$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa File: ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa (raw, json) Hash identifier: V7BlXvhtMShsKIOa7kRY/nAiDFaNuIsTB0qpZEsmU6Q= Subject key identifier: 12:F2:2E:71:E4:99:DC:20:B8:C5:F5:2F:EC:F5:53:18:F2:70:33:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F7153D07A6D8CB23598709C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 396603 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:3d:07:a6:d8:cb:23:59:87:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=fd52a43c-81b8-417a-a10c-27ce5710ef0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:89:43:64:58:f1:c9:bd:1b:05:7a:8e:7c:60: a4:e2:14:1e:02:f2:12:5d:bc:1e:bc:c7:45:27:bc: d0:28:35:b2:02:d6:a0:21:17:4f:30:cc:4c:cd:76: 9a:f9:e4:4b:a9:65:11:b1:6f:e1:f1:e4:aa:49:89: ae:d9:e3:0b:73:88:26:2e:bd:9a:1a:71:a1:01:63: 2d:1d:11:8c:7e:3c:ac:c9:b0:09:97:b8:f3:6a:3b: 7c:a9:7c:2e:e6:84:91:0d:3d:46:9d:4f:d6:29:18: 75:5d:e6:d0:5f:78:17:2a:78:d0:7b:e2:a7:5d:0a: de:93:d5:21:4a:ba:c7:13:aa:c0:fb:e3:6d:98:07: 89:24:5e:1d:5a:c9:6d:d6:71:82:0d:e4:65:99:1c: 72:82:3e:5e:1c:f4:ca:aa:38:61:f4:08:f1:ce:5d: 84:ab:01:1b:e7:9e:dc:c4:3d:54:93:1c:10:d4:d0: ad:d5:f9:41:62:f1:3b:63:c9:b3:b1:d9:00:0d:7b: 9f:9e:b5:1c:f9:59:0e:16:c8:48:59:fc:3b:1b:98: 2a:b7:cc:ab:9f:7f:5c:08:34:e1:9d:37:fe:71:5b: 12:5e:24:35:05:3e:51:df:17:60:d8:dc:ac:ad:1b: 43:bc:44:e9:7f:74:97:75:8d:f0:6a:8c:46:f2:5f: 2e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F2:2E:71:E4:99:DC:20:B8:C5:F5:2F:EC:F5:53:18:F2:70:33:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2b:57:aa:a1:1f:e7:a4:46:01:41:94:11:f3:85:24:51:71: 4d:a0:4a:ee:15:55:29:50:5d:18:c6:40:51:91:0e:a0:08:b3: eb:8d:97:28:7a:c2:75:25:dd:ce:b4:86:19:bc:85:cb:70:32: 8e:73:64:91:84:63:62:e2:0f:7b:a7:9d:cb:b1:26:32:3d:45: 22:86:90:7d:6c:aa:5e:21:75:6d:f3:38:de:8f:d8:e4:91:4d: d5:64:c9:49:fc:a9:43:8b:d1:d1:58:42:fc:ee:42:e6:b4:98: ac:ad:3f:40:d9:e7:1b:e8:28:52:8c:7b:ef:eb:78:03:cf:5f: 79:89:f9:e6:4c:54:9c:30:ea:a2:4e:03:f4:2d:c4:27:a9:78: 21:aa:4a:18:78:c3:76:bb:ff:46:35:c6:1a:eb:6c:1d:a0:2f: 53:f0:7d:03:dd:d0:7e:65:54:e3:4f:52:96:4d:c8:1e:7d:21: 75:33:e8:0d:7c:c8:36:d3:50:78:7e:7b:08:ec:ae:e6:51:89: d7:19:b9:85:9f:b8:24:3b:4e:4f:a6:d7:7d:70:15:8e:0c:a8: 86:39:0f:09:dd:89:e0:f7:d4:fa:0b:5e:4e:c6:c9:51:70:a5: cd:d1:37:95:97:90:ac:0b:19:8d:14:e6:37:fc:cf:7d:b9:9b: 29:8a:53:aa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FT0HptjLI1mHCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZmQ1MmE0M2MtODFiOC00MTdhLWExMGMtMjdjZTU3MTBlZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIlDZFjxyb0bBXqOfGCk4hQeAvISXbwevMdF J7zQKDWyAtagIRdPMMxMzXaa+eRLqWURsW/h8eSqSYmu2eMLc4gmLr2aGnGhAWMt HRGMfjysybAJl7jzajt8qXwu5oSRDT1GnU/WKRh1XebQX3gXKnjQe+KnXQrek9Uh SrrHE6rA++NtmAeJJF4dWslt1nGCDeRlmRxygj5eHPTKqjhh9Ajxzl2EqwEb557c xD1UkxwQ1NCt1flBYvE7Y8mzsdkADXufnrUc+VkOFshIWfw7G5gqt8yrn39cCDTh nTf+cVsSXiQ1BT5R3xdg2NysrRtDvETpf3SXdY3waoxG8l8uLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBLyLnHkmdwguMX1L+z1UxjycDOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWI2ZWVmYWQtYzFkNy0z NDhhLWFmMTItOWZiOTViN2I1MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAUK1eqoR/npEYBQZQR84UkUXFNoEruFVUpUF0Y xkBRkQ6gCLPrjZcoesJ1Jd3OtIYZvIXLcDKOc2SRhGNi4g97p53LsSYyPUUihpB9 bKpeIXVt8zjej9jkkU3VZMlJ/KlDi9HRWEL87kLmtJisrT9A2ecb6ChSjHvv63gD z195ifnmTFScMOqiTgP0LcQnqXghqkoYeMN2u/9GNcYa62wdoC9T8H0D3dB+ZVTj T1KWTcgefSF1M+gNfMg201B4fnsI7K7mUYnXGbmFn7gkO05Pptd9cBWODKiGOQ8J 3Yng99T6C15OxslRcKXN0TeVl5CsCxmNFOY3/M99uZspilOq -----END CERTIFICATE-----Generated at Sat Jun 7 11:53:29 2025 by rpki-client