$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa File: 35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa (raw, json) Hash identifier: rUx5r0B7mls1tERSuBEfA2ULkp0SL6OdE1LcUTKmKV8= Subject key identifier: 39:E2:70:D7:E3:2C:2D:00:72:B6:9A:28:B4:7C:25:A8:C0:24:6A:5A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB00DE02B39E2194A06100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396608 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:00:de:02:b3:9e:21:94:a0:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=59aabc05-f338-47df-93ff-7a43636cf20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4b:02:89:cc:f3:d0:1f:31:7e:3d:5e:c6:9f: 24:e8:00:3d:0e:fb:0a:83:88:98:77:3b:32:c4:39: 58:c6:e4:c5:02:5b:3e:cb:f8:a0:d0:e5:80:85:66: 81:c0:95:3a:a3:48:d9:98:01:04:a9:e0:4c:6f:71: 29:fd:61:f7:52:86:ed:72:50:04:67:77:57:0a:ae: af:5b:7e:dc:1a:28:8d:4f:ce:a8:fa:7d:3c:9d:b6: 26:2f:6e:06:6e:9b:91:01:46:7c:c8:9a:07:fe:b1: 18:1f:cd:9e:4c:79:b2:8f:14:25:2a:2c:71:dc:d5: 1c:f1:17:61:a7:d7:31:d6:80:b2:9f:85:4d:a8:b1: eb:53:d5:2e:f7:7b:7b:e5:8b:8f:b0:aa:f0:18:58: 1d:77:9f:26:6f:75:db:59:0e:c9:3b:3b:a1:5a:89: d1:18:71:65:50:8c:63:e8:8e:a1:f8:76:0a:3a:e0: a7:14:b1:ea:ac:c1:2e:b1:01:24:6a:41:54:1f:23: 6f:56:95:f9:4b:07:d3:70:e6:70:53:66:8c:7f:b5: 01:94:04:f7:b0:fe:07:66:1e:17:0c:e9:2d:7a:da: 20:e7:b6:7e:8b:91:93:a9:3b:b5:bc:39:ea:df:8a: a4:0b:b7:bd:c9:97:a5:ea:72:ee:9a:8d:2d:99:54: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E2:70:D7:E3:2C:2D:00:72:B6:9A:28:B4:7C:25:A8:C0:24:6A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:83:e9:3e:d0:70:5a:ea:1a:89:4d:35:b0:97:71:83:af:b2: ba:bc:b3:4e:f5:bf:b3:3a:77:37:cc:1e:e9:c1:8f:23:eb:4a: 42:99:bb:10:6c:c5:06:1c:1d:d5:fa:52:97:c8:2f:c3:bd:96: 69:c7:50:a4:38:76:c4:c4:41:c1:f2:3c:c8:8e:4d:04:3c:c8: e8:bb:28:78:0a:5a:a4:c7:af:62:d6:29:38:19:82:9b:b6:c8: 7b:3a:2a:bd:40:a3:44:24:6c:57:81:56:71:36:ea:1b:4b:de: c6:0b:8f:03:24:27:de:ef:da:29:39:97:6e:ac:aa:10:4b:30: a5:b6:42:75:45:e6:ed:7a:f0:0f:76:72:9c:08:94:e1:e9:ff: 56:59:34:7a:d3:75:fe:2c:3b:26:ad:c7:13:62:c4:4f:3a:20: 71:32:1f:8b:b0:12:86:2c:3e:15:75:fa:44:c9:dc:e3:f5:9b: 38:12:d2:c1:0e:27:84:1f:35:29:6a:b1:ea:72:e5:e0:2f:29: 70:af:26:5f:18:bc:e6:8f:33:83:50:c0:a1:1c:72:c7:40:ac: 5c:d2:e5:02:ae:3b:de:76:03:7e:fd:70:d7:86:84:a7:68:08: b3:c4:21:3d:bc:10:51:d3:3f:ff:c3:8d:aa:04:d6:62:59:ac: e1:cb:c5:e5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2wDeArOeIZSgYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NTlhYWJjMDUtZjMzOC00N2RmLTkzZmYtN2E0MzYzNmNmMjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgksCiczz0B8xfj1exp8k6AA9DvsKg4iYdzsy xDlYxuTFAls+y/ig0OWAhWaBwJU6o0jZmAEEqeBMb3Ep/WH3UobtclAEZ3dXCq6v W37cGiiNT86o+n08nbYmL24GbpuRAUZ8yJoH/rEYH82eTHmyjxQlKixx3NUc8Rdh p9cx1oCyn4VNqLHrU9Uu93t75YuPsKrwGFgdd58mb3XbWQ7JOzuhWonRGHFlUIxj 6I6h+HYKOuCnFLHqrMEusQEkakFUHyNvVpX5SwfTcOZwU2aMf7UBlAT3sP4HZh4X DOktetog57Z+i5GTqTu1vDnq34qkC7e9yZel6nLumo0tmVS5CQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDnicNfjLC0AcraaKLR8JajAJGpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzViM2E2ZWEtZmUxYS0z MzVkLTk0NzctYjRjZjgzOWQxYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhg+k+0HBa6hqJTTWwl3GDr7K6vLNO9b+zOnc3 zB7pwY8j60pCmbsQbMUGHB3V+lKXyC/DvZZpx1CkOHbExEHB8jzIjk0EPMjouyh4 Clqkx69i1ik4GYKbtsh7Oiq9QKNEJGxXgVZxNuobS97GC48DJCfe79opOZdurKoQ SzCltkJ1RebtevAPdnKcCJTh6f9WWTR603X+LDsmrccTYsRPOiBxMh+LsBKGLD4V dfpEydzj9Zs4EtLBDieEHzUparHqcuXgLylwryZfGLzmjzODUMChHHLHQKxc0uUC rjvedgN+/XDXhoSnaAizxCE9vBBR0z//w42qBNZiWazhy8Xl -----END CERTIFICATE-----Generated at Fri Jun 6 19:42:24 2025 by rpki-client