$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa File: ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa (raw, json) Hash identifier: D8zVayB23+UrYQDfLnjmfK4IhANnHBGtm0BjrM0nWlw= Subject key identifier: DC:71:F3:55:AD:D5:D5:4F:54:1B:21:B8:DD:42:AC:3F:08:22:E7:2F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A172646475F8A2C1FB1DCB240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa Signing time: Thu 05 Jun 2025 12:41:28 +0000 ROA not before: Thu 05 Jun 2025 12:41:28 +0000 ROA not after: Wed 03 Sep 2025 12:41:28 +0000 asID: 396551 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:26:46:47:5f:8a:2c:1f:b1:dc:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 5 12:41:28 2025 GMT Not After : Sep 3 12:41:28 2025 GMT Subject: CN=ccf44974-ed8f-4b63-a510-4bd770a380b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:de:a9:20:51:f1:ef:b6:59:30:e7:a1:6b:df: dd:98:5b:9c:79:e7:b2:f3:10:a9:36:94:87:d4:62: 19:91:07:41:57:eb:bc:54:5d:e1:c9:20:8f:11:b3: 2a:93:a3:63:f5:59:33:0a:e2:f3:d9:fa:86:58:76: 3b:4a:13:72:11:53:c4:72:32:71:16:70:3f:ed:86: 80:e4:09:ef:25:24:d1:03:4d:ea:85:be:53:f6:89: 40:bf:1f:cf:6a:f4:79:52:40:36:77:9d:73:5f:ad: b4:e2:99:92:dc:02:eb:03:0f:a8:81:fb:bc:ec:82: 4f:15:f3:5e:01:2e:e6:27:e0:3b:22:29:67:6b:bd: cb:03:eb:8c:5c:11:ed:80:79:6d:e4:68:47:74:c4: 5e:c7:3c:dd:07:2b:c1:f3:18:e7:64:ce:fa:0d:94: ec:0d:fc:33:b6:d2:b3:72:03:b7:cb:93:26:db:db: d6:30:3f:11:96:8e:a5:aa:65:1f:f5:17:46:ce:f4: 12:bb:f7:eb:7a:a8:b5:af:95:c5:04:27:1a:60:9f: 21:8a:62:c9:d5:be:c4:c0:dc:ab:e2:ce:28:d0:1f: a7:e4:83:41:8e:74:7d:17:9f:7d:40:ca:e8:dd:d5: 1c:d8:bc:9a:2c:1a:d5:ca:55:45:23:f0:78:f2:ef: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:71:F3:55:AD:D5:D5:4F:54:1B:21:B8:DD:42:AC:3F:08:22:E7:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:03:9c:92:b8:ba:0c:3b:83:d0:80:59:98:6a:e1:d5:ee:06: f6:2a:8b:49:f9:16:75:da:c4:86:d9:65:b3:cd:37:73:32:a7: 68:95:bc:4f:08:ff:41:c2:4d:3d:89:b6:30:d8:49:cc:f7:14: 50:34:36:0f:f3:75:41:6a:49:e0:f5:09:20:93:2f:5e:ff:68: 89:67:0e:e2:6e:04:7c:06:85:9b:5b:84:3e:5c:51:df:de:1b: 8d:ab:c9:fb:9c:9e:87:7c:d7:b6:5b:86:02:4e:64:6d:27:3e: b5:6b:6c:28:59:23:6d:ec:b1:54:17:ca:03:f5:4c:a5:bc:21: e4:2d:9b:cd:a6:f8:9e:d9:4b:11:ad:70:ff:ef:fd:83:a2:83: 2b:41:e2:cb:2f:2d:d3:f3:dd:ae:ed:7d:98:02:93:00:7d:ce: 5f:8a:9d:86:51:ee:95:15:f5:3d:2a:ba:ab:bd:ae:06:29:05: f6:f2:ca:39:4a:7b:30:f9:c7:98:87:ce:76:0a:28:bd:36:84: be:57:3c:95:96:1f:be:14:45:fe:2d:88:27:a7:c7:75:42:95: ce:e1:56:a2:f2:ef:ce:39:d0:ad:b6:3d:35:92:52:04:fa:af: 95:c7:04:2c:7d:59:a7:ec:64:5a:f7:43:9e:d4:99:97:30:6b: ba:3c:d5:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoXJkZHX4osH7HcskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNTEyNDEyOFoXDTI1MDkwMzEyNDEyOFowLzEtMCsGA1UEAxMk Y2NmNDQ5NzQtZWQ4Zi00YjYzLWE1MTAtNGJkNzcwYTM4MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd6pIFHx77ZZMOeha9/dmFuceeey8xCpNpSH 1GIZkQdBV+u8VF3hySCPEbMqk6Nj9VkzCuLz2fqGWHY7ShNyEVPEcjJxFnA/7YaA 5AnvJSTRA03qhb5T9olAvx/PavR5UkA2d51zX6204pmS3ALrAw+ogfu87IJPFfNe AS7mJ+A7Iilna73LA+uMXBHtgHlt5GhHdMRexzzdByvB8xjnZM76DZTsDfwzttKz cgO3y5Mm29vWMD8Rlo6lqmUf9RdGzvQSu/freqi1r5XFBCcaYJ8himLJ1b7EwNyr 4s4o0B+n5INBjnR9F599QMro3dUc2LyaLBrVylVFI/B48u+cNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNxx81Wt1dVPVBshuN1CrD8IIucvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmYwYmIzNTItYzZlNS0z ZjdmLWI1NmItMDU4YmU4ZGM4ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4DnJK4ugw7g9CAWZhq4dXuBvYqi0n5FnXaxIbZZbPNN3Myp2iV vE8I/0HCTT2JtjDYScz3FFA0Ng/zdUFqSeD1CSCTL17/aIlnDuJuBHwGhZtbhD5c Ud/eG42ryfucnod817ZbhgJOZG0nPrVrbChZI23ssVQXygP1TKW8IeQtm82m+J7Z SxGtcP/v/YOigytB4ssvLdPz3a7tfZgCkwB9zl+KnYZR7pUV9T0ququ9rgYpBfby yjlKezD5x5iHznYKKL02hL5XPJWWH74URf4tiCenx3VClc7hVqLy78450K22PTWS UgT6r5XHBCx9WafsZFr3Q57UmZcwa7o81Qw= -----END CERTIFICATE-----Generated at Sat Jun 7 04:21:07 2025 by rpki-client