$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa File: cf396b27-1498-3439-acc8-7ea8d9da0e83.roa (raw, json) Hash identifier: 6S6tvE+7XbWLSrxGltso8iGb8sHIbahEzstAO1d80fE= Subject key identifier: 70:77:BC:21:FE:AB:7F:6F:EB:62:50:42:6A:0F:1B:97:FA:D2:13:AA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A093AA54249191E09DF566430 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 396580 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a5:42:49:19:1e:09:df:56:64:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=87c6bf7f-7c1e-42a2-a698-ba2f2a6fd1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:d0:73:78:ef:c8:6b:26:cf:6b:6a:91:46: 6b:17:84:9a:83:34:0b:9c:27:23:5f:13:d0:19:40: 19:db:60:25:83:66:fa:bb:23:b6:5f:03:6e:dd:55: a3:0d:7c:b6:fb:7b:e8:40:ed:7c:84:80:94:97:b3: 3b:29:31:63:e8:68:50:0f:75:01:8e:43:0a:b2:e5: 18:fe:98:58:c4:95:30:50:0f:94:ab:02:45:08:ee: 55:72:50:4a:71:9b:76:5d:df:04:3d:96:0b:99:dc: ec:39:34:02:89:40:22:11:43:e6:46:d6:5a:ad:ac: 9a:77:f5:df:31:97:be:e0:23:75:b1:6a:b3:f7:b6: e9:b5:a2:8b:07:65:ac:13:dc:b3:90:c5:07:fd:63: d2:1e:bf:34:f9:48:af:04:47:ce:eb:0a:ed:51:40: 57:17:38:14:62:96:2d:ca:d9:7d:cd:b5:a3:6b:64: 98:72:70:5c:10:69:1e:63:0c:89:4c:80:61:01:f9: 95:34:30:cf:16:26:70:5d:da:0d:86:9a:f7:9c:81: 67:05:9f:62:ff:02:e8:2b:c8:ad:03:ea:3a:dc:25: 85:88:9c:ff:7b:60:b0:c7:05:d8:3e:c2:3e:25:75: 74:c8:0a:f3:ad:31:5c:07:d4:d1:c3:e2:7d:87:02: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:77:BC:21:FE:AB:7F:6F:EB:62:50:42:6A:0F:1B:97:FA:D2:13:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf396b27-1498-3439-acc8-7ea8d9da0e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:cd:a8:a4:50:5b:98:28:12:3e:2c:d9:9e:0d:0f:1e:6b:e1: c5:2b:5c:76:7b:33:2b:73:9a:33:c0:c3:7b:8b:98:74:92:14: 61:7d:82:18:4d:f4:26:59:c0:42:5d:eb:19:23:e0:8e:94:d1: 69:b7:50:8c:c4:ed:77:e0:bd:67:92:7d:40:1a:b4:6a:50:5c: 56:a8:29:83:cd:95:42:cd:4c:22:5a:a4:01:d1:f3:19:f2:db: 45:cf:c3:dd:7c:99:91:ad:00:d0:8d:f4:5f:60:bb:9d:8f:bf: 3d:94:76:f8:81:85:f9:61:92:07:58:d4:39:98:1a:75:61:fc: d6:62:c5:2c:30:fe:81:45:c3:e4:bc:6d:e7:14:8b:1d:f2:b6: 69:61:dd:23:05:b5:02:e2:9b:87:5a:5a:44:23:c7:d9:51:2c: 71:bd:90:81:84:19:bd:e9:28:27:e8:97:e0:a1:bb:7c:f8:20: 89:1c:a7:66:07:81:ea:ef:c9:80:0c:66:65:be:7e:c9:98:e0: 9e:44:f3:1e:8b:6b:e5:11:d9:a0:50:93:ef:13:bb:b3:33:f4: 16:4a:f0:29:7f:b9:23:6a:dc:da:23:59:01:7b:0b:fa:75:cb: 1f:c5:4d:cf:44:f9:32:af:07:a7:85:e8:0f:d0:2d:0b:8e:0b: 5f:5b:d9:62 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqVCSRkeCd9WZDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ODdjNmJmN2YtN2MxZS00MmEyLWE2OTgtYmEyZjJhNmZkMWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc7Qc3jvyGsmz2tqkUZrF4SagzQLnCcjXxPQ GUAZ22Alg2b6uyO2XwNu3VWjDXy2+3voQO18hICUl7M7KTFj6GhQD3UBjkMKsuUY /phYxJUwUA+UqwJFCO5VclBKcZt2Xd8EPZYLmdzsOTQCiUAiEUPmRtZarayad/Xf MZe+4CN1sWqz97bptaKLB2WsE9yzkMUH/WPSHr80+UivBEfO6wrtUUBXFzgUYpYt ytl9zbWja2SYcnBcEGkeYwyJTIBhAfmVNDDPFiZwXdoNhpr3nIFnBZ9i/wLoK8it A+o63CWFiJz/e2CwxwXYPsI+JXV0yArzrTFcB9TRw+J9hwKdTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHB3vCH+q39v62JQQmoPG5f60hOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzOTZiMjctMTQ5OC0z NDM5LWFjYzgtN2VhOGQ5ZGEwZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQACzaikUFuYKBI+LNmeDQ8ea+HFK1x2ezMrc5oz wMN7i5h0khRhfYIYTfQmWcBCXesZI+COlNFpt1CMxO134L1nkn1AGrRqUFxWqCmD zZVCzUwiWqQB0fMZ8ttFz8PdfJmRrQDQjfRfYLudj789lHb4gYX5YZIHWNQ5mBp1 YfzWYsUsMP6BRcPkvG3nFIsd8rZpYd0jBbUC4puHWlpEI8fZUSxxvZCBhBm96Sgn 6Jfgobt8+CCJHKdmB4Hq78mADGZlvn7JmOCeRPMei2vlEdmgUJPvE7uzM/QWSvAp f7kjatzaI1kBewv6dcsfxU3PRPkyrwenhegP0C0LjgtfW9li -----END CERTIFICATE-----Generated at Fri Jun 6 19:45:46 2025 by rpki-client