$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98e8af4e-513a-3dd0-af85-ba81e8b41fc4.roa File: 98e8af4e-513a-3dd0-af85-ba81e8b41fc4.roa (raw, json) Hash identifier: YEQeJot8bLcUNuSUxF9cKr3X1TynBFzwJvJDlEuyGaA= Subject key identifier: 47:29:AD:40:4D:23:8D:64:CA:68:EB:55:B3:A5:CE:C9:7B:3D:B1:1B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A18955E118ECB4EA2BFAF4E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98e8af4e-513a-3dd0-af85-ba81e8b41fc4.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 396612 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:5e:11:8e:cb:4e:a2:bf:af:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=5b03f3fd-57cb-48a3-b74a-28c6e0cd0233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:07:66:8f:d5:29:2b:bb:7c:60:65:ba:1c: 55:12:42:6b:b1:fc:84:07:5b:7f:2e:64:60:8d:54: 53:99:97:ef:98:36:33:09:ab:e1:d7:e6:b4:1f:5f: b8:71:af:49:0a:d7:18:59:8b:9c:ff:a9:2b:9a:32: e0:f6:94:66:ef:43:9a:52:f9:81:b6:9b:0d:01:8d: 20:b6:e6:a2:3d:7c:55:74:0a:a1:8b:10:a5:ef:1a: 8b:14:ba:f1:b9:bc:93:c5:43:8c:df:4b:d5:60:6c: 75:aa:d8:58:3e:84:75:a9:a2:7d:c1:36:62:33:3f: 22:b7:cf:b0:a3:ea:5c:58:6c:7c:36:da:a1:48:d3: f7:d1:f5:ec:f5:4b:19:65:4e:24:00:f0:ad:fa:17: c6:76:1d:66:3d:54:f1:ff:f1:42:bc:9c:20:ea:e4: 28:18:ba:dc:fa:06:31:37:ab:4c:c5:02:e7:ac:c4: d7:b3:44:c5:ee:67:f2:2b:90:d1:7d:a0:5a:9a:54: 64:95:cb:2d:02:aa:bc:83:36:86:72:8d:1b:86:3f: 0e:37:c7:18:9b:98:eb:52:40:75:d9:ee:43:1a:0f: 8c:5e:67:a6:7a:0c:ae:94:ae:f3:e8:f8:58:c8:70: c3:d5:76:b4:cb:a7:44:67:84:7a:a5:57:6b:af:e5: 45:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:29:AD:40:4D:23:8D:64:CA:68:EB:55:B3:A5:CE:C9:7B:3D:B1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98e8af4e-513a-3dd0-af85-ba81e8b41fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:e4:44:e7:ca:78:b5:97:84:c9:21:39:2e:d1:b2:22:7f:6d: d5:e2:ee:e9:56:5f:a4:04:75:da:cf:56:a2:9d:f7:75:8d:a5: 42:71:0d:5b:b3:bb:52:ef:af:47:ac:2a:08:27:cc:5a:b6:a1: 34:29:75:50:98:f5:4a:29:20:a1:b5:cc:14:8d:7a:32:a0:b9: ff:04:84:13:32:22:d2:d4:7e:8a:a5:c7:1f:30:5e:4b:e2:b0: 54:c5:14:14:d3:b8:26:9d:f1:fa:71:01:4b:a3:3c:b5:8e:49: 9f:2f:66:dd:e6:e6:6d:b0:30:b1:70:19:1a:bc:f5:80:b7:55: f8:71:c2:fb:4d:9c:1d:15:2a:5f:5c:62:70:1d:0c:a3:60:52: 00:98:66:c9:1e:b8:28:c4:bd:2b:64:40:63:45:97:e8:2b:13: 84:80:9e:87:44:e3:f1:d2:42:e7:38:e4:db:39:ba:c3:dd:95: 6d:53:3d:57:93:94:a6:07:2b:de:69:b4:48:ae:0d:94:b5:84: e1:9d:db:81:f5:2e:d9:30:64:27:db:b0:85:89:7c:18:07:9a: e7:bf:e2:72:29:0a:1a:84:d1:a0:b1:2d:c1:cc:19:5f:ea:a9: da:26:25:68:8a:18:7d:22:c1:32:1b:f1:cf:d1:6a:71:c0:93: 6b:78:e9:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlV4RjstOor+vToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk NWIwM2YzZmQtNTdjYi00OGEzLWI3NGEtMjhjNmUwY2QwMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JUHZo/VKSu7fGBluhxVEkJrsfyEB1t/LmRg jVRTmZfvmDYzCavh1+a0H1+4ca9JCtcYWYuc/6krmjLg9pRm70OaUvmBtpsNAY0g tuaiPXxVdAqhixCl7xqLFLrxubyTxUOM30vVYGx1qthYPoR1qaJ9wTZiMz8it8+w o+pcWGx8NtqhSNP30fXs9UsZZU4kAPCt+hfGdh1mPVTx//FCvJwg6uQoGLrc+gYx N6tMxQLnrMTXs0TF7mfyK5DRfaBamlRklcstAqq8gzaGco0bhj8ON8cYm5jrUkB1 2e5DGg+MXmemegyulK7z6PhYyHDD1Xa0y6dEZ4R6pVdrr+VFuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEcprUBNI41kymjrVbOlzsl7PbEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOThlOGFmNGUtNTEzYS0z ZGQwLWFmODUtYmE4MWU4YjQxZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAR5ETnyni1l4TJITku0bIif23V4u7pVl+kBHXa z1ainfd1jaVCcQ1bs7tS769HrCoIJ8xatqE0KXVQmPVKKSChtcwUjXoyoLn/BIQT MiLS1H6KpccfMF5L4rBUxRQU07gmnfH6cQFLozy1jkmfL2bd5uZtsDCxcBkavPWA t1X4ccL7TZwdFSpfXGJwHQyjYFIAmGbJHrgoxL0rZEBjRZfoKxOEgJ6HROPx0kLn OOTbObrD3ZVtUz1Xk5SmByveabRIrg2UtYThnduB9S7ZMGQn27CFiXwYB5rnv+Jy KQoahNGgsS3BzBlf6qnaJiVoihh9IsEyG/HP0WpxwJNreOlp -----END CERTIFICATE-----Generated at Fri Jun 6 19:43:00 2025 by rpki-client