$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/098cc99e-fc6a-319e-914c-0b1a6a465e63.roa File: 098cc99e-fc6a-319e-914c-0b1a6a465e63.roa (raw, json) Hash identifier: 9kA8grr7BxoqntB0LlafOb+3joBJyFUkoFSz6l4Jbj0= Subject key identifier: 72:5D:9B:C8:C5:6C:42:07:A6:72:B8:83:FC:0C:37:7E:93:50:CB:96 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A03A56836F178E407C0359940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/098cc99e-fc6a-319e-914c-0b1a6a465e63.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 396593 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:68:36:f1:78:e4:07:c0:35:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=e5c37175-280d-482e-a614-84a829dd1c4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d9:98:88:a3:ae:11:9a:0d:28:c9:0e:ee:e3: 01:6f:c8:ac:eb:0d:4e:4c:e2:74:01:a6:89:33:59: 30:16:6f:55:a1:f2:ea:de:6b:bc:fe:36:a8:b6:9e: 40:ad:f1:1e:b4:d1:ec:8e:31:35:45:0a:c1:72:c0: 79:0b:0f:73:30:32:10:b7:ea:f4:cf:cf:90:c8:19: 1d:b5:ba:6f:e3:07:b6:d1:39:06:78:ea:6c:e4:1e: c7:98:6d:ae:aa:cb:52:69:bd:f6:ef:f3:47:36:ed: 30:fe:4b:2f:7c:7d:f4:38:d6:c7:dc:1a:9a:23:86: 9f:c7:ff:ea:fc:ee:5b:88:7b:26:ce:43:a4:2e:be: 41:48:5f:19:8f:97:19:6b:a5:f5:1a:58:b4:8f:c4: 38:90:90:9d:8d:ea:7a:c6:3f:9b:ea:af:86:51:ef: 30:a5:d4:9f:5c:36:cd:28:3d:ec:f0:c0:32:b0:22: 7d:b5:75:9a:e7:6f:9e:b0:bc:07:42:4f:d5:a9:b2: cd:42:1d:18:85:f4:ac:e6:47:14:de:d1:0e:c4:3d: 64:49:75:ae:cf:12:b1:31:b4:0f:07:7b:d8:10:f1: 52:08:60:9b:01:42:f9:54:d4:a4:a1:ea:47:26:62: b6:56:b8:aa:2d:25:c8:c2:0e:16:8b:08:ac:88:c0: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5D:9B:C8:C5:6C:42:07:A6:72:B8:83:FC:0C:37:7E:93:50:CB:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/098cc99e-fc6a-319e-914c-0b1a6a465e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:17:36:4e:9d:e2:ea:38:6b:b5:55:83:e4:47:33:5f:ac:5e: 04:81:50:e8:8d:af:f4:14:7a:73:2b:02:16:73:4a:70:07:f5: fb:2e:0c:8d:81:54:c1:e4:96:81:64:e8:a8:61:ca:79:0e:6e: 8b:04:ca:51:94:d6:fb:c4:fd:ec:de:4a:e4:32:99:43:5a:21: 00:fa:28:2a:83:64:1a:17:20:80:0b:91:d2:ab:78:29:15:0e: 2d:10:51:d4:64:ac:b5:54:bb:15:f1:95:d9:75:70:fc:da:8f: 1d:30:cf:5d:4b:85:2d:29:c7:03:0f:39:4d:54:7f:f3:84:b5: c6:80:65:9d:4c:a6:34:52:60:a1:35:3f:67:fc:ec:3f:d0:45: 00:d9:12:d6:d9:3f:69:b6:80:b9:27:39:2f:67:6e:5a:5c:32: 4c:3e:be:c3:15:96:52:7c:b4:7b:92:da:0c:69:3f:e7:db:aa: 6a:9d:e8:55:ef:75:74:98:7e:e5:ac:d0:a9:ec:f8:e9:f7:a3: 7e:11:7b:96:46:3a:d3:ae:15:c3:db:44:0b:1c:e9:09:04:83: 62:57:72:da:41:6c:9e:2e:ab:88:e7:87:9f:7c:48:c2:79:68: 97:7d:89:22:18:25:52:63:c4:f5:d2:0d:98:fb:ab:36:07:b7: b1:b6:f9:f3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoDpWg28XjkB8A1mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZTVjMzcxNzUtMjgwZC00ODJlLWE2MTQtODRhODI5ZGQxYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtmYiKOuEZoNKMkO7uMBb8is6w1OTOJ0AaaJ M1kwFm9VofLq3mu8/jaotp5ArfEetNHsjjE1RQrBcsB5Cw9zMDIQt+r0z8+QyBkd tbpv4we20TkGeOps5B7HmG2uqstSab327/NHNu0w/ksvfH30ONbH3BqaI4afx//q /O5biHsmzkOkLr5BSF8Zj5cZa6X1Gli0j8Q4kJCdjep6xj+b6q+GUe8wpdSfXDbN KD3s8MAysCJ9tXWa52+esLwHQk/VqbLNQh0YhfSs5kcU3tEOxD1kSXWuzxKxMbQP B3vYEPFSCGCbAUL5VNSkoepHJmK2VriqLSXIwg4WiwisiMBHvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHJdm8jFbEIHpnK4g/wMN36TUMuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDk4Y2M5OWUtZmM2YS0z MTllLTkxNGMtMGIxYTZhNDY1ZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCWFzZOneLqOGu1VYPkRzNfrF4EgVDoja/0FHpz KwIWc0pwB/X7LgyNgVTB5JaBZOioYcp5Dm6LBMpRlNb7xP3s3krkMplDWiEA+igq g2QaFyCAC5HSq3gpFQ4tEFHUZKy1VLsV8ZXZdXD82o8dMM9dS4UtKccDDzlNVH/z hLXGgGWdTKY0UmChNT9n/Ow/0EUA2RLW2T9ptoC5JzkvZ25aXDJMPr7DFZZSfLR7 ktoMaT/n26pqnehV73V0mH7lrNCp7Pjp96N+EXuWRjrTrhXD20QLHOkJBINiV3La QWyeLquI54effEjCeWiXfYkiGCVSY8T10g2Y+6s2B7extvnz -----END CERTIFICATE-----Generated at Sat Jun 7 04:27:48 2025 by rpki-client