$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa File: 24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa (raw, json) Hash identifier: +QKN5pjnCiAiZOZ6A6Z95gb+BwyfsX4vXyftlmEg5oI= Subject key identifier: 71:DB:53:19:03:8D:FC:2C:F3:10:6D:59:A9:A2:B8:88:97:38:1D:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB274845A6C71A0099CF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 397198 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:27:48:45:a6:c7:1a:00:99:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=7dd9c0ab-f3c4-4607-9fdf-68888e5f934b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:35:b3:b5:8e:9a:f3:f9:02:06:f2:f0:a6:3d: b9:8d:2e:b3:1b:fa:b9:bb:8f:1e:35:9d:48:c7:90: d9:f9:c5:8b:9c:c1:d7:fc:a1:85:c1:9b:ff:73:2d: 57:71:33:79:84:c3:40:62:7f:b2:dc:73:5f:7c:a4: 7a:b5:4b:71:e5:75:4a:0c:79:21:ed:9b:f3:dd:a0: 74:ac:cd:1d:22:7f:9a:db:2d:8a:40:c5:b6:79:52: 38:b6:6d:53:55:c7:bf:4f:11:c4:57:1d:6f:15:2b: d9:53:f2:1c:fa:57:2b:23:84:66:ba:08:45:78:1e: 7e:0e:a0:20:5e:a8:54:ca:0c:85:38:f8:80:7c:b4: 2b:0e:2e:0f:71:3d:f6:92:bf:c8:16:a5:0f:ee:75: 61:20:f8:f8:df:c4:f0:66:78:67:7d:0d:f3:66:35: cb:4e:06:57:ff:5c:e4:70:c7:ae:f1:80:95:8b:bb: 19:07:a9:71:5d:1e:d4:84:e3:35:9b:3f:8c:9a:a6: 96:c0:94:12:42:e9:11:80:e9:fb:ec:58:c8:dc:76: 3d:37:c1:ca:75:e9:2a:2f:7d:4d:e0:e7:8a:2a:3b: 5b:bd:96:d6:4f:44:19:9e:57:e3:19:ef:32:72:12: 14:1b:61:83:72:f2:f3:2b:9b:07:c4:62:c4:22:80: 59:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DB:53:19:03:8D:FC:2C:F3:10:6D:59:A9:A2:B8:88:97:38:1D:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24047a38-5dd2-34d7-a4f0-b7f5a6af961e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6f:d3:2a:8a:56:3e:f3:a3:1d:cb:66:da:2e:eb:1c:ff:bf: 7d:65:2e:99:86:c9:cf:a8:d5:3b:93:7b:6a:eb:65:2d:c1:35: ec:de:b8:5e:2c:32:30:da:7e:3a:a6:ce:7d:3b:44:07:44:1b: 24:d6:f4:93:cb:be:55:5c:64:62:80:32:f4:43:fb:51:c6:57: ba:28:6a:cf:7d:0a:18:25:12:f9:cb:93:32:bc:1f:ae:c9:b1: 67:0e:82:5f:8b:b1:2f:75:c7:84:5e:43:56:3b:c4:ae:3c:7b: 30:09:fa:15:5b:30:20:f5:31:b9:08:76:9b:bf:e2:8b:c9:b7: 0b:71:06:e5:b4:34:e4:73:b2:c2:0e:bb:25:d4:35:01:5a:ee: 1e:68:e6:7f:bd:0d:2b:5b:19:df:bf:33:d0:4e:b2:17:e3:1e: 9c:66:8b:5e:6b:56:9d:e4:8e:9a:b5:37:59:ac:8d:0d:a8:ab: 95:33:54:13:2e:38:7c:3c:39:99:df:2d:b9:15:c6:c0:3f:a2: e0:de:1e:b2:15:7b:55:f9:fe:c0:a2:3b:ef:91:5d:eb:64:ff: b3:bc:1f:1a:19:99:4b:89:07:f6:8c:61:2f:cc:b7:80:4a:bf: e1:6e:79:03:36:a4:28:17:28:eb:53:77:c3:45:5e:50:45:75: 23:70:50:d3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2ydIRabHGgCZz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk N2RkOWMwYWItZjNjNC00NjA3LTlmZGYtNjg4ODhlNWY5MzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DWztY6a8/kCBvLwpj25jS6zG/q5u48eNZ1I x5DZ+cWLnMHX/KGFwZv/cy1XcTN5hMNAYn+y3HNffKR6tUtx5XVKDHkh7Zvz3aB0 rM0dIn+a2y2KQMW2eVI4tm1TVce/TxHEVx1vFSvZU/Ic+lcrI4RmughFeB5+DqAg XqhUygyFOPiAfLQrDi4PcT32kr/IFqUP7nVhIPj438TwZnhnfQ3zZjXLTgZX/1zk cMeu8YCVi7sZB6lxXR7UhOM1mz+MmqaWwJQSQukRgOn77FjI3HY9N8HKdekqL31N 4OeKKjtbvZbWT0QZnlfjGe8ychIUG2GDcvLzK5sHxGLEIoBZ1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHHbUxkDjfws8xBtWamiuIiXOB3vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQwNDdhMzgtNWRkMi0z NGQ3LWE0ZjAtYjdmNWE2YWY5NjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBdb9MqilY+86Mdy2baLusc/799ZS6ZhsnPqNU7 k3tq62UtwTXs3rheLDIw2n46ps59O0QHRBsk1vSTy75VXGRigDL0Q/tRxle6KGrP fQoYJRL5y5MyvB+uybFnDoJfi7EvdceEXkNWO8SuPHswCfoVWzAg9TG5CHabv+KL ybcLcQbltDTkc7LCDrsl1DUBWu4eaOZ/vQ0rWxnfvzPQTrIX4x6cZotea1ad5I6a tTdZrI0NqKuVM1QTLjh8PDmZ3y25FcbAP6Lg3h6yFXtV+f7AojvvkV3rZP+zvB8a GZlLiQf2jGEvzLeASr/hbnkDNqQoFyjrU3fDRV5QRXUjcFDT -----END CERTIFICATE-----Generated at Sat Jun 7 11:52:43 2025 by rpki-client