$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb1f171-58ad-3337-b499-adaf0607a1d8.roa File: 7cb1f171-58ad-3337-b499-adaf0607a1d8.roa (raw, json) Hash identifier: f+rL7pu/l/iNasP3VmSzgszirgLO3xqE17gz9qrQz18= Subject key identifier: 9A:ED:FF:AD:FE:C7:0A:D1:B4:2C:97:DA:63:9A:EA:52:E5:99:10:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DAF9F03B289C735E8E9980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb1f171-58ad-3337-b499-adaf0607a1d8.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396584 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:f9:f0:3b:28:9c:73:5e:8e:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=9a7e0318-9469-4751-b2e8-103e86065171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e5:d0:e3:f3:ac:f5:e0:7c:a8:37:fc:77:99: c0:be:af:37:63:a5:b2:75:c0:b5:ac:ba:cc:f2:41: 79:28:cd:7f:5a:32:f4:5f:0b:bf:49:ab:85:1f:f6: df:46:73:5a:e3:d2:02:84:3d:16:b4:2b:be:d9:e5: 9a:c6:dd:65:af:b1:3c:7b:fb:50:e3:a4:42:11:d9: ab:df:a0:d5:a8:52:33:03:a3:43:53:99:ae:03:e1: fe:0a:83:93:62:30:cb:9a:7f:b0:a3:4c:fb:80:92: 97:7c:e7:fe:6d:ab:0c:7c:9b:e8:6a:3a:78:ac:76: 47:22:a4:d5:4a:2f:84:a2:13:c5:55:3e:5e:7f:e2: a3:c8:a2:3d:06:ae:1e:e5:d8:21:9c:39:88:3f:3a: 38:0b:04:ac:aa:1d:ec:30:78:0b:7c:84:0c:d4:83: 26:d1:4a:25:3f:c7:dc:89:ee:f3:51:c4:73:be:7c: 9e:f8:b2:34:c4:1d:79:22:f9:cd:50:dc:d0:de:cf: 61:df:e3:73:3d:04:e9:2d:4c:98:79:76:6f:78:d9: 8a:6b:1d:3d:95:b9:a3:8b:04:66:d8:56:6b:24:86: 07:95:bc:a8:f7:8e:24:20:5e:85:39:4c:1c:17:50: a5:97:04:e9:07:1a:14:47:5d:c5:b1:7f:e5:34:d9: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:FF:AD:FE:C7:0A:D1:B4:2C:97:DA:63:9A:EA:52:E5:99:10:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb1f171-58ad-3337-b499-adaf0607a1d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:31:c1:d2:3f:03:87:50:23:cd:49:4c:1e:e7:43:c3:ee:57: c7:41:49:9c:a0:ce:37:5b:17:43:58:f2:95:25:2a:30:95:88: 52:1e:e9:ab:91:a1:b6:96:ac:39:d5:ff:e8:a5:47:37:ee:ef: 3d:0a:75:fa:cb:66:8a:f5:bf:d4:e8:c0:7a:a4:6b:b8:21:a3: 48:ca:35:1d:25:e3:cf:ce:91:33:e5:e2:38:1b:c7:b7:07:26: 7b:0e:7b:ef:d3:84:b4:fe:4c:0b:44:c6:07:83:a2:2a:30:ba: 95:d8:c0:74:b0:b2:d7:1b:e3:25:88:12:29:ac:c9:2e:e4:aa: 8f:2b:1a:16:3a:2d:5d:51:1c:44:21:b7:cd:c4:19:13:d7:bf: d7:94:be:88:af:dd:f5:a2:63:db:e3:3e:a5:d4:77:66:8f:4c: 2e:2e:1f:3b:7f:5a:63:cb:7b:52:53:0c:d8:9c:40:cc:82:43: 72:a0:0a:ce:ec:63:9f:ff:8e:48:40:0d:fc:0b:2e:78:f4:44: 01:03:80:94:ab:b1:8a:fa:38:05:96:08:17:41:00:dd:20:38: 97:2a:36:8a:fd:0f:ff:f4:e3:68:d2:9c:ec:3c:56:e0:cd:5f: 26:cd:30:a1:5a:02:de:5a:ae:c6:92:60:65:57:bf:e6:ac:0d: cd:bc:41:7c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2vnwOyicc16OmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk OWE3ZTAzMTgtOTQ2OS00NzUxLWIyZTgtMTAzZTg2MDY1MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuXQ4/Os9eB8qDf8d5nAvq83Y6WydcC1rLrM 8kF5KM1/WjL0Xwu/SauFH/bfRnNa49IChD0WtCu+2eWaxt1lr7E8e/tQ46RCEdmr 36DVqFIzA6NDU5muA+H+CoOTYjDLmn+wo0z7gJKXfOf+basMfJvoajp4rHZHIqTV Si+EohPFVT5ef+KjyKI9Bq4e5dghnDmIPzo4CwSsqh3sMHgLfIQM1IMm0UolP8fc ie7zUcRzvnye+LI0xB15IvnNUNzQ3s9h3+NzPQTpLUyYeXZveNmKax09lbmjiwRm 2FZrJIYHlbyo944kIF6FOUwcF1CllwTpBxoUR13FsX/lNNlNhwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJrt/63+xwrRtCyX2mOa6lLlmRCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2NiMWYxNzEtNThhZC0z MzM3LWI0OTktYWRhZjA2MDdhMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBiMcHSPwOHUCPNSUwe50PD7lfHQUmcoM43WxdD WPKVJSowlYhSHumrkaG2lqw51f/opUc37u89CnX6y2aK9b/U6MB6pGu4IaNIyjUd JePPzpEz5eI4G8e3ByZ7Dnvv04S0/kwLRMYHg6IqMLqV2MB0sLLXG+MliBIprMku 5KqPKxoWOi1dURxEIbfNxBkT17/XlL6Ir931omPb4z6l1Hdmj0wuLh87f1pjy3tS UwzYnEDMgkNyoArO7GOf/45IQA38Cy549EQBA4CUq7GK+jgFlggXQQDdIDiXKjaK /Q//9ONo0pzsPFbgzV8mzTChWgLeWq7GkmBlV7/mrA3NvEF8 -----END CERTIFICATE-----Generated at Mon Jun 9 06:41:57 2025 by rpki-client