$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa File: 3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa (raw, json) Hash identifier: 09V99MZIBj7A5oMghfohkocHz9GnSUuppKbeEkAFVII= Subject key identifier: 75:94:46:AC:E4:D9:36:07:B4:20:2B:29:70:85:1B:E8:7E:18:D6:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DAF9D270B5F728DA09C300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 397204 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f9:d2:70:b5:f7:28:da:09:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=6984f624-2ca4-4dcd-8838-08ca8396adbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:00:b4:9c:be:85:05:77:bd:35:a8:50:77: 57:fb:ff:36:d0:85:21:b8:04:ef:13:b8:f0:03:4f: 9f:9b:10:cc:ea:6b:aa:d5:97:ab:82:53:2e:c9:c6: 6c:9f:35:e7:0e:ea:63:aa:e0:ee:c8:bf:8e:37:4c: 94:d7:98:7b:f4:56:98:45:ac:e7:d9:37:d9:40:81: 62:c7:6b:8f:57:ce:6e:62:39:6c:d2:7a:8d:4c:e2: 65:d7:67:24:24:87:8e:cd:57:d3:a8:ce:3f:47:7f: cd:1b:67:81:54:8b:8d:7c:b4:85:f8:f5:c4:4f:55: cd:1f:4a:a4:a3:cd:f5:1e:2e:e4:5f:2e:54:29:d1: ce:ec:07:77:7b:c0:37:4f:44:37:19:1a:1b:0a:3e: 1f:f0:2a:ec:e0:39:de:67:74:99:4d:60:21:69:39: 87:35:2c:ea:4f:29:e9:4c:11:85:6b:98:6f:b1:9f: 41:08:fe:e1:6e:a8:75:02:fa:2a:0b:38:93:b2:58: 2c:fd:c3:ed:82:b8:ef:86:29:1f:50:c8:ff:84:6c: 79:5c:67:ef:49:bc:1b:7b:65:6d:c9:0f:a9:36:19: 97:4a:ae:80:c6:21:51:d9:67:37:1e:d5:a6:40:26: 18:35:b5:97:a2:29:8c:80:35:64:5b:f2:7d:d3:22: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:94:46:AC:E4:D9:36:07:B4:20:2B:29:70:85:1B:E8:7E:18:D6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3856a0d5-8bf5-3295-933c-bffa295f1ab5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:34:4a:b3:64:1c:92:97:3d:ab:5b:54:58:d8:0d:6b:78:b5: 5a:95:46:da:a9:dd:4d:5b:ab:4f:a1:9a:32:3b:2a:ac:6d:66: 28:44:4b:fb:59:cb:d7:e8:c8:2c:db:c4:7a:38:3c:83:3b:66: da:21:6b:65:e3:37:90:ab:80:15:8d:81:f5:12:9f:dc:0f:05: 31:d2:2a:9f:c6:1a:cd:40:c3:db:d2:b2:c0:db:f1:6e:7d:13: fe:ce:d7:c4:5c:2d:ad:a7:c6:6b:ea:e8:5a:79:12:26:e2:a9: 1b:e4:cb:32:c4:c5:4e:e2:60:f0:64:c3:83:2e:5f:82:49:67: 7b:88:41:73:db:32:33:1a:cb:a0:f7:5b:d7:8c:8d:5c:da:97: e6:58:60:16:35:e9:06:2d:c8:14:43:3b:ca:7c:3c:1b:43:69: a7:15:b4:c0:8b:77:25:85:50:d3:60:59:ba:6e:78:f3:47:8d: bf:f8:0d:c5:4d:8e:fd:a8:5c:48:75:48:e6:be:0a:24:53:06: cc:f0:fd:e6:33:ec:f5:86:41:ad:c9:a0:be:58:7a:01:6e:47: 0a:88:47:dd:84:2a:0f:ea:27:75:05:73:35:6b:5f:9d:90:42: 41:45:1a:fe:9d:11:a3:d1:4d:84:1f:43:cc:db:93:f2:58:4c: 3f:d5:24:8f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2vnScLX3KNoJwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk Njk4NGY2MjQtMmNhNC00ZGNkLTg4MzgtMDhjYTgzOTZhZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2oAtJy+hQV3vTWoUHdX+/820IUhuATvE7jw A0+fmxDM6muq1ZerglMuycZsnzXnDupjquDuyL+ON0yU15h79FaYRazn2TfZQIFi x2uPV85uYjls0nqNTOJl12ckJIeOzVfTqM4/R3/NG2eBVIuNfLSF+PXET1XNH0qk o831Hi7kXy5UKdHO7Ad3e8A3T0Q3GRobCj4f8Crs4DneZ3SZTWAhaTmHNSzqTynp TBGFa5hvsZ9BCP7hbqh1AvoqCziTslgs/cPtgrjvhikfUMj/hGx5XGfvSbwbe2Vt yQ+pNhmXSq6AxiFR2Wc3HtWmQCYYNbWXoimMgDVkW/J90yJcbwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHWURqzk2TYHtCArKXCFG+h+GNYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg1NmEwZDUtOGJmNS0z Mjk1LTkzM2MtYmZmYTI5NWYxYWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAKNEqzZBySlz2rW1RY2A1reLValUbaqd1NW6tP oZoyOyqsbWYoREv7WcvX6Mgs28R6ODyDO2baIWtl4zeQq4AVjYH1Ep/cDwUx0iqf xhrNQMPb0rLA2/FufRP+ztfEXC2tp8Zr6uhaeRIm4qkb5MsyxMVO4mDwZMODLl+C SWd7iEFz2zIzGsug91vXjI1c2pfmWGAWNekGLcgUQzvKfDwbQ2mnFbTAi3clhVDT YFm6bnjzR42/+A3FTY79qFxIdUjmvgokUwbM8P3mM+z1hkGtyaC+WHoBbkcKiEfd hCoP6id1BXM1a1+dkEJBRRr+nRGj0U2EH0PM25PyWEw/1SSP -----END CERTIFICATE-----Generated at Sat Jun 7 04:27:08 2025 by rpki-client