$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34714fc8-0d18-3e30-b35c-efaa91f26c16.roa File: 34714fc8-0d18-3e30-b35c-efaa91f26c16.roa (raw, json) Hash identifier: cYao4YTgknqGy0zT5an5cqdy9m5ZKIDWMuTIIeFHYT0= Subject key identifier: F8:D5:92:E9:F2:2D:DE:F4:7E:04:1C:44:B7:64:62:3B:01:87:9E:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB2D46F1CA067FE3F20E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34714fc8-0d18-3e30-b35c-efaa91f26c16.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 211369 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:2d:46:f1:ca:06:7f:e3:f2:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=349faec3-8e15-41af-b477-0d4e3a9937a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:75:77:ed:49:6f:5f:8b:cf:67:19:5e:a7:52: e9:38:e2:fa:07:00:9f:0a:48:b6:1a:e2:68:62:36: 71:32:a1:0e:52:4f:eb:61:80:d8:f1:b1:eb:42:af: c0:30:7c:5e:56:1e:fb:f1:62:cd:57:cb:eb:ee:94: 6f:84:53:5a:d2:65:3d:d8:24:98:73:95:d3:da:54: d6:d0:b8:47:14:7b:ef:c6:2b:c5:2d:8c:f9:96:83: 38:8a:e9:1d:72:07:8f:50:c2:cd:75:df:b0:d2:fc: 36:2d:03:09:bd:ef:e2:a9:24:1b:19:04:10:5c:23: 8d:5f:83:7a:b7:fa:1e:57:fe:36:82:b5:2f:fc:06: 0e:89:ac:40:57:60:19:47:2a:72:cb:ed:96:2a:19: 89:87:4b:d4:e1:4e:07:28:c8:a9:4d:76:e1:62:32: 02:71:65:08:5f:2c:85:7a:00:62:51:04:b6:fa:c6: f8:91:0d:41:f0:53:59:92:e4:b9:73:22:e3:26:87: fa:3f:ef:d8:e2:5d:df:3f:bc:04:92:a5:ae:2a:90: 82:65:89:c2:f5:26:b0:32:7d:55:11:7c:0d:a9:cb: bf:82:a4:79:25:35:04:d8:cb:69:19:15:ff:d9:f5: 16:8b:2e:54:8e:76:36:89:43:75:4d:0b:9a:c6:19: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D5:92:E9:F2:2D:DE:F4:7E:04:1C:44:B7:64:62:3B:01:87:9E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34714fc8-0d18-3e30-b35c-efaa91f26c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:87:88:03:c3:b7:09:ac:1c:7f:3f:37:ad:d8:7e:50:f5:39: d0:51:b2:a5:fd:ee:57:08:d4:4b:5e:d8:60:e3:8a:b6:f4:ac: 3b:86:eb:a3:ee:0f:94:39:9b:da:23:b9:03:aa:61:34:0a:73: 96:dd:39:d9:28:58:dc:43:40:21:dc:65:ba:94:4d:10:23:70: bb:03:b3:67:57:05:fe:ab:30:5f:a9:01:b7:ff:93:11:38:b2: ab:71:f3:73:b7:14:de:99:7f:b5:05:67:58:7c:1f:c9:f5:01: 8d:04:1e:ff:af:e1:15:5f:aa:f1:43:d7:59:7c:cf:20:a0:e3: 48:4d:ec:78:30:ff:31:67:d9:da:e9:08:61:ba:eb:27:35:c5: 25:af:e8:ae:1f:e2:d0:f6:df:26:2d:0f:79:1e:62:ed:c1:3e: 66:1f:27:2e:59:8c:d3:6e:76:60:a2:e6:44:b4:d3:e8:b1:77: 21:2a:de:b7:58:e8:75:f8:16:dc:f4:43:3f:39:0f:20:b1:a4: e5:a3:e8:9a:84:df:3d:f1:7b:76:96:69:77:15:0a:ce:28:da: 14:5c:0b:49:b7:47:8f:eb:00:86:59:ec:61:5a:8a:a6:85:5c: 39:99:ef:6d:07:cf:2b:11:8b:81:c4:b9:1a:29:64:d4:a3:81: e0:48:d7:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2y1G8coGf+PyDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MzQ5ZmFlYzMtOGUxNS00MWFmLWI0NzctMGQ0ZTNhOTkzN2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3V37UlvX4vPZxlep1LpOOL6BwCfCki2GuJo YjZxMqEOUk/rYYDY8bHrQq/AMHxeVh778WLNV8vr7pRvhFNa0mU92CSYc5XT2lTW 0LhHFHvvxivFLYz5loM4iukdcgePUMLNdd+w0vw2LQMJve/iqSQbGQQQXCONX4N6 t/oeV/42grUv/AYOiaxAV2AZRypyy+2WKhmJh0vU4U4HKMipTXbhYjICcWUIXyyF egBiUQS2+sb4kQ1B8FNZkuS5cyLjJof6P+/Y4l3fP7wEkqWuKpCCZYnC9SawMn1V EXwNqcu/gqR5JTUE2MtpGRX/2fUWiy5UjnY2iUN1TQuaxhlIiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPjVkunyLd70fgQcRLdkYjsBh56PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQ3MTRmYzgtMGQxOC0z ZTMwLWIzNWMtZWZhYTkxZjI2YzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAh4gDw7cJrBx/Pzet2H5Q9TnQUbKl/e5XCNRL Xthg44q29Kw7huuj7g+UOZvaI7kDqmE0CnOW3TnZKFjcQ0Ah3GW6lE0QI3C7A7Nn VwX+qzBfqQG3/5MROLKrcfNztxTemX+1BWdYfB/J9QGNBB7/r+EVX6rxQ9dZfM8g oONITex4MP8xZ9na6QhhuusnNcUlr+iuH+LQ9t8mLQ95HmLtwT5mHycuWYzTbnZg ouZEtNPosXchKt63WOh1+Bbc9EM/OQ8gsaTlo+iahN898Xt2lml3FQrOKNoUXAtJ t0eP6wCGWexhWoqmhVw5me9tB88rEYuBxLkaKWTUo4HgSNfE -----END CERTIFICATE-----Generated at Fri Jun 6 19:35:31 2025 by rpki-client