$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa File: ba06575f-6a44-3531-a6b2-4aa363ec1398.roa (raw, json) Hash identifier: BsCXk0We/5tHQlHZYQmkihKU4Lb/zgI3OQw98F+HvZ8= Subject key identifier: E0:B0:2C:49:EE:ED:15:58:E1:6C:6E:66:E5:31:AD:5E:98:C7:C0:24 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849F7153D16DAE51CC7E70E9F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 396584 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:3d:16:da:e5:1c:c7:e7:0e:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=26dd71c7-2b1c-406e-b46d-3452e3d120dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:30:02:01:cd:d1:68:d9:ed:fb:77:9d:ef:2d: 5d:ac:36:bd:e8:1b:5d:3a:89:3c:71:a6:a7:6c:ca: 69:0e:95:50:a0:ee:03:48:99:73:63:27:79:87:8e: f5:3a:ac:d0:bb:19:a7:6e:8a:d0:cb:ce:f6:e5:46: 9a:ac:59:f2:f3:dd:88:aa:67:83:74:fb:cb:12:15: dc:6e:95:19:f4:f1:31:42:99:d5:6d:f2:d7:2f:45: 0d:93:c9:ea:a9:43:e3:7a:9c:82:d2:2e:8f:1b:f0: 7b:11:fb:bf:3d:5c:7b:09:a8:37:aa:7f:b0:33:9e: 26:0b:a1:40:37:3a:35:5d:a8:bb:ca:8a:c1:3e:85: e0:f7:40:73:b3:55:91:fd:d3:32:93:e8:b0:39:ac: 52:e6:be:c3:37:84:ad:24:e8:94:39:8d:e4:03:34: 8f:8f:4a:5b:2c:a1:04:54:20:98:3d:1c:8b:9f:59: 13:20:e7:ca:ba:e9:6b:47:76:b8:f9:82:71:b0:8a: 79:6e:d4:8e:74:13:6b:eb:14:3f:46:74:15:a8:25: dd:68:c0:6f:7c:fd:c6:45:93:34:95:01:f1:1e:8c: 87:4c:f7:d6:f0:f5:fc:37:54:7e:a1:a3:cc:0a:23: ce:b8:02:8a:e5:d2:b1:05:a6:e9:ef:d1:dc:d2:51: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B0:2C:49:EE:ED:15:58:E1:6C:6E:66:E5:31:AD:5E:98:C7:C0:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5c:c3:34:0e:bf:8b:b5:dc:84:8a:ea:95:5f:ea:e2:c8:d8: a0:c7:72:00:b6:8c:d9:6d:bb:29:a9:61:72:16:fb:e9:4c:b1: e4:14:0b:bf:e3:cf:14:ad:c7:97:3b:e6:22:b1:f7:cf:59:a1: 4d:e5:26:f4:80:43:9f:69:ce:da:83:8c:2d:22:5f:e5:18:7d: 3d:04:1f:ca:f5:19:96:d9:9e:44:9a:c0:fc:16:2f:5d:90:f7: b3:6c:a0:86:7c:1a:a5:45:49:df:ec:45:ac:f7:43:8c:29:db: 3f:f0:4b:d8:f5:da:63:14:ea:0f:08:83:6f:d0:5f:c4:d8:2d: 71:7d:7f:4e:90:0b:7a:24:5c:ff:f6:95:b0:89:01:d7:c1:8b: c3:45:1f:43:0d:27:c5:09:31:2d:db:78:f3:24:f3:3d:e9:18: 6a:74:e3:bd:5d:ff:c2:95:9e:00:bf:ac:31:47:24:cb:6a:73: 0d:e3:1c:99:b3:c5:4c:8b:12:63:73:c6:ed:80:58:4c:31:df: f2:27:b7:63:1b:01:28:ba:f9:ad:59:d2:2c:d3:69:d4:9a:cd: 22:75:1e:76:c2:2f:3f:91:e7:5d:a2:ed:68:34:d7:27:95:d9: 23:43:2b:b5:65:22:a9:4a:d1:db:2b:c3:02:63:7a:6a:c1:b1: bc:f6:de:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEn3FT0W2uUcx+cOn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MjZkZDcxYzctMmIxYy00MDZlLWI0NmQtMzQ1MmUzZDEyMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjACAc3RaNnt+3ed7y1drDa96BtdOok8caan bMppDpVQoO4DSJlzYyd5h471OqzQuxmnborQy8725UaarFny892IqmeDdPvLEhXc bpUZ9PExQpnVbfLXL0UNk8nqqUPjepyC0i6PG/B7Efu/PVx7Cag3qn+wM54mC6FA Nzo1Xai7yorBPoXg90Bzs1WR/dMyk+iwOaxS5r7DN4StJOiUOY3kAzSPj0pbLKEE VCCYPRyLn1kTIOfKuulrR3a4+YJxsIp5btSOdBNr6xQ/RnQVqCXdaMBvfP3GRZM0 lQHxHoyHTPfW8PX8N1R+oaPMCiPOuAKK5dKxBabp79Hc0lEpRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOCwLEnu7RVY4WxuZuUxrV6Yx8AkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEwNjU3NWYtNmE0NC0z NTMxLWE2YjItNGFhMzYzZWMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQARXMM0Dr+LtdyEiuqVX+riyNigx3IAtozZbbsp qWFyFvvpTLHkFAu/488UrceXO+YisffPWaFN5Sb0gEOfac7ag4wtIl/lGH09BB/K 9RmW2Z5EmsD8Fi9dkPezbKCGfBqlRUnf7EWs90OMKds/8EvY9dpjFOoPCINv0F/E 2C1xfX9OkAt6JFz/9pWwiQHXwYvDRR9DDSfFCTEt23jzJPM96RhqdOO9Xf/ClZ4A v6wxRyTLanMN4xyZs8VMixJjc8btgFhMMd/yJ7djGwEouvmtWdIs02nUms0idR52 wi8/keddou1oNNcnldkjQyu1ZSKpStHbK8MCY3pqwbG89t55 -----END CERTIFICATE-----Generated at Fri Jun 6 19:44:50 2025 by rpki-client