$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa File: df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa (raw, json) Hash identifier: GgoSITnrgsI30uqzF83ul1tyXmByEM0GOavDhOzw2f4= Subject key identifier: C4:9D:71:3B:80:B8:71:69:C1:B1:C5:AC:04:EA:33:E5:3F:15:2C:54 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB0387F5A145E99E2A9940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396587 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:03:87:f5:a1:45:e9:9e:2a:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=818d00df-0988-4b17-93d5-e9a7fbe2fd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:3c:c5:85:16:91:cc:7d:e5:05:9c:2f:58: 46:5d:63:bc:12:34:1a:54:c3:01:7f:8f:c1:d3:43: 9b:2d:d1:7b:c5:9b:30:34:d7:15:fd:ea:09:dd:ff: d0:cd:82:2f:a9:d7:33:7b:3d:e0:12:a4:ca:58:b6: 28:e9:29:cc:16:e8:a7:da:df:dc:5c:e3:c3:24:0a: 4d:b1:90:5d:e1:5b:7a:0a:cf:6b:9a:de:af:07:81: f9:d2:ef:db:cd:05:a7:12:a2:0d:e1:17:df:71:7b: e7:e2:04:93:ae:ac:98:80:0a:82:00:87:03:37:84: 3a:d0:46:92:a8:35:2e:c6:a1:6a:15:f8:7d:40:dd: 5b:4b:07:bc:b5:45:7c:0f:d9:0a:e9:df:8f:36:aa: b9:0a:48:34:ae:39:0f:12:50:3b:e9:d3:d5:14:66: da:fd:ff:08:51:ac:14:fe:a7:78:d6:1f:11:29:b9: eb:ac:73:c3:14:a3:e5:cd:c8:4c:82:65:6f:ae:91: 9c:13:f5:38:39:6d:b8:be:09:a3:e0:ff:84:cb:81: 78:0c:8b:a3:5f:bf:81:c0:7f:64:be:97:02:36:04: 21:2c:20:01:29:76:9a:4b:fd:13:9d:e7:a3:08:e7: f7:e1:f5:8c:3a:23:08:9d:ec:aa:19:55:11:2d:e5: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9D:71:3B:80:B8:71:69:C1:B1:C5:AC:04:EA:33:E5:3F:15:2C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df0fd3b3-c5b9-360a-af1d-2e86893a3e12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d2:41:c8:a3:68:c1:a8:ec:36:e5:18:f5:03:8c:b6:82:67: 03:87:41:dc:f1:50:64:73:3e:8c:c9:3a:2e:9b:2a:e6:ca:6b: 19:6c:da:8a:f8:7f:d1:12:b6:99:d2:d3:4f:1f:16:2e:1b:29: b8:97:d8:49:5a:d9:18:fc:9b:aa:db:bc:2b:39:d6:10:7c:f8: 90:4f:e0:19:03:0d:b8:04:03:96:bf:c0:65:81:b6:44:77:f0: 17:c3:6b:fd:7b:16:f7:29:57:a7:27:c5:c7:ec:45:68:18:14: 25:dd:af:76:58:70:82:58:f0:d1:9e:f8:f5:47:e9:cd:dd:e4: 39:fc:94:41:1f:1b:35:5d:5f:7a:8a:9d:7b:91:f7:5c:ea:11: 99:31:0a:d0:64:d8:e9:f0:80:38:4b:91:e7:98:a3:95:62:02: 4f:82:9d:ee:c7:c7:c8:08:fb:eb:65:78:0e:3b:c0:a8:3e:9c: 53:d5:c1:a1:67:ad:c3:87:e5:ab:5c:ad:db:24:72:5e:9c:5a: 7a:4d:6f:bf:df:f4:b5:42:82:d6:c9:0e:88:ea:41:4b:d4:5e: 47:04:c5:ea:1c:c5:31:68:57:e5:f8:72:52:3c:bd:f9:32:d1: 5c:36:a0:c9:aa:1e:cc:37:3b:a6:12:1d:bd:70:18:dc:42:7d: a8:a0:a8:f2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2wOH9aFF6Z4qmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk ODE4ZDAwZGYtMDk4OC00YjE3LTkzZDUtZTlhN2ZiZTJmZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr88xYUWkcx95QWcL1hGXWO8EjQaVMMBf4/B 00ObLdF7xZswNNcV/eoJ3f/QzYIvqdczez3gEqTKWLYo6SnMFuin2t/cXOPDJApN sZBd4Vt6Cs9rmt6vB4H50u/bzQWnEqIN4RffcXvn4gSTrqyYgAqCAIcDN4Q60EaS qDUuxqFqFfh9QN1bSwe8tUV8D9kK6d+PNqq5Ckg0rjkPElA76dPVFGba/f8IUawU /qd41h8RKbnrrHPDFKPlzchMgmVvrpGcE/U4OW24vgmj4P+Ey4F4DIujX7+BwH9k vpcCNgQhLCABKXaaS/0TneejCOf34fWMOiMIneyqGVURLeXNmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMSdcTuAuHFpwbHFrATqM+U/FSxUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGYwZmQzYjMtYzViOS0z NjBhLWFmMWQtMmU4Njg5M2EzZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB20kHIo2jBqOw25Rj1A4y2gmcDh0Hc8VBkcz6M yToumyrmymsZbNqK+H/REraZ0tNPHxYuGym4l9hJWtkY/Juq27wrOdYQfPiQT+AZ Aw24BAOWv8BlgbZEd/AXw2v9exb3KVenJ8XH7EVoGBQl3a92WHCCWPDRnvj1R+nN 3eQ5/JRBHxs1XV96ip17kfdc6hGZMQrQZNjp8IA4S5HnmKOVYgJPgp3ux8fICPvr ZXgOO8CoPpxT1cGhZ63Dh+WrXK3bJHJenFp6TW+/3/S1QoLWyQ6I6kFL1F5HBMXq HMUxaFfl+HJSPL35MtFcNqDJqh7MNzumEh29cBjcQn2ooKjy -----END CERTIFICATE-----Generated at Sat Jun 7 04:22:48 2025 by rpki-client