$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa File: c3bf3d4e-8b15-31ab-953b-979086f42c13.roa (raw, json) Hash identifier: Lwtm+2AKbk3KmMpabzKJO7D0AQPhzMFVbJpe3nMQnxo= Subject key identifier: BC:3F:85:30:00:A0:2C:8D:C2:CB:4A:E8:71:9F:F7:AA:E2:B5:74:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1F9050D2C7D32195E0BB5080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 36625 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:50:d2:c7:d3:21:95:e0:bb:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=ac058315-2356-4bba-9ff6-ebac5c38dd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:bb:51:a8:4c:43:49:cf:be:c1:c1:f8:ec: 0b:93:94:9c:dc:54:50:16:2a:a9:df:0c:df:3a:8e: 71:f4:f8:10:8b:51:da:4f:e3:cd:00:3e:18:52:7e: 0d:c9:29:09:34:e8:ac:4c:61:fc:2e:84:33:60:c7: 40:c1:33:cf:9e:1f:73:1e:19:23:de:42:43:48:4e: b7:81:ce:3f:b5:41:24:8c:92:10:27:b5:1f:54:71: ca:b0:7f:a1:65:cf:51:6b:19:c8:9b:fb:38:17:3e: 2a:e3:af:08:15:89:8c:0a:9a:18:06:e2:80:af:a1: 42:ee:2b:d5:da:0b:8d:e4:e6:78:38:75:2d:50:7d: ac:9f:ac:13:ae:b6:34:6a:4d:54:6c:f7:3b:b3:c3: 8b:40:87:ba:a6:2a:46:58:a9:d6:8c:06:a7:41:b2: 0d:e0:b2:a6:ca:38:59:50:b2:bf:25:eb:71:24:45: 85:aa:6c:84:7f:93:64:1e:86:95:81:de:71:66:9b: 07:5f:9c:17:bc:b5:71:7b:44:1e:c8:9d:38:4e:3c: 06:44:e0:64:e5:de:77:b9:e6:36:ee:98:6b:6a:6c: 38:c3:ac:96:e1:4b:7e:04:92:12:b5:74:fa:37:24: 2b:86:12:cd:e9:cf:93:75:c7:7b:64:5d:62:76:ce: 35:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3F:85:30:00:A0:2C:8D:C2:CB:4A:E8:71:9F:F7:AA:E2:B5:74:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3bf3d4e-8b15-31ab-953b-979086f42c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:45:bb:4c:bb:57:7b:da:13:62:11:b4:64:12:b4:19:39:47: e8:2d:e7:e0:16:47:cd:14:9c:40:55:81:4c:1d:36:a7:2e:43: 4d:3c:74:5d:42:f3:79:12:84:03:6c:b2:f5:dc:a8:c4:3a:4e: 93:4b:a4:2f:14:40:77:0a:e7:84:b6:e5:54:10:f3:46:44:50: 50:59:e4:c9:b0:05:7a:99:c8:1d:bf:74:6e:61:62:c1:60:d5: 95:22:4b:1d:38:0b:eb:92:e6:52:25:d4:dc:28:36:05:c3:7e: 91:8b:6d:1c:38:3e:c3:4e:1e:32:30:4b:a6:70:5a:b2:06:c3: e2:25:6d:1a:02:02:ce:68:28:fd:12:2e:dc:18:07:0a:b6:32: 81:62:a1:f7:e7:e7:2c:92:31:e4:cc:72:0c:15:8a:ff:bf:7b: 00:da:73:ab:17:dd:29:75:72:45:57:ba:f6:6e:8a:e8:c1:0f: 4a:5b:7d:ca:f2:71:e5:4f:76:04:6e:e0:fd:81:53:f9:73:04: 12:48:ac:2c:71:57:1e:c5:6f:ce:bb:e6:e7:e7:34:8d:01:5d: 61:4a:6f:90:92:39:83:f1:5d:45:e1:d8:b2:60:4d:49:75:4a: b9:4d:f4:58:33:7e:f1:be:ae:64:2a:bd:c7:37:5f:f0:fa:39: 27:bd:2e:94 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEofkFDSx9MhleC7UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YWMwNTgzMTUtMjM1Ni00YmJhLTlmZjYtZWJhYzVjMzhkZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5G7UahMQ0nPvsHB+OwLk5Sc3FRQFiqp3wzf Oo5x9PgQi1HaT+PNAD4YUn4NySkJNOisTGH8LoQzYMdAwTPPnh9zHhkj3kJDSE63 gc4/tUEkjJIQJ7UfVHHKsH+hZc9RaxnIm/s4Fz4q468IFYmMCpoYBuKAr6FC7ivV 2guN5OZ4OHUtUH2sn6wTrrY0ak1UbPc7s8OLQIe6pipGWKnWjAanQbIN4LKmyjhZ ULK/JetxJEWFqmyEf5NkHoaVgd5xZpsHX5wXvLVxe0QeyJ04TjwGROBk5d53ueY2 7phramw4w6yW4Ut+BJIStXT6NyQrhhLN6c+Tdcd7ZF1ids41FQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLw/hTAAoCyNwstK6HGf96ritXQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzNiZjNkNGUtOGIxNS0z MWFiLTk1M2ItOTc5MDg2ZjQyYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAARbtMu1d72hNiEbRkErQZOUfoLefgFkfNFJxA VYFMHTanLkNNPHRdQvN5EoQDbLL13KjEOk6TS6QvFEB3CueEtuVUEPNGRFBQWeTJ sAV6mcgdv3RuYWLBYNWVIksdOAvrkuZSJdTcKDYFw36Ri20cOD7DTh4yMEumcFqy BsPiJW0aAgLOaCj9Ei7cGAcKtjKBYqH35+cskjHkzHIMFYr/v3sA2nOrF90pdXJF V7r2borowQ9KW33K8nHlT3YEbuD9gVP5cwQSSKwscVcexW/Ou+bn5zSNAV1hSm+Q kjmD8V1F4diyYE1JdUq5TfRYM37xvq5kKr3HN1/w+jknvS6U -----END CERTIFICATE-----Generated at Wed Jul 23 17:25:12 2025 by rpki-client