$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc12f89e-3d4c-3b14-9be1-179e6aa87ed1.roa File: cc12f89e-3d4c-3b14-9be1-179e6aa87ed1.roa (raw, json) Hash identifier: xhWaASOlgxWFmtz0+UGrWZLsgglGEaltfQkiKcM0DgA= Subject key identifier: 12:25:EB:FB:DB:05:A3:1F:D3:4B:43:88:3D:0E:72:62:9C:1F:6B:14 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DAFDB1F37B67CAF72A1400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc12f89e-3d4c-3b14-9be1-179e6aa87ed1.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396544 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:da:fd:b1:f3:7b:67:ca:f7:2a:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=c6a93a30-73cc-40fc-9256-6e7c0d2a2ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:0b:75:47:89:2b:11:87:38:d6:43:d3:55: 39:45:31:c1:dc:6f:e9:ac:6f:e7:85:6b:13:ae:3e: e5:da:2e:61:ca:29:f1:be:bd:34:8b:61:b2:99:1e: 27:23:fa:d5:2e:ae:56:58:1c:79:ee:69:2f:69:a5: 94:b1:f4:7a:fb:3c:99:7b:3f:65:c2:20:e7:ea:ad: 72:11:30:05:b5:83:9d:32:b9:ba:29:c7:86:07:f7: 5f:b0:8c:40:b4:12:de:e5:f8:18:6d:c9:03:c1:02: ed:64:95:fc:f3:82:25:e3:21:da:00:c6:65:5f:c2: c0:bc:86:e4:34:18:17:01:d0:72:1d:e5:ab:4a:5d: 14:f3:b8:fc:7f:40:de:78:f4:ce:c8:94:e1:24:2e: 9a:ea:8d:d2:5c:79:8d:bf:da:2b:a5:86:e8:4f:5c: 16:40:2e:6c:33:2d:f9:7a:ac:f8:f7:17:bd:88:e7: 9c:69:23:1f:37:4b:bc:69:38:69:0b:8b:36:c5:97: d0:d3:d3:56:a9:ca:1f:92:36:4e:1c:b8:d1:86:46: fb:06:df:8c:d3:c8:c3:23:83:71:9e:95:01:84:62: 3a:e9:63:0e:59:c7:59:ba:c5:f1:31:22:15:1b:f8: f8:11:bf:b2:a4:e6:e6:19:d5:63:d3:e2:76:22:06: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:25:EB:FB:DB:05:A3:1F:D3:4B:43:88:3D:0E:72:62:9C:1F:6B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc12f89e-3d4c-3b14-9be1-179e6aa87ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:53:80:b1:c2:ec:91:9a:14:ad:37:52:1e:79:81:bb:9c:0d: b4:c6:91:15:54:5d:07:0e:4e:47:e5:19:e7:83:2d:80:36:18: d9:4b:fd:d0:de:20:fe:ce:60:d9:9a:83:f8:a6:b5:cd:f1:1d: 93:39:9b:d7:76:a3:88:22:61:30:d0:27:12:59:d6:ee:de:fe: 1e:20:df:92:73:0b:ea:69:15:5e:dd:ff:11:9d:e8:e4:27:2d: 93:25:8e:41:37:9f:b9:9d:83:c2:f7:c8:57:27:05:5d:77:69: 0d:6c:be:4a:57:9c:9f:fa:df:48:98:f3:ec:1d:15:bf:65:e7: b3:64:ef:b7:3f:4f:1b:ac:7d:fe:c2:cf:ae:67:51:c7:ed:6e: 87:4a:2b:df:52:a1:48:0a:11:40:ef:3a:d2:5f:06:8d:01:e6: 86:86:21:1c:ce:e3:56:8f:20:c9:e4:12:22:06:b7:c9:c1:f4: 56:da:b2:f0:e1:03:52:65:78:d8:f1:62:3e:eb:90:2e:83:39: 00:b1:bf:e9:23:14:66:90:31:94:df:1b:1a:c3:78:55:72:76: a9:f0:19:a3:81:a0:b7:d9:61:09:2d:6a:d7:70:79:b3:c1:06: da:e7:22:63:ba:0e:6b:fa:f4:e5:dd:e8:19:a3:48:78:a7:6f: 29:e4:37:1a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2v2x83tnyvcqFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk YzZhOTNhMzAtNzNjYy00MGZjLTkyNTYtNmU3YzBkMmEyYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzULdUeJKxGHONZD01U5RTHB3G/prG/nhWsT rj7l2i5hyinxvr00i2GymR4nI/rVLq5WWBx57mkvaaWUsfR6+zyZez9lwiDn6q1y ETAFtYOdMrm6KceGB/dfsIxAtBLe5fgYbckDwQLtZJX884Il4yHaAMZlX8LAvIbk NBgXAdByHeWrSl0U87j8f0DeePTOyJThJC6a6o3SXHmNv9orpYboT1wWQC5sMy35 eqz49xe9iOecaSMfN0u8aThpC4s2xZfQ09NWqcofkjZOHLjRhkb7Bt+M08jDI4Nx npUBhGI66WMOWcdZusXxMSIVG/j4Eb+ypObmGdVj0+J2IgYqxwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBIl6/vbBaMf00tDiD0OcmKcH2sUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2MxMmY4OWUtM2Q0Yy0z YjE0LTliZTEtMTc5ZTZhYTg3ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6U4CxwuyRmhStN1IeeYG7nA20xpEVVF0HDk5H 5Rnngy2ANhjZS/3Q3iD+zmDZmoP4prXN8R2TOZvXdqOIImEw0CcSWdbu3v4eIN+S cwvqaRVe3f8RnejkJy2TJY5BN5+5nYPC98hXJwVdd2kNbL5KV5yf+t9ImPPsHRW/ ZeezZO+3P08brH3+ws+uZ1HH7W6HSivfUqFIChFA7zrSXwaNAeaGhiEczuNWjyDJ 5BIiBrfJwfRW2rLw4QNSZXjY8WI+65AugzkAsb/pIxRmkDGU3xsaw3hVcnap8Bmj gaC32WEJLWrXcHmzwQba5yJjug5r+vTl3egZo0h4p28p5Dca -----END CERTIFICATE-----Generated at Sun Jun 8 00:46:33 2025 by rpki-client