$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7699532-dfe4-35d3-bd13-88a8e5e733fb.roa File: a7699532-dfe4-35d3-bd13-88a8e5e733fb.roa (raw, json) Hash identifier: Q683gY91dZ48KRx+ykkLEu8NAVNLO3DvZb5M+hs0veA= Subject key identifier: C3:69:38:7F:86:93:0D:A6:33:67:01:61:91:0D:03:AC:39:59:C9:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB0B8DFC836E25EB200F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7699532-dfe4-35d3-bd13-88a8e5e733fb.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396543 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:0b:8d:fc:83:6e:25:eb:20:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=67e0b61f-6c89-49d5-b521-922b38e5ae2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:d1:9b:71:57:54:a6:9f:5d:a4:38:d0:ae: 2c:7e:8d:c3:3d:61:db:4c:da:19:d5:98:7e:47:88: 8b:ad:bc:29:b8:3f:8b:fd:48:ef:34:a7:c1:e8:f9: ec:d3:3e:01:c9:87:2d:43:28:59:77:06:7a:c5:ea: 47:b1:0c:37:06:7a:dd:55:e3:88:1b:1d:12:7c:de: e3:36:21:b6:95:2d:8e:c0:f5:2e:e6:23:a3:26:86: c9:32:cb:c8:bf:bb:ca:d3:07:e7:65:72:10:45:b8: 13:50:36:29:da:8f:0b:d7:f6:30:a4:d1:9c:9c:8d: 3f:c3:95:f1:46:03:45:84:c7:8a:61:d9:df:63:e3: fa:d6:f5:2a:90:ae:d3:0d:52:20:a3:75:d6:4b:2e: 99:8f:46:ea:49:41:b1:24:8f:3a:f5:93:00:8f:85: fe:56:15:47:14:71:b6:dd:e8:49:4b:da:a0:bc:e0: 9c:a5:50:3e:54:ac:7b:b4:ee:ca:66:5c:36:eb:1b: 06:72:f3:dd:76:54:5a:aa:59:dd:63:33:38:b5:20: 4b:7a:08:5c:e4:31:ae:53:3c:52:f4:65:00:cd:3d: 89:64:d3:10:5a:f0:79:e6:b1:84:50:6f:17:12:90: 48:3b:dc:b5:19:f3:4c:4d:cd:38:8f:78:94:36:d6: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:69:38:7F:86:93:0D:A6:33:67:01:61:91:0D:03:AC:39:59:C9:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7699532-dfe4-35d3-bd13-88a8e5e733fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7d:b3:56:44:cb:9d:0d:67:52:d1:df:1e:24:6f:bb:ba:0e: b1:48:41:c1:7d:8e:28:56:ec:ed:2f:c0:45:13:d7:26:e9:cb: f0:1f:3c:9a:f8:51:c3:bb:93:2b:5f:1c:f2:15:9b:d3:de:76: fc:ce:8d:12:c6:81:67:3e:24:36:6a:04:d6:2b:cb:b2:c5:03: f5:24:c7:31:d4:38:13:f1:5c:33:03:93:8c:3c:3d:d2:3d:a4: 2f:a1:af:96:a7:7f:50:e1:28:90:73:d8:96:eb:a6:35:92:9b: 68:1f:4e:6a:c2:24:8c:3d:6d:83:b4:45:4a:5c:9e:f6:13:ca: 66:14:51:fe:28:91:4b:91:80:41:7b:b0:1c:cd:ce:65:67:d8: a5:8f:71:39:ff:85:60:cb:4d:09:e0:bc:57:b2:8a:36:a0:e4: 9f:c7:f8:39:cd:d5:65:72:f0:81:87:2b:d0:0f:6f:fc:fd:4f: 3d:fd:58:0b:53:17:b5:d5:4a:f4:8a:c6:4d:e0:f3:80:18:7c: 79:23:8d:8a:c6:10:79:4a:95:06:0c:d2:7d:fe:89:81:eb:45: 82:61:41:0b:a1:8c:ff:ee:10:f0:24:95:54:69:21:e0:64:b9: b0:7a:cb:c6:fe:59:c7:e7:f8:7a:36:6e:9b:21:e4:9f:fa:7d: 53:fa:e8:98 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2wuN/INuJesgD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk NjdlMGI2MWYtNmM4OS00OWQ1LWI1MjEtOTIyYjM4ZTVhZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdnRm3FXVKafXaQ40K4sfo3DPWHbTNoZ1Zh+ R4iLrbwpuD+L/UjvNKfB6Pns0z4ByYctQyhZdwZ6xepHsQw3BnrdVeOIGx0SfN7j NiG2lS2OwPUu5iOjJobJMsvIv7vK0wfnZXIQRbgTUDYp2o8L1/YwpNGcnI0/w5Xx RgNFhMeKYdnfY+P61vUqkK7TDVIgo3XWSy6Zj0bqSUGxJI869ZMAj4X+VhVHFHG2 3ehJS9qgvOCcpVA+VKx7tO7KZlw26xsGcvPddlRaqlndYzM4tSBLeghc5DGuUzxS 9GUAzT2JZNMQWvB55rGEUG8XEpBIO9y1GfNMTc04j3iUNtZaCQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMNpOH+Gkw2mM2cBYZENA6w5WckBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTc2OTk1MzItZGZlNC0z NWQzLWJkMTMtODhhOGU1ZTczM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBufbNWRMudDWdS0d8eJG+7ug6xSEHBfY4oVuzt L8BFE9cm6cvwHzya+FHDu5MrXxzyFZvT3nb8zo0SxoFnPiQ2agTWK8uyxQP1JMcx 1DgT8VwzA5OMPD3SPaQvoa+Wp39Q4SiQc9iW66Y1kptoH05qwiSMPW2DtEVKXJ72 E8pmFFH+KJFLkYBBe7Aczc5lZ9ilj3E5/4Vgy00J4LxXsoo2oOSfx/g5zdVlcvCB hyvQD2/8/U89/VgLUxe11Ur0isZN4POAGHx5I42KxhB5SpUGDNJ9/omB60WCYUEL oYz/7hDwJJVUaSHgZLmwesvG/lnH5/h6Nm6bIeSf+n1T+uiY -----END CERTIFICATE-----Generated at Fri Jun 6 19:31:59 2025 by rpki-client