$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5fa7d65-eb8a-3683-be99-67faab2dcf65.roa File: d5fa7d65-eb8a-3683-be99-67faab2dcf65.roa (raw, json) Hash identifier: 7F62dsfukQJslxXe62O/DZvgtLybS/0Q4+2Y5K3CC3M= Subject key identifier: E2:77:61:C5:1A:E8:10:0F:A1:5A:77:E5:1B:70:80:B5:D6:C9:E3:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1895638A5FF039B4A4CCFB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5fa7d65-eb8a-3683-be99-67faab2dcf65.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 397198 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:63:8a:5f:f0:39:b4:a4:cc:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=62c609ca-b947-4aaf-aafe-5fa128c10ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0d:4c:14:18:04:1e:fb:23:ed:a6:f1:31:aa: f3:6d:0f:80:60:1f:a3:c6:e4:0a:00:60:c1:d3:d8: 29:55:b9:02:b3:fa:cf:19:da:18:08:f4:99:d8:1d: 4c:2a:03:7e:de:0e:3a:94:e6:6b:a7:a2:a9:29:ab: a0:0e:9d:a2:61:29:63:e4:ab:f0:3f:18:e3:da:a2: 05:20:30:fb:6e:4b:fd:43:17:a0:15:2d:12:ff:88: 3c:66:e6:fc:d1:2a:db:f2:9e:d1:bf:bb:8d:96:74: e1:10:74:a4:8b:9e:14:fc:7b:51:4d:ce:09:7b:9b: 56:db:9a:d8:86:4d:54:6b:8a:0e:70:fc:b2:d1:89: 4b:2f:0a:0d:63:3a:f7:b5:49:76:ae:1f:0b:48:3a: a8:63:8e:98:74:be:4e:36:bf:aa:b9:ff:52:be:e6: cd:07:8c:4c:fc:ae:7e:56:60:47:45:3f:2b:94:e1: 64:49:3f:b7:ce:da:8d:60:c6:6b:df:bf:8b:6c:33: 36:73:2c:e6:12:9f:ec:54:e5:56:46:b7:3a:f9:71: 4a:7d:50:63:58:16:52:d7:5e:2d:14:ec:3e:5b:96: fd:fc:97:35:e2:a9:62:b3:f7:cf:34:95:24:48:f8: 5c:61:5c:39:2a:09:65:1e:1e:45:de:57:de:d9:6b: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:77:61:C5:1A:E8:10:0F:A1:5A:77:E5:1B:70:80:B5:D6:C9:E3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5fa7d65-eb8a-3683-be99-67faab2dcf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9d:3c:46:43:38:ab:1a:e4:e9:08:26:64:22:09:05:37:b1: f7:d7:19:14:18:13:99:50:cd:6b:00:c6:8b:03:a7:ac:4e:62: c8:8e:ea:ba:a6:26:d7:70:fa:2c:3a:7b:29:f0:b5:ad:19:14: 4e:c1:50:dd:16:76:52:43:97:96:21:f6:f9:c9:ff:81:84:b0: 96:11:72:2b:14:c3:f6:ba:65:a5:b7:ec:f5:9a:d2:96:aa:e2: 4b:1f:e4:30:0d:62:5e:43:a7:03:43:23:53:01:3c:b2:39:c4: 98:73:0f:56:08:47:cd:23:8b:e3:16:c0:23:0f:ae:4d:a0:82: ce:36:2b:8f:1a:80:f0:9e:6d:3d:fb:30:b1:01:45:59:12:44: 31:c0:69:0c:9f:15:dc:4a:05:97:7e:48:a0:7a:29:d1:df:fb: 66:f5:5e:64:f5:15:6c:b3:70:a1:b0:10:a6:9f:27:0e:04:f2: cb:b6:11:93:52:2e:a5:a8:6b:b9:67:d5:38:ff:ff:ea:c0:f2: b0:00:57:cf:93:a8:76:95:30:07:22:92:af:b8:42:88:36:0f: dd:df:19:e0:52:c1:5e:6d:66:8c:76:0e:73:a6:b5:5b:03:7d: 20:6d:47:87:99:29:ad:6c:68:94:7a:e5:a1:d3:02:20:55:55: b9:18:42:6e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoYlWOKX/A5tKTM+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk NjJjNjA5Y2EtYjk0Ny00YWFmLWFhZmUtNWZhMTI4YzEwZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA1MFBgEHvsj7abxMarzbQ+AYB+jxuQKAGDB 09gpVbkCs/rPGdoYCPSZ2B1MKgN+3g46lOZrp6KpKaugDp2iYSlj5KvwPxjj2qIF IDD7bkv9QxegFS0S/4g8Zub80Srb8p7Rv7uNlnThEHSki54U/HtRTc4Je5tW25rY hk1Ua4oOcPyy0YlLLwoNYzr3tUl2rh8LSDqoY46YdL5ONr+quf9SvubNB4xM/K5+ VmBHRT8rlOFkST+3ztqNYMZr37+LbDM2cyzmEp/sVOVWRrc6+XFKfVBjWBZS114t FOw+W5b9/Jc14qlis/fPNJUkSPhcYVw5KgllHh5F3lfe2Wu1CQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOJ3YcUa6BAPoVp35RtwgLXWyeP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDVmYTdkNjUtZWI4YS0z NjgzLWJlOTktNjdmYWFiMmRjZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4nTxGQzirGuTpCCZkIgkFN7H31xkUGBOZUM1r AMaLA6esTmLIjuq6pibXcPosOnsp8LWtGRROwVDdFnZSQ5eWIfb5yf+BhLCWEXIr FMP2umWlt+z1mtKWquJLH+QwDWJeQ6cDQyNTATyyOcSYcw9WCEfNI4vjFsAjD65N oILONiuPGoDwnm09+zCxAUVZEkQxwGkMnxXcSgWXfkigeinR3/tm9V5k9RVss3Ch sBCmnycOBPLLthGTUi6lqGu5Z9U4///qwPKwAFfPk6h2lTAHIpKvuEKINg/d3xng UsFebWaMdg5zprVbA30gbUeHmSmtbGiUeuWh0wIgVVW5GEJu -----END CERTIFICATE-----Generated at Fri Jun 6 19:40:59 2025 by rpki-client