$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89ce2c0-536b-3375-84ec-e77ef8c28c75.roa File: f89ce2c0-536b-3375-84ec-e77ef8c28c75.roa (raw, json) Hash identifier: OveJFaPlO1JHsGOyNzTrE2ZyH6nTqUYmiM8AccyZnAs= Subject key identifier: 38:D8:92:E2:28:B3:03:B9:0D:DC:7B:39:DD:88:58:E1:1E:75:D9:63 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A093AA6A3C1D5756611BC7540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89ce2c0-536b-3375-84ec-e77ef8c28c75.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 396565 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a6:a3:c1:d5:75:66:11:bc:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=8d48343c-4696-4a3e-9d64-0c2622f630a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:50:88:0b:9c:f2:da:bb:72:e5:bb:74:25: df:6c:c4:ba:40:98:ed:d2:18:83:ab:d5:ff:74:1d: 5d:8f:d3:72:ad:10:62:09:d8:c2:6f:e1:93:28:83: 3a:dc:25:35:d0:5f:8e:03:45:17:76:2b:7e:5a:9a: 24:4f:9d:f7:da:f2:e0:e6:d4:75:d2:c7:63:21:77: 53:19:4e:ca:4f:c9:d2:f5:fd:ad:cf:ae:b5:cb:53: 09:7a:7e:4a:99:55:be:d8:bb:03:57:a8:15:8f:de: 0c:79:5c:c7:10:73:7e:3f:ef:aa:3d:88:6b:61:51: 45:32:a0:b1:51:35:c4:f3:57:b7:29:e9:64:2f:90: 75:cd:e5:b3:95:69:0f:ec:1c:29:31:bc:0e:0c:72: 49:d7:37:2e:fa:2a:2e:f7:bf:ea:c6:e0:a8:e4:ad: d3:c0:3d:d7:8f:e8:11:bb:8e:63:a3:ab:42:0b:bb: a9:1a:12:d0:16:69:a2:7f:d3:76:ba:38:16:65:9e: 9c:d8:7a:86:cf:9b:34:dd:96:76:2e:85:53:f6:3b: c3:e4:d4:2c:93:02:9f:10:f5:7c:f9:d7:1a:1d:ce: f1:d0:ab:03:25:38:ec:6c:06:41:76:ed:1e:cf:59: 46:66:bd:49:da:89:7d:ba:4b:6a:14:c0:9e:06:38: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:92:E2:28:B3:03:B9:0D:DC:7B:39:DD:88:58:E1:1E:75:D9:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89ce2c0-536b-3375-84ec-e77ef8c28c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cc:83:57:87:3d:3d:80:fc:b5:dd:4e:95:03:1f:20:8c:a9: 61:b1:85:57:30:45:6b:54:29:7e:36:3f:b3:ae:14:5f:a6:68: 3a:6c:4c:24:d9:a2:39:f5:8a:f3:52:4f:be:ce:39:66:d6:28: 2c:8b:e4:5e:bc:b6:41:5c:27:2e:d4:23:f0:aa:12:29:f6:7a: 03:15:be:69:0b:2d:7f:81:9b:c4:52:7c:b7:14:86:58:2b:0a: 1a:38:9f:ae:44:42:9e:16:95:35:ee:3d:8b:20:42:a4:a2:0c: 5f:af:ae:91:c3:09:a0:a3:11:10:80:65:83:62:2f:bc:ae:43: 6b:55:cd:06:44:78:c2:79:ce:92:c6:87:d9:f5:7d:6f:34:64: 07:8e:67:33:10:e8:23:64:36:73:a3:ed:24:44:04:f4:43:cf: a5:89:dd:2a:0c:70:fa:ab:c4:ee:9d:0a:cd:a2:36:38:d6:74: d5:53:1d:4f:01:5f:2b:1c:ac:19:6b:a6:2c:0c:f5:8a:d4:a2: 57:46:0f:2a:89:bf:3d:99:21:46:fb:4b:1a:08:3f:14:27:f3: b2:68:4b:12:e5:04:90:80:a9:62:ce:7e:25:5c:45:26:16:73: 05:0d:97:c1:b6:8c:45:3b:6c:44:8e:b8:20:2e:20:4d:94:31: b2:f3:bf:4b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoJOqajwdV1ZhG8dUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk OGQ0ODM0M2MtNDY5Ni00YTNlLTlkNjQtMGMyNjIyZjYzMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh91QiAuc8tq7cuW7dCXfbMS6QJjt0hiDq9X/ dB1dj9NyrRBiCdjCb+GTKIM63CU10F+OA0UXdit+WpokT5332vLg5tR10sdjIXdT GU7KT8nS9f2tz661y1MJen5KmVW+2LsDV6gVj94MeVzHEHN+P++qPYhrYVFFMqCx UTXE81e3KelkL5B1zeWzlWkP7BwpMbwODHJJ1zcu+iou97/qxuCo5K3TwD3Xj+gR u45jo6tCC7upGhLQFmmif9N2ujgWZZ6c2HqGz5s03ZZ2LoVT9jvD5NQskwKfEPV8 +dcaHc7x0KsDJTjsbAZBdu0ez1lGZr1J2ol9uktqFMCeBjjyOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDjYkuIoswO5Ddx7Od2IWOEeddljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjg5Y2UyYzAtNTM2Yi0z Mzc1LTg0ZWMtZTc3ZWY4YzI4Yzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA9zINXhz09gPy13U6VAx8gjKlhsYVXMEVrVCl+ Nj+zrhRfpmg6bEwk2aI59YrzUk++zjlm1igsi+RevLZBXCcu1CPwqhIp9noDFb5p Cy1/gZvEUny3FIZYKwoaOJ+uREKeFpU17j2LIEKkogxfr66RwwmgoxEQgGWDYi+8 rkNrVc0GRHjCec6SxofZ9X1vNGQHjmczEOgjZDZzo+0kRAT0Q8+lid0qDHD6q8Tu nQrNojY41nTVUx1PAV8rHKwZa6YsDPWK1KJXRg8qib89mSFG+0saCD8UJ/OyaEsS 5QSQgKlizn4lXEUmFnMFDZfBtoxFO2xEjrggLiBNlDGy879L -----END CERTIFICATE-----Generated at Fri Jun 6 19:42:28 2025 by rpki-client