3d:57:2c:e4:9c:81:7c:d6:ce:29:be:25:9a:53:83:8f:0d:0b: 6a:9f:87:e1:d6:18:8e:e8:0b:5e:44:41:f6:c8:30:4e:58:4c: e2:4b:ba:ba:c1:46:68:13:07:3c:6c:b7:2c:97:a6:3e:6c:53: 7f:b8:c1:49:a5:6e:9b:dc:bc:de:3f:a1:b5:6e:a4:4d:bc:bb: 4e:31:bc:42:61:66:d5:a9:3f:92:68:8f:b8:5a:9a:8e:ae:f3: f0:9d:30:65:24:2b:b3:18:49:b4:81:69:4c:09:33:08:9e:e6: 76:2b:2a:8d:d2:e3:6b:1c:5a:91:d9:17:e4:30:42:7d:24:9a: b5:84:11:44:60:2f:39:22:0b:92:f5:8d:11:07:01:2e:9e:32: 1c:98:66:4d:f3:82:e9:f5:08:d3:5a:7f:0a:a5:b7:c7:d3:a0: 94:cd:9d:1a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FTz7MnMO8lqsoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk OTM4OTI4YjktY2YyYS00ODkyLWEwNmItZTEzMzg2ODlhZGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3uoigNb64+PTAx8FPDUYAkUR2F7Cg7RT/1n skMLW0Vd75IYdjRauDpdWcf0pk/7q7Gn2zNURlrJfWqpERe+o7z7r0+pMcJfeftw sSbjkT2XNCGxj7SlodGB3QxXK4GSrWnMpoPDFdT6UBcfjDiaX258R2vbm4gE/d/M Y1nhoFqRy6uvPyxxYmaVTIPGDsQYd9jg51XtiFuOEE87SJQlFzi7D9dAsLx8Fj5t 6s/I4z67tp/04DgIjpC911rQMg8qttAj/w59VrGSv534DYomlq3yc89IVLOlEfnY 7ejZOk4L9vwwqK6FHcPR36oHzrJ7iQf6x9QbDwIX8wfsh4YfiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLs1B9M0kOpZV6XTmSzTbgBlT/7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzI4NTZmNTQtMTE4Yy0z Y2IwLTg3ZjEtYjhlMWRmMDBjYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBqwj1VmgSMyT1IlP0/0U3OeBcEyNAHKQgacMpE A0knP1zArx7yBaxg7gei2iSYfdSlm5ugJ/aTnSFFjyi76x8K36D3ZeamTxT0a7tN vB0afxKB59aihLB+XW49VyzknIF81s4pviWaU4OPDQtqn4fh1hiO6AteREH2yDBO WEziS7q6wUZoEwc8bLcsl6Y+bFN/uMFJpW6b3LzeP6G1bqRNvLtOMbxCYWbVqT+S aI+4WpqOrvPwnTBlJCuzGEm0gWlMCTMInuZ2KyqN0uNrHFqR2RfkMEJ9JJq1hBFE YC85IguS9Y0RBwEunjIcmGZN84Lp9QjTWn8KpbfH06CUzZ0a -----END CERTIFICATE-----Generated at Sat Jun 7 11:43:23 2025 by rpki-client