$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa File: c8968285-2cba-3390-8083-233c982b8c35.roa (raw, json) Hash identifier: Pd7MxRV36/hqz/Q9gDl+mxdHe2mOE5MewzZ02d/HwCc= Subject key identifier: 33:D1:36:3A:88:EA:82:3C:3E:A9:B1:BC:53:6F:90:72:60:8A:68:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A18955DB4E4A79F64A2AD5480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 396588 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:5d:b4:e4:a7:9f:64:a2:ad:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=ef5ecede-726b-4fd5-b271-b6fae42800c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:1f:51:d9:ce:f4:4f:34:b3:f6:04:43:5d: 8e:f5:a0:5d:26:31:45:03:be:86:f8:da:6a:bb:86: 27:17:bc:0a:fd:d3:d1:c4:d3:d9:ba:c4:40:cc:e2: 63:92:ef:3e:8b:36:29:c3:3e:18:57:9d:7a:85:be: b1:15:ef:df:f2:b0:65:c2:d7:80:59:5e:ea:74:48: 18:a5:90:80:c7:21:16:19:08:87:c7:d7:87:bb:fe: f2:66:a9:55:c5:26:c9:1b:44:bd:06:bb:bc:5d:57: b2:c6:82:b8:b3:e2:02:52:7b:0e:21:76:c7:0b:d2: 97:ba:9b:3b:51:91:63:4d:11:ec:17:94:04:25:24: 92:7d:a7:04:b0:07:e4:5a:71:22:df:0f:75:fe:8c: be:4c:77:86:92:d2:28:fb:a2:e4:5a:d7:f1:d1:05: bb:fd:81:c7:01:a7:6b:b3:2d:8c:50:8d:53:32:be: 91:1f:c9:cf:d8:b5:40:0c:2e:ba:a7:ea:99:74:4e: 5b:94:48:14:12:51:de:4e:73:05:b4:7d:11:05:cb: d0:cb:45:dd:57:c7:d9:c7:c5:e6:7a:4e:64:56:bc: 9f:97:36:9e:a7:9e:04:3c:e7:4e:31:ad:e3:bd:5a: 9b:f1:58:d6:35:07:c0:b4:fb:c3:2f:b3:ef:64:2b: 22:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D1:36:3A:88:EA:82:3C:3E:A9:B1:BC:53:6F:90:72:60:8A:68:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2e:2b:3a:49:07:4e:b0:58:80:b6:b8:07:75:b8:68:6e:11: 31:56:f9:ca:7c:72:26:c7:f3:a0:b2:d1:45:d8:47:39:32:52: fe:ed:e0:4e:24:23:c7:9c:b2:6f:bc:b9:1e:04:cc:98:ea:47: 79:4b:f1:02:ea:b6:8a:e8:f2:b6:41:53:1b:55:27:4f:37:2b: b3:8f:56:ee:ed:5d:41:4b:08:b4:a7:2f:2b:77:05:37:e8:b3: b3:e9:ee:ab:f3:13:6b:0c:d1:d1:d8:14:14:94:a0:66:9f:a6: ca:ea:31:3e:11:9c:50:fa:b1:d5:39:86:27:3e:b8:43:20:84: 0a:d9:ae:47:fa:a4:c1:01:03:b0:1a:8c:c0:d6:2f:e2:b0:2b: 30:61:8c:4a:12:6f:d2:f2:7e:8a:c5:59:17:a8:ad:7b:b5:09: 77:21:f3:7e:36:08:0e:74:5a:b7:bd:f1:1b:f7:13:fe:cd:53: fa:5e:79:82:fe:4a:20:98:80:77:cc:06:af:c2:9c:08:ef:70: 33:5a:91:a3:f7:08:f8:7b:13:35:ac:91:db:c3:80:65:28:f5: 96:10:07:53:3f:71:40:04:9c:fd:82:6b:71:f6:31:46:08:6b: 79:0f:47:a5:99:be:47:dd:44:02:08:d1:de:80:e8:a5:95:3b: c1:91:c2:bb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlV205KefZKKtVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk ZWY1ZWNlZGUtNzI2Yi00ZmQ1LWIyNzEtYjZmYWU0MjgwMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfcfUdnO9E80s/YEQ12O9aBdJjFFA76G+Npq u4YnF7wK/dPRxNPZusRAzOJjku8+izYpwz4YV516hb6xFe/f8rBlwteAWV7qdEgY pZCAxyEWGQiHx9eHu/7yZqlVxSbJG0S9Bru8XVeyxoK4s+ICUnsOIXbHC9KXups7 UZFjTRHsF5QEJSSSfacEsAfkWnEi3w91/oy+THeGktIo+6LkWtfx0QW7/YHHAadr sy2MUI1TMr6RH8nP2LVADC66p+qZdE5blEgUElHeTnMFtH0RBcvQy0XdV8fZx8Xm ek5kVryflzaep54EPOdOMa3jvVqb8VjWNQfAtPvDL7PvZCsiCQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDPRNjqI6oI8PqmxvFNvkHJgimjCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg5NjgyODUtMmNiYS0z MzkwLTgwODMtMjMzYzk4MmI4YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBxLis6SQdOsFiAtrgHdbhobhExVvnKfHImx/Og stFF2Ec5MlL+7eBOJCPHnLJvvLkeBMyY6kd5S/EC6raK6PK2QVMbVSdPNyuzj1bu 7V1BSwi0py8rdwU36LOz6e6r8xNrDNHR2BQUlKBmn6bK6jE+EZxQ+rHVOYYnPrhD IIQK2a5H+qTBAQOwGozA1i/isCswYYxKEm/S8n6KxVkXqK17tQl3IfN+NggOdFq3 vfEb9xP+zVP6XnmC/kogmIB3zAavwpwI73AzWpGj9wj4exM1rJHbw4BlKPWWEAdT P3FABJz9gmtx9jFGCGt5D0elmb5H3UQCCNHegOillTvBkcK7 -----END CERTIFICATE-----Generated at Fri Jun 6 19:41:55 2025 by rpki-client