$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa File: 85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa (raw, json) Hash identifier: FFsV1QuK9FDSJ5Mngl8fDABXUL01OmGhYDVS0DmtyFA= Subject key identifier: 05:F1:31:E1:A8:01:41:13:A2:34:BB:BA:3E:BC:4D:65:DF:0D:FF:E3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1895637BB43277E76E20807E Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 396596 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:63:7b:b4:32:77:e7:6e:20:80:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=953b8b4e-7e09-4bd8-95f7-a5400efeeca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:35:a0:01:bb:af:ee:14:a9:d2:dc:db:20: 62:a5:b0:b7:7a:41:3b:41:69:93:ef:23:0e:c3:19: 07:63:ef:6a:6f:57:7d:ae:2b:ea:2f:2d:e1:39:7e: 90:86:65:73:db:2b:d2:97:76:95:3a:8b:d3:6d:31: 1c:94:3a:63:ce:d2:c8:46:ad:83:ad:5b:aa:08:5a: 4c:bc:b8:0c:04:bd:7a:73:fb:59:d7:fb:78:90:a2: 08:95:a2:c0:43:5c:f1:3d:c0:c9:f3:a7:b5:59:46: 50:1b:49:79:85:1d:ed:7f:25:43:09:83:11:c1:0b: 5f:28:d4:60:7d:5d:32:37:c6:d6:37:cd:eb:5b:20: bf:54:c1:0e:d2:da:39:1e:a4:8b:46:03:db:94:61: ff:6a:d1:5b:a5:99:b0:3c:1c:25:3a:92:d8:55:39: a6:27:d3:4b:03:70:fe:dc:98:44:26:8f:0f:7f:73: 91:1d:02:f7:94:90:3d:19:64:0c:4e:94:a2:23:a9: e4:6b:3b:2f:cf:2a:d8:38:d8:2a:06:9a:8e:46:8a: 23:b7:4a:36:d8:4d:0d:d3:af:3f:a4:bb:4e:7d:d5: f1:54:bc:3b:32:6f:43:5f:72:f9:c7:4d:6e:ad:ba: 3e:98:88:05:f6:72:53:23:36:c0:74:f6:f1:f9:db: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F1:31:E1:A8:01:41:13:A2:34:BB:BA:3E:BC:4D:65:DF:0D:FF:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85a6f2bf-7ac8-3478-a4c6-95c3fae9bd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:7a:d0:c2:72:30:c2:cd:f8:f1:d1:84:1a:e0:5b:63:92:d8: d5:c9:8b:ac:ad:ca:f3:fc:98:9b:0f:a2:19:e0:b1:cd:49:b0: ae:f0:e8:ad:0e:b3:48:51:64:10:4f:06:66:ea:72:7f:83:bb: 3e:36:3e:80:22:00:6a:75:f1:00:f8:16:37:7c:6b:2e:ce:78: 7a:fb:19:1a:96:0f:92:91:52:ad:8a:57:ca:07:bc:87:4e:16: 1d:d0:48:e8:db:be:1a:82:5b:c2:df:bf:ca:ff:37:c3:7c:2f: ed:72:da:2f:78:8d:a6:55:ce:41:c1:80:dd:b6:54:7e:4f:d5: 9e:eb:f8:40:99:4f:d9:a3:17:0c:3a:08:67:da:e6:84:52:0a: 58:79:e3:74:2c:9c:bd:68:19:20:60:42:84:3a:85:2e:52:58: 6e:78:13:89:8f:17:49:2f:be:e0:b4:47:fb:0d:0b:b1:88:2b: 1c:e3:d8:34:9c:1f:63:c5:05:d6:33:58:0b:42:97:e7:90:fb: 94:c4:05:11:05:7e:5d:de:c1:a9:1b:5c:06:a4:2c:e3:cd:7f: cb:85:c4:42:c1:1d:cc:f8:57:cd:b0:d4:4c:a2:b7:6d:13:ac: 4d:10:4e:8c:8c:3d:af:d5:e9:88:64:d9:d7:67:2a:94:0a:a4: 94:7d:56:b2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlWN7tDJ3524ggH4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk OTUzYjhiNGUtN2UwOS00YmQ4LTk1ZjctYTU0MDBlZmVlY2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/M1oAG7r+4UqdLc2yBipbC3ekE7QWmT7yMO wxkHY+9qb1d9rivqLy3hOX6QhmVz2yvSl3aVOovTbTEclDpjztLIRq2DrVuqCFpM vLgMBL16c/tZ1/t4kKIIlaLAQ1zxPcDJ86e1WUZQG0l5hR3tfyVDCYMRwQtfKNRg fV0yN8bWN83rWyC/VMEO0to5HqSLRgPblGH/atFbpZmwPBwlOpLYVTmmJ9NLA3D+ 3JhEJo8Pf3ORHQL3lJA9GWQMTpSiI6nkazsvzyrYONgqBpqORoojt0o22E0N068/ pLtOfdXxVLw7Mm9DX3L5x01urbo+mIgF9nJTIzbAdPbx+dtlWQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAXxMeGoAUETojS7uj68TWXfDf/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODVhNmYyYmYtN2FjOC0z NDc4LWE0YzYtOTVjM2ZhZTliZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3etDCcjDCzfjx0YQa4FtjktjVyYusrcrz/Jib D6IZ4LHNSbCu8OitDrNIUWQQTwZm6nJ/g7s+Nj6AIgBqdfEA+BY3fGsuznh6+xka lg+SkVKtilfKB7yHThYd0Ejo274aglvC37/K/zfDfC/tctoveI2mVc5BwYDdtlR+ T9We6/hAmU/ZoxcMOghn2uaEUgpYeeN0LJy9aBkgYEKEOoUuUlhueBOJjxdJL77g tEf7DQuxiCsc49g0nB9jxQXWM1gLQpfnkPuUxAURBX5d3sGpG1wGpCzjzX/LhcRC wR3M+FfNsNRMordtE6xNEE6MjD2v1emIZNnXZyqUCqSUfVay -----END CERTIFICATE-----Generated at Fri Jun 6 19:38:23 2025 by rpki-client