$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf3727b-3ffc-3912-b3da-0c80dda3e2ae.roa File: ddf3727b-3ffc-3912-b3da-0c80dda3e2ae.roa (raw, json) Hash identifier: NSKZFQn8wlfcVrldSjFPPqeZXZI+ae7GqeK+idaQ+gI= Subject key identifier: C9:12:81:EA:8C:64:B3:3C:6E:90:90:C4:E5:66:F8:08:22:47:3C:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A172642AA079F902B4A6B2F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf3727b-3ffc-3912-b3da-0c80dda3e2ae.roa Signing time: Thu 05 Jun 2025 12:41:27 +0000 ROA not before: Thu 05 Jun 2025 12:41:27 +0000 ROA not after: Wed 03 Sep 2025 12:41:27 +0000 asID: 397200 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:26:42:aa:07:9f:90:2b:4a:6b:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 5 12:41:27 2025 GMT Not After : Sep 3 12:41:27 2025 GMT Subject: CN=af8c54cf-1e8f-4f7e-a9cd-624a8bfdc1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:70:c6:85:3c:11:7c:63:f0:03:2e:bf:3a: 8b:5f:3b:5a:91:9a:42:f5:40:24:e2:5b:2d:7b:a1: d4:e1:4f:2b:19:3d:98:63:d8:31:bf:d5:6a:f2:30: 4a:73:57:0d:32:1a:ed:8f:c1:f0:c3:9f:3a:46:2c: 02:01:25:c5:4b:00:5f:07:3d:3a:2f:40:68:5c:ab: 0e:80:2f:9b:fd:1c:d1:5f:7e:8a:e8:b6:95:38:b9: 71:c5:6d:93:b6:6e:5b:1b:40:d7:81:b0:a8:37:28: c8:6f:11:4b:71:50:7a:bf:13:c7:f1:dd:08:68:dd: 6e:43:08:34:23:b9:0e:de:c3:b6:75:7c:eb:76:63: 1f:90:f2:47:8e:11:ca:91:60:a0:46:f9:07:c9:d9: 6c:6a:29:ec:bc:12:34:65:23:12:68:54:4c:91:a9: 92:82:98:0d:4b:8d:9e:17:ee:a3:fe:33:a5:60:87: 69:ad:5f:58:b7:8d:dd:63:47:2d:23:71:24:a9:3a: 5d:a5:34:08:87:f8:5e:ce:b9:ad:59:e2:27:e3:b0: 91:b7:6f:ff:80:79:6d:69:e2:81:94:32:e1:5c:9a: ee:a3:1a:2f:2a:b9:fe:b0:74:ee:f3:08:14:f5:29: 88:7b:48:57:4a:07:18:ec:f1:60:b4:eb:59:af:fb: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:12:81:EA:8C:64:B3:3C:6E:90:90:C4:E5:66:F8:08:22:47:3C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf3727b-3ffc-3912-b3da-0c80dda3e2ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f6:57:94:df:f1:e9:bf:c0:c3:df:08:39:b1:1a:16:10:c4: 15:de:06:b0:59:9a:e7:46:bb:99:b4:8f:d1:b2:00:56:5e:82: 28:82:37:54:5e:68:b4:26:6b:1f:27:02:66:0f:3c:c2:0e:a0: d6:70:dd:77:53:ac:6c:6f:10:52:21:f5:1b:29:06:d0:33:4d: 84:0b:9d:d3:73:35:64:00:56:46:ff:76:85:c1:cd:99:fe:a9: 1f:8c:ef:e0:42:a6:b3:c2:7e:85:31:f3:77:27:74:17:ec:a6: 23:65:7e:10:74:ad:e9:b0:50:e3:1b:7f:1f:f2:72:9c:41:7d: f1:c7:da:8a:34:84:2f:c8:94:31:df:fc:b4:df:42:7d:ca:31: 12:b0:6d:dc:ed:d8:0b:7c:4c:84:f6:2c:20:1c:5e:8f:fc:51: b4:36:35:23:1c:98:79:67:01:34:76:61:04:b4:b7:81:ad:6d: 4f:3a:e4:37:e7:94:b6:04:d8:02:25:17:e0:85:81:96:2b:ad: 51:9e:5f:bf:0e:a7:dd:aa:fe:ea:af:51:0c:90:4b:9b:25:a1: 59:79:12:f2:ae:80:ac:3c:81:ee:9a:e6:d2:16:48:5a:67:7a: a0:98:ba:db:d2:3e:85:07:9b:d6:6b:08:a1:c1:a7:64:1d:3c: f3:b7:a8:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoXJkKqB5+QK0prL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNTEyNDEyN1oXDTI1MDkwMzEyNDEyN1owLzEtMCsGA1UEAxMk YWY4YzU0Y2YtMWU4Zi00ZjdlLWE5Y2QtNjI0YThiZmRjMWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLdwxoU8EXxj8AMuvzqLXztakZpC9UAk4lst e6HU4U8rGT2YY9gxv9Vq8jBKc1cNMhrtj8Hww586RiwCASXFSwBfBz06L0BoXKsO gC+b/RzRX36K6LaVOLlxxW2Ttm5bG0DXgbCoNyjIbxFLcVB6vxPH8d0IaN1uQwg0 I7kO3sO2dXzrdmMfkPJHjhHKkWCgRvkHydlsainsvBI0ZSMSaFRMkamSgpgNS42e F+6j/jOlYIdprV9Yt43dY0ctI3EkqTpdpTQIh/hezrmtWeIn47CRt2//gHltaeKB lDLhXJruoxovKrn+sHTu8wgU9SmIe0hXSgcY7PFgtOtZr/v3qQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMkSgeqMZLM8bpCQxOVm+AgiRzz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRmMzcyN2ItM2ZmYy0z OTEyLWIzZGEtMGM4MGRkYTNlMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA72V5Tf8em/wMPfCDmxGhYQxBXeBrBZmudGu5m0j9GyAFZegiiC N1ReaLQmax8nAmYPPMIOoNZw3XdTrGxvEFIh9RspBtAzTYQLndNzNWQAVkb/doXB zZn+qR+M7+BCprPCfoUx83cndBfspiNlfhB0remwUOMbfx/ycpxBffHH2oo0hC/I lDHf/LTfQn3KMRKwbdzt2At8TIT2LCAcXo/8UbQ2NSMcmHlnATR2YQS0t4GtbU86 5DfnlLYE2AIlF+CFgZYrrVGeX78Op92q/uqvUQyQS5sloVl5EvKugKw8ge6a5tIW SFpneqCYutvSPoUHm9ZrCKHBp2QdPPO3qGY= -----END CERTIFICATE-----Generated at Sun Jun 8 00:49:08 2025 by rpki-client