$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37ef0064-bc8d-389a-a426-dc502c0d9df5.roa File: 37ef0064-bc8d-389a-a426-dc502c0d9df5.roa (raw, json) Hash identifier: RnRbJxakbR59xexRqisLtmK6j7vXuvmUq2H+isSOoas= Subject key identifier: F7:14:E1:B0:96:52:57:39:85:90:16:F1:57:82:7E:FA:2A:40:CA:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A093AA612773FEA646987A400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37ef0064-bc8d-389a-a426-dc502c0d9df5.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 396608 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a6:12:77:3f:ea:64:69:87:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=9b69f387-65f4-4a3e-b0dd-d38a2b05a1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a7:b0:cd:10:d9:84:14:61:62:c0:ee:ad:ef: db:79:15:5b:75:44:c5:6f:6d:d8:4f:ff:df:b3:e6: cf:cc:a9:06:10:bb:ce:94:81:08:a0:a8:c0:d9:42: f2:a8:a4:49:55:a2:d0:55:a9:27:0b:6a:a8:a6:0d: ce:5f:ab:a6:6f:57:b6:06:e6:36:eb:09:b9:e0:c5: a9:1d:e9:99:e5:7c:de:00:04:cd:17:23:ce:0a:ac: a5:cb:78:79:e4:ed:fe:8c:96:f8:a5:68:cf:ad:34: ae:a1:43:cd:18:da:d2:24:22:59:36:76:fc:42:57: d1:bb:de:9d:02:61:6b:80:bd:cf:35:26:8c:ea:10: b0:e8:82:a4:e9:30:de:90:b3:9a:a6:e3:86:65:0e: 59:f0:bf:38:76:a5:e1:4d:a6:75:91:5f:9f:c9:17: d3:37:57:c9:9b:cd:8d:5d:45:63:b4:6f:78:a6:78: 12:4a:20:98:45:e1:2d:80:97:4d:66:e2:5a:32:95: b2:0e:12:82:85:41:db:d0:5d:f7:c2:f3:9f:b7:52: a8:9e:b2:da:a1:df:4b:c9:4d:fc:f0:4b:ac:0c:77: 41:96:f6:fd:6a:a6:e1:6f:f5:1d:6b:c0:b1:d8:51: 30:2d:da:52:18:f5:5a:d4:c5:e7:48:0a:8a:0e:5e: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:14:E1:B0:96:52:57:39:85:90:16:F1:57:82:7E:FA:2A:40:CA:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37ef0064-bc8d-389a-a426-dc502c0d9df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:14:a4:00:6d:32:a7:4f:09:c6:36:21:b4:26:3c:8e:7a:60: 5c:74:53:f6:11:e3:2d:44:76:c1:80:b7:72:1a:3d:c0:0b:bd: f6:aa:7d:65:9b:94:fd:c4:3c:ce:cf:a5:40:29:c3:01:d7:aa: b9:9a:b6:c3:1f:a0:50:bc:6a:4e:a8:81:79:b0:8f:22:0e:2f: 2d:8f:38:61:fb:14:c7:7b:b9:5d:aa:72:0d:59:33:ad:e4:0d: 30:5a:e9:60:5d:18:91:71:44:7d:cb:a2:a9:db:6b:ce:e7:49: 76:db:86:49:57:79:2b:4b:46:4c:61:ac:7b:d6:42:cf:a8:d7: 30:e9:cb:c9:07:63:d0:59:09:50:1f:2e:ac:eb:82:3f:5b:68: 29:0f:48:87:5a:84:84:19:e0:2f:24:28:73:35:c8:86:59:e0: c8:fe:c5:7b:dd:53:28:57:ba:ed:f1:d5:49:08:31:97:d2:a4: 95:bb:1c:7b:d3:83:94:07:44:e0:b9:18:db:96:2a:a6:bf:d2: a4:09:4d:ab:ff:92:e7:f9:8f:14:db:7b:f4:3f:3e:f1:6a:a8: 8d:6c:c6:6a:65:22:dd:6a:57:43:a4:fd:dd:d0:5a:c5:35:9f: f9:1c:cb:91:d3:c3:97:13:02:43:3f:f7:c2:7a:7c:a3:9e:7a: 72:22:46:18 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqYSdz/qZGmHpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk OWI2OWYzODctNjVmNC00YTNlLWIwZGQtZDM4YTJiMDVhMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaewzRDZhBRhYsDure/beRVbdUTFb23YT//f s+bPzKkGELvOlIEIoKjA2ULyqKRJVaLQVaknC2qopg3OX6umb1e2BuY26wm54MWp HemZ5XzeAATNFyPOCqyly3h55O3+jJb4pWjPrTSuoUPNGNrSJCJZNnb8QlfRu96d AmFrgL3PNSaM6hCw6IKk6TDekLOapuOGZQ5Z8L84dqXhTaZ1kV+fyRfTN1fJm82N XUVjtG94pngSSiCYReEtgJdNZuJaMpWyDhKChUHb0F33wvOft1KonrLaod9LyU38 8EusDHdBlvb9aqbhb/Uda8Cx2FEwLdpSGPVa1MXnSAqKDl4TXwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPcU4bCWUlc5hZAW8VeCfvoqQMqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzdlZjAwNjQtYmM4ZC0z ODlhLWE0MjYtZGM1MDJjMGQ5ZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAJFKQAbTKnTwnGNiG0JjyOemBcdFP2EeMtRHbB gLdyGj3AC732qn1lm5T9xDzOz6VAKcMB16q5mrbDH6BQvGpOqIF5sI8iDi8tjzhh +xTHe7ldqnINWTOt5A0wWulgXRiRcUR9y6Kp22vO50l224ZJV3krS0ZMYax71kLP qNcw6cvJB2PQWQlQHy6s64I/W2gpD0iHWoSEGeAvJChzNciGWeDI/sV73VMoV7rt 8dVJCDGX0qSVuxx704OUB0TguRjbliqmv9KkCU2r/5Ln+Y8U23v0Pz7xaqiNbMZq ZSLdaldDpP3d0FrFNZ/5HMuR08OXEwJDP/fCenyjnnpyIkYY -----END CERTIFICATE-----Generated at Fri Jun 6 19:34:41 2025 by rpki-client