$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc0e15ff-7347-3e11-87c3-45dd4c538e3f.roa File: cc0e15ff-7347-3e11-87c3-45dd4c538e3f.roa (raw, json) Hash identifier: YnqPPXSxAK9A2M0KKPpBn9PS5itNXT5HHXeCF9aMG+I= Subject key identifier: 12:46:BC:4E:D1:93:A1:F2:EF:D2:0A:24:16:96:9B:A5:B8:B7:48:4D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F715401C68CEB267EF1A9D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc0e15ff-7347-3e11-87c3-45dd4c538e3f.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 36632 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:40:1c:68:ce:b2:67:ef:1a:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=0d77a2bf-7ec4-4e95-9401-6e7f91ab1ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:f9:7b:2c:19:8b:ef:31:87:e5:d5:6d:6b: c6:8e:f4:23:8c:81:e2:b1:02:78:ea:97:71:3d:62: 8b:f1:ce:7b:d0:d4:6d:b9:b9:dd:83:26:03:c7:2b: 9e:f3:bf:8d:57:cb:f7:21:16:0e:a6:cd:d7:de:f3: 66:56:e2:ac:d2:c4:fd:63:a0:94:5b:42:a3:f9:24: 37:f1:c1:3a:27:ff:b9:3a:85:af:bb:83:ee:e6:a8: d1:27:eb:c6:da:8b:be:8a:ea:00:0a:f0:1f:c8:e8: 01:e1:c2:41:fc:3f:02:da:ee:61:10:dc:a3:29:c2: 97:c0:fd:c7:87:9d:ba:79:23:b9:b0:08:80:f5:07: 67:6f:60:c1:68:ee:4b:68:ce:20:88:ea:1d:e0:c2: 9f:15:d2:ea:e9:8e:87:dd:33:4b:5b:12:d7:78:d0: 37:3f:44:67:a2:b6:90:e4:1d:c3:75:5b:6a:c4:ac: 1a:30:2d:e5:ab:1b:ab:72:97:c6:f0:48:7c:f8:ae: 0d:91:17:f7:c8:d5:84:c3:a0:e9:7b:94:92:3a:81: e7:bf:f4:a2:d5:5e:87:b7:58:4d:96:a7:4d:82:ae: 9a:70:c2:33:ac:9a:be:97:63:5a:f9:d1:df:09:1a: 85:f7:f7:3b:e3:b9:fe:ab:65:b1:43:39:ed:49:8a: f1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:BC:4E:D1:93:A1:F2:EF:D2:0A:24:16:96:9B:A5:B8:B7:48:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc0e15ff-7347-3e11-87c3-45dd4c538e3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:23:c2:ad:96:fe:f9:20:c1:f0:a2:0c:78:4a:7d:dd:bf:42: ef:c1:98:6e:ec:d3:a4:21:61:69:0a:61:04:8e:21:7b:1c:8d: 87:73:2e:8f:0e:03:31:51:f2:fc:f2:96:a7:4e:50:ae:a1:b6: f5:91:e6:ad:83:53:d9:49:0a:b8:cb:ea:68:50:bd:c8:1f:52: f4:da:d8:cb:3a:b1:70:7f:52:e3:3c:d1:17:de:96:e5:0e:3f: e9:1f:16:76:0c:8e:9f:2a:f7:5a:6f:bb:8c:8f:f9:63:f8:47: f2:5a:52:6b:0d:05:ce:79:78:c2:12:8c:ed:b8:2e:73:22:1f: 1f:a6:f7:75:27:58:4e:1e:6e:31:09:b5:26:88:d7:ef:35:db: c0:e8:90:15:0f:c3:49:8b:47:cb:62:2a:90:da:1e:d5:4c:04: 52:54:7c:91:40:7b:ec:a0:8b:9f:23:7f:14:bf:91:be:c0:b5: 9e:57:56:66:86:69:f7:61:30:92:e5:b6:75:a8:f6:15:3e:c3: e6:e2:03:d5:4d:3c:65:55:a0:dd:59:5b:4d:df:a5:2e:91:1c: b3:5f:7b:f5:d9:97:c3:aa:70:cb:9e:ff:32:aa:84:01:93:0c: 30:40:6c:d3:69:71:f1:89:23:4d:21:cc:f2:a0:49:6b:27:ff: 84:52:b1:21 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FUAcaM6yZ+8anQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MGQ3N2EyYmYtN2VjNC00ZTk1LTk0MDEtNmU3ZjkxYWIxZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJL5eywZi+8xh+XVbWvGjvQjjIHisQJ46pdx PWKL8c570NRtubndgyYDxyue87+NV8v3IRYOps3X3vNmVuKs0sT9Y6CUW0Kj+SQ3 8cE6J/+5OoWvu4Pu5qjRJ+vG2ou+iuoACvAfyOgB4cJB/D8C2u5hENyjKcKXwP3H h526eSO5sAiA9Qdnb2DBaO5LaM4giOod4MKfFdLq6Y6H3TNLWxLXeNA3P0RnoraQ 5B3DdVtqxKwaMC3lqxurcpfG8Eh8+K4NkRf3yNWEw6Dpe5SSOoHnv/Si1V6Ht1hN lqdNgq6acMIzrJq+l2Na+dHfCRqF9/c747n+q2WxQzntSYrxWwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBJGvE7Rk6Hy79IKJBaWm6W4t0hNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2MwZTE1ZmYtNzM0Ny0z ZTExLTg3YzMtNDVkZDRjNTM4ZTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCAI8Ktlv75IMHwogx4Sn3dv0LvwZhu7NOkIWFp CmEEjiF7HI2Hcy6PDgMxUfL88panTlCuobb1keatg1PZSQq4y+poUL3IH1L02tjL OrFwf1LjPNEX3pblDj/pHxZ2DI6fKvdab7uMj/lj+EfyWlJrDQXOeXjCEoztuC5z Ih8fpvd1J1hOHm4xCbUmiNfvNdvA6JAVD8NJi0fLYiqQ2h7VTARSVHyRQHvsoIuf I38Uv5G+wLWeV1Zmhmn3YTCS5bZ1qPYVPsPm4gPVTTxlVaDdWVtN36UukRyzX3v1 2ZfDqnDLnv8yqoQBkwwwQGzTaXHxiSNNIczyoElrJ/+EUrEh -----END CERTIFICATE-----Generated at Fri Jun 6 19:32:07 2025 by rpki-client