$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34060f75-fa8d-3df1-b85c-e505b3b9911e.roa File: 34060f75-fa8d-3df1-b85c-e505b3b9911e.roa (raw, json) Hash identifier: 3PO77i2VruClrEe0toJ/xn3m3Kq7gq5rgCufztHNgf8= Subject key identifier: D7:0C:14:A0:9F:5E:F0:A6:F6:E3:8A:64:F9:5D:D1:12:06:DF:A0:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A119AC051F15F96D4F5327B70 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34060f75-fa8d-3df1-b85c-e505b3b9911e.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 396552 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c0:51:f1:5f:96:d4:f5:32:7b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=ea60ec61-38a8-4bfd-9645-b5ff5749967e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:f4:dc:fe:5f:f0:cf:f8:9e:d6:d7:17:d5: aa:01:e1:34:bf:26:7f:b1:17:c0:9a:58:8d:17:5d: 27:58:79:ec:96:b9:bb:ad:b3:01:d0:2c:63:5c:7f: be:b8:a4:86:06:78:59:af:91:35:58:e7:22:3a:d9: e5:6c:7f:ae:75:17:7b:92:89:f8:21:be:c5:26:16: 7b:b1:bb:7a:e3:6b:7c:79:6a:40:53:7a:47:46:f8: f8:cc:16:fb:62:eb:9f:a2:8a:26:c7:3c:48:9f:f3: 81:77:e0:fb:91:31:48:b9:ef:1a:f3:ba:8a:e6:39: 56:9a:7f:64:d4:30:fe:e1:66:d1:f7:4b:e6:a1:39: 07:4c:1c:38:fc:65:78:2d:c8:2d:30:5a:ea:42:bc: 17:04:74:d8:5f:7f:7b:34:80:61:02:04:a2:c9:52: 5d:2d:44:a5:e2:3e:ac:a7:3f:79:c1:83:c5:e6:5e: 2b:ae:da:ec:d3:d1:86:6e:90:bd:ff:c0:a3:1b:52: c8:72:5a:32:bc:3d:95:a0:0e:0e:c1:9b:a9:49:05: 81:d1:f9:41:d9:96:1a:c8:70:04:30:c0:7d:ab:ce: 6c:68:24:00:af:4a:ba:ca:0e:c9:19:dd:25:7f:11: d9:06:9c:92:e6:ce:4f:ad:b2:c4:76:0f:31:c2:e3: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0C:14:A0:9F:5E:F0:A6:F6:E3:8A:64:F9:5D:D1:12:06:DF:A0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34060f75-fa8d-3df1-b85c-e505b3b9911e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:75:12:8b:fb:f5:33:f8:06:5b:02:e5:ec:1f:76:f2:6a:10: 95:f8:84:4f:93:dc:ad:b8:20:52:68:99:9d:97:89:1d:0f:75: ef:97:89:b7:86:bb:88:98:e8:ae:36:35:34:1a:b2:3a:88:c8: 2f:d6:36:7a:bb:9a:fe:f4:fc:e8:8b:e1:24:c8:43:7b:5f:5d: f9:e0:90:8e:d5:05:79:6a:fb:1f:1f:be:ee:69:6e:7e:33:fd: e6:b4:6a:a2:8e:36:06:2c:a7:79:7a:e9:23:5d:4e:55:58:8e: 66:af:51:be:6e:bc:b0:46:cd:83:76:1f:9e:ff:4e:58:2a:0e: 2b:d5:bb:72:d2:c7:b4:32:07:33:9a:03:16:d0:f2:31:eb:63: 11:d0:85:ed:4f:09:fe:e8:de:36:7f:05:b2:ef:6c:a6:50:8f: 23:07:2f:8c:b2:1f:af:e0:a7:26:ec:3e:6c:0a:0c:35:6b:86: d0:43:ca:d0:c1:4e:fb:d3:bd:21:d7:74:ba:0b:34:64:69:c4: 69:6f:cc:fb:1a:44:2e:a9:79:04:19:f8:d2:93:1e:2f:6c:4b: f8:99:a1:fa:3f:b9:6b:1c:60:68:74:4f:6e:db:87:30:26:91: 9b:a2:71:99:d5:fc:4a:0a:f8:bb:36:df:6c:c4:9e:5d:1f:9e: 3d:2d:5d:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoRmsBR8V+W1PUye3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk ZWE2MGVjNjEtMzhhOC00YmZkLTk2NDUtYjVmZjU3NDk5NjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudz03P5f8M/4ntbXF9WqAeE0vyZ/sRfAmliN F10nWHnslrm7rbMB0CxjXH++uKSGBnhZr5E1WOciOtnlbH+udRd7kon4Ib7FJhZ7 sbt642t8eWpAU3pHRvj4zBb7YuufooomxzxIn/OBd+D7kTFIue8a87qK5jlWmn9k 1DD+4WbR90vmoTkHTBw4/GV4LcgtMFrqQrwXBHTYX397NIBhAgSiyVJdLUSl4j6s pz95wYPF5l4rrtrs09GGbpC9/8CjG1LIcloyvD2VoA4OwZupSQWB0flB2ZYayHAE MMB9q85saCQAr0q6yg7JGd0lfxHZBpyS5s5PrbLEdg8xwuNcpwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNcMFKCfXvCm9uOKZPld0RIG36B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQwNjBmNzUtZmE4ZC0z ZGYxLWI4NWMtZTUwNWIzYjk5MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKdRKL+/Uz+AZbAuXsH3byahCV+IRPk9ytuCBS aJmdl4kdD3Xvl4m3hruImOiuNjU0GrI6iMgv1jZ6u5r+9Pzoi+EkyEN7X1354JCO 1QV5avsfH77uaW5+M/3mtGqijjYGLKd5eukjXU5VWI5mr1G+brywRs2Ddh+e/05Y Kg4r1bty0se0MgczmgMW0PIx62MR0IXtTwn+6N42fwWy72ymUI8jBy+Msh+v4Kcm 7D5sCgw1a4bQQ8rQwU77070h13S6CzRkacRpb8z7GkQuqXkEGfjSkx4vbEv4maH6 P7lrHGBodE9u24cwJpGbonGZ1fxKCvi7Nt9sxJ5dH549LV2H -----END CERTIFICATE-----Generated at Sat Jun 7 11:53:01 2025 by rpki-client