$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a7ae8e-ccdb-3aad-86ad-f87eb52aefef.roa File: d3a7ae8e-ccdb-3aad-86ad-f87eb52aefef.roa (raw, json) Hash identifier: 2Xt0NgcMNSUCTushAo09FK7eB13wNgPZxlyMRSIFhIQ= Subject key identifier: A0:C0:44:60:1F:EB:31:D4:EA:E9:8B:3F:E8:BA:34:E5:2A:78:70:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DAFBAE5FD3D0755A3BD0A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a7ae8e-ccdb-3aad-86ad-f87eb52aefef.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396575 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:fb:ae:5f:d3:d0:75:5a:3b:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=5902530b-a9fa-46de-82ab-26a17d60f8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:21:4f:ee:be:5e:40:72:c2:c0:2f:11:33: d4:2e:4d:b0:f8:6e:96:e0:45:2d:57:29:bb:f3:70: 90:d4:76:c8:86:ba:0a:8f:33:47:5c:22:fd:28:40: 4c:a5:91:56:0b:3d:bf:54:67:ad:a2:d5:70:e4:dc: 70:82:69:a4:7d:8b:b0:1e:61:b8:ab:a4:61:df:6a: dc:a9:c5:a3:e4:6a:7f:1c:af:b3:db:ef:7c:db:06: e8:e7:8b:2a:96:0e:1c:00:56:1e:42:2c:6a:9b:90: 20:15:f2:98:47:c4:f5:fd:f2:44:47:80:7c:00:88: 06:95:10:b0:29:80:09:88:c5:99:ad:e3:b8:93:00: 9f:21:59:77:34:c1:11:c9:27:b7:ee:5b:92:f0:eb: 8b:1b:04:b6:db:7b:6c:58:09:8d:e6:57:92:a9:ad: 24:73:52:b8:e2:80:a2:66:03:26:d2:11:7c:49:30: 3a:2a:a9:85:47:ab:50:aa:d7:92:bd:b1:2c:1f:7c: 3c:d7:61:37:c2:4f:bd:c1:c3:71:2a:60:8f:87:f5: 8b:9f:e7:de:f9:d3:55:4b:52:6c:a6:88:c6:11:c0: e9:09:d4:e5:87:d5:02:b8:c7:f7:a1:97:db:6d:0c: 59:75:ae:1d:68:0a:c2:75:95:55:52:de:da:58:20: 61:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C0:44:60:1F:EB:31:D4:EA:E9:8B:3F:E8:BA:34:E5:2A:78:70:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3a7ae8e-ccdb-3aad-86ad-f87eb52aefef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:cb:20:35:14:f0:0e:70:71:04:59:1a:c8:57:54:a0:7f:34: f8:97:5f:30:5f:a4:2f:77:7c:7a:9c:cc:32:a1:70:e0:a9:1a: de:13:0a:7d:2d:a4:a1:43:78:b3:88:90:97:9e:a3:07:8a:ea: 9a:ef:74:41:6c:80:fb:fa:48:46:72:26:83:98:4b:1e:f8:4f: 21:30:0b:41:f6:93:1f:85:88:61:3e:e2:75:30:a9:9e:f8:5e: f2:c7:a8:6a:54:c9:33:3b:08:33:11:a3:24:1e:a3:e9:c6:01: 59:78:47:13:56:96:0f:9d:b7:fb:7e:47:0a:06:af:93:34:62: 39:8f:6c:6d:d8:b9:4f:d4:57:b3:89:97:ac:15:9a:83:be:18: 6f:b0:f1:5a:67:8a:f6:30:f4:9c:0c:cd:cf:3e:21:2a:ee:0f: b0:95:0a:5b:ac:80:c2:f2:47:81:d8:cd:c5:08:5a:db:44:72: 25:ae:69:bd:94:f3:92:3e:6b:78:18:19:42:b4:82:a1:b4:a1: da:91:c4:fd:c4:89:0a:ed:3e:94:b9:fa:e8:27:a7:38:36:48: cf:fb:32:86:73:97:5d:aa:2f:48:4b:d3:71:82:68:00:5c:b8: 60:ab:c6:51:39:af:66:fe:26:b6:bb:66:e2:4f:51:98:40:11: 86:4c:bd:55 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2vuuX9PQdVo70KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NTkwMjUzMGItYTlmYS00NmRlLTgyYWItMjZhMTdkNjBmOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CkhT+6+XkBywsAvETPULk2w+G6W4EUtVym7 83CQ1HbIhroKjzNHXCL9KEBMpZFWCz2/VGetotVw5NxwgmmkfYuwHmG4q6Rh32rc qcWj5Gp/HK+z2+982wbo54sqlg4cAFYeQixqm5AgFfKYR8T1/fJER4B8AIgGlRCw KYAJiMWZreO4kwCfIVl3NMERySe37luS8OuLGwS223tsWAmN5leSqa0kc1K44oCi ZgMm0hF8STA6KqmFR6tQqteSvbEsH3w812E3wk+9wcNxKmCPh/WLn+fe+dNVS1Js pojGEcDpCdTlh9UCuMf3oZfbbQxZda4daArCdZVVUt7aWCBhuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKDARGAf6zHU6umLP+i6NOUqeHCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNhN2FlOGUtY2NkYi0z YWFkLTg2YWQtZjg3ZWI1MmFlZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCkyyA1FPAOcHEEWRrIV1SgfzT4l18wX6Qvd3x6 nMwyoXDgqRreEwp9LaShQ3iziJCXnqMHiuqa73RBbID7+khGciaDmEse+E8hMAtB 9pMfhYhhPuJ1MKme+F7yx6hqVMkzOwgzEaMkHqPpxgFZeEcTVpYPnbf7fkcKBq+T NGI5j2xt2LlP1FeziZesFZqDvhhvsPFaZ4r2MPScDM3PPiEq7g+wlQpbrIDC8keB 2M3FCFrbRHIlrmm9lPOSPmt4GBlCtIKhtKHakcT9xIkK7T6UufroJ6c4NkjP+zKG c5ddqi9IS9NxgmgAXLhgq8ZROa9m/ia2u2biT1GYQBGGTL1V -----END CERTIFICATE-----Generated at Fri Jun 6 19:24:06 2025 by rpki-client