$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa File: e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa (raw, json) Hash identifier: XY9Ct1hHpIsBenahVzbTrbGv1TqEqsJpeWCNNUVm3F0= Subject key identifier: CA:A3:61:75:A4:A6:EC:D4:D5:CA:B2:03:5F:1D:09:43:B2:68:14:DB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A093AAAE222C39399C64B6980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 396594 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:aa:e2:22:c3:93:99:c6:4b:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=eb065f18-6d8c-47ac-9ea4-7970045c03b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5e:7d:31:4d:9d:9b:2d:f1:d5:1f:fa:fc:1c: 7d:db:b4:08:6b:c7:8e:30:99:7b:f4:6a:5b:b1:d0: a4:c4:c1:6e:24:83:5b:2b:f0:ab:2c:b7:6a:d7:6d: f3:d0:62:3b:c5:21:17:ff:ed:6e:c0:cc:5d:44:8b: d0:9c:27:e7:3e:67:85:ea:cf:59:97:d8:a3:45:ff: 7a:37:82:1c:0b:d7:73:b7:50:a6:1a:c6:92:e6:77: 9b:fa:3d:88:cd:da:91:09:f1:51:b1:cf:49:07:24: 79:ab:29:0d:1c:1e:af:a8:e0:f2:b3:c0:35:cf:79: 97:ad:9b:e1:71:dd:46:6a:d3:96:be:46:7d:88:f9: 02:f3:c6:87:6e:a0:fb:1a:da:17:69:76:c9:24:6a: 14:19:80:fa:68:10:2e:7c:3b:d5:25:bb:23:35:c7: 2e:e8:41:0b:36:18:ed:f9:81:49:bc:74:40:79:c2: d3:58:8c:62:75:a0:d6:13:a0:51:91:dd:1b:53:57: 2c:9a:49:ef:5d:dd:62:12:33:d9:86:31:17:58:e1: f4:43:27:35:81:56:a4:12:ef:4c:89:8a:cb:5e:d5: 23:fb:23:c7:51:c8:5d:1b:19:a7:d9:6e:32:80:4e: bb:2f:5e:bb:cb:3c:5c:40:bc:3b:30:07:dd:74:57: 52:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A3:61:75:A4:A6:EC:D4:D5:CA:B2:03:5F:1D:09:43:B2:68:14:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e19f4b8e-0ee4-38de-a8aa-2eeae414524a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:71:78:3f:38:17:c7:9d:ba:73:ae:e2:1f:39:e4:3f:f0:d4: 5b:4c:be:dc:26:d8:17:86:f0:2e:65:6c:d9:5f:5b:32:d0:a0: cf:e4:15:21:6f:6e:41:ce:ab:cc:9e:93:7e:47:2a:39:b8:97: de:87:85:8e:93:32:c8:4d:8a:67:3d:65:17:02:2c:68:d9:99: 6d:a8:29:bb:04:d8:88:40:54:e5:e9:e0:5f:33:a8:ba:fb:82: 85:9c:64:5b:c2:eb:15:ff:e2:4d:f7:00:40:03:14:1b:f0:a1: da:f8:d1:ce:e3:07:77:46:ab:8a:51:a7:bf:6d:49:20:f4:fd: 19:d7:be:7b:96:df:62:37:54:4e:86:16:65:75:3f:d3:17:52: aa:10:b9:65:5c:44:48:c4:9e:81:81:e4:93:de:e2:03:da:8f: 5d:de:ef:d9:29:ac:07:3a:cc:b1:13:61:95:e0:83:38:3f:4e: 1b:d5:d2:5c:2e:c5:b7:e0:d4:99:cd:84:75:16:fa:7d:39:bf: 88:1e:e9:ba:40:2e:65:49:9a:ce:e7:f7:c4:db:5b:0f:4c:a0: 27:e0:e1:11:2f:37:d6:7f:2a:a6:8d:34:cb:0b:fb:6e:65:24: fe:bd:7e:50:1c:f2:e5:fc:3a:c4:57:79:cf:ce:2a:b2:a4:aa: bc:5a:0c:cc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqriIsOTmcZLaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk ZWIwNjVmMTgtNmQ4Yy00N2FjLTllYTQtNzk3MDA0NWMwM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk159MU2dmy3x1R/6/Bx927QIa8eOMJl79Gpb sdCkxMFuJINbK/CrLLdq123z0GI7xSEX/+1uwMxdRIvQnCfnPmeF6s9Zl9ijRf96 N4IcC9dzt1CmGsaS5neb+j2IzdqRCfFRsc9JByR5qykNHB6vqODys8A1z3mXrZvh cd1GatOWvkZ9iPkC88aHbqD7GtoXaXbJJGoUGYD6aBAufDvVJbsjNccu6EELNhjt +YFJvHRAecLTWIxidaDWE6BRkd0bU1csmknvXd1iEjPZhjEXWOH0Qyc1gVakEu9M iYrLXtUj+yPHUchdGxmn2W4ygE67L167yzxcQLw7MAfddFdS1QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMqjYXWkpuzU1cqyA18dCUOyaBTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTE5ZjRiOGUtMGVlNC0z OGRlLWE4YWEtMmVlYWU0MTQ1MjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCvcXg/OBfHnbpzruIfOeQ/8NRbTL7cJtgXhvAu ZWzZX1sy0KDP5BUhb25BzqvMnpN+Ryo5uJfeh4WOkzLITYpnPWUXAixo2ZltqCm7 BNiIQFTl6eBfM6i6+4KFnGRbwusV/+JN9wBAAxQb8KHa+NHO4wd3RquKUae/bUkg 9P0Z1757lt9iN1ROhhZldT/TF1KqELllXERIxJ6BgeST3uID2o9d3u/ZKawHOsyx E2GV4IM4P04b1dJcLsW34NSZzYR1Fvp9Ob+IHum6QC5lSZrO5/fE21sPTKAn4OER LzfWfyqmjTTLC/tuZST+vX5QHPLl/DrEV3nPziqypKq8WgzM -----END CERTIFICATE-----Generated at Fri Jun 6 19:21:21 2025 by rpki-client