$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10b37bf7-24fc-3659-a447-b7d12e73f7e3.roa File: 10b37bf7-24fc-3659-a447-b7d12e73f7e3.roa (raw, json) Hash identifier: 1ARYTSqgK4WM3C6XOIYifdGEarE5WkqtwCCzeSKTq2E= Subject key identifier: CA:7B:F2:CA:32:8F:70:89:E8:8D:A3:4D:5C:74:B7:A3:96:F6:5A:7C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3E860D0B6AA309014540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10b37bf7-24fc-3659-a447-b7d12e73f7e3.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 396605 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3e:86:0d:0b:6a:a3:09:01:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=81255bfe-828a-4406-9688-1d69beb35119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:7e:70:de:36:58:04:28:ab:d9:74:e8:6c: 19:9a:d6:88:91:a0:00:d6:0e:84:0a:f8:7a:aa:bd: 14:39:e3:c8:f0:8e:02:f5:5d:ed:27:b5:7c:1d:26: 64:fa:3f:b1:8b:14:f2:8b:94:d3:bd:2b:6f:bf:9c: fb:64:de:f3:fe:75:9c:6f:c3:7d:e0:3a:24:48:9c: 80:c6:43:80:c4:ac:f7:b8:83:42:5d:05:53:b8:a3: 89:2a:ec:f1:fd:44:05:a4:17:9d:aa:13:29:d1:b7: 57:6c:62:95:51:8e:15:2b:37:31:1c:0d:51:87:9d: ff:08:89:2a:55:92:15:89:2d:96:4c:6a:8e:6b:19: 45:41:c9:9a:70:a2:c1:64:50:14:1a:1b:75:4f:2d: 38:8f:af:8a:6c:e1:b0:5a:16:0a:2f:f0:5e:9a:97: 33:7e:0e:20:2c:70:da:dd:51:09:8f:cb:7a:33:43: 03:94:e9:e5:e3:d5:71:e6:56:7a:df:73:93:98:a2: e4:58:05:14:8f:7c:c1:ba:6c:6c:91:ed:d2:1b:54: 00:5d:6a:23:16:0f:a6:2e:cc:92:90:78:82:54:47: 88:86:88:20:22:46:bc:6f:1c:3f:14:02:bb:12:30: cd:94:ea:98:75:d6:07:9c:ff:29:48:f1:c1:a9:79: 05:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7B:F2:CA:32:8F:70:89:E8:8D:A3:4D:5C:74:B7:A3:96:F6:5A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10b37bf7-24fc-3659-a447-b7d12e73f7e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1b:7d:af:23:4c:8b:6d:b6:24:46:92:70:99:9a:1e:a5:c6: 81:9f:2c:dd:98:2c:fb:23:74:08:e9:41:d8:0f:7c:99:b3:40: 9f:9e:1f:88:7d:9d:b7:38:d0:09:ed:92:76:ef:2c:ae:29:d2: 11:04:19:38:2b:19:66:da:5b:04:4d:49:16:80:9f:05:ed:1c: cc:8b:50:6b:1b:11:86:6a:15:0f:92:b8:96:0a:9c:0f:e9:29: 04:9b:32:2d:c0:38:fc:bc:31:76:bd:10:98:44:da:f2:6b:58: 12:99:47:1d:1b:e6:07:92:13:9b:bf:bf:5e:eb:85:93:d6:ff: a5:dc:77:ea:54:00:75:3f:f4:17:90:4c:a6:3a:8c:5c:b9:e7: ed:b0:64:03:03:d7:71:85:6e:9f:53:02:5c:e4:19:3a:9a:70: 32:3d:7d:2d:7f:00:a9:17:8c:ab:c4:10:40:b5:d6:c0:66:ad: a6:1b:a9:0f:b2:47:b2:6e:03:21:b7:5a:8d:06:c1:c4:c2:7e: f8:8c:dc:6a:f8:db:96:67:9b:4f:e2:9f:fc:b7:38:d6:66:c2: d7:90:a8:fe:1b:56:8d:ef:05:12:c6:55:12:bf:4a:f7:84:fa: 40:64:b1:1d:ed:d6:72:b3:ae:80:31:c1:0c:f7:fb:99:f1:6e: 63:3f:47:60 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOz6GDQtqowkBRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ODEyNTViZmUtODI4YS00NDA2LTk2ODgtMWQ2OWJlYjM1MTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFt+cN42WAQoq9l06GwZmtaIkaAA1g6ECvh6 qr0UOePI8I4C9V3tJ7V8HSZk+j+xixTyi5TTvStvv5z7ZN7z/nWcb8N94DokSJyA xkOAxKz3uINCXQVTuKOJKuzx/UQFpBedqhMp0bdXbGKVUY4VKzcxHA1Rh53/CIkq VZIViS2WTGqOaxlFQcmacKLBZFAUGht1Ty04j6+KbOGwWhYKL/Bempczfg4gLHDa 3VEJj8t6M0MDlOnl49Vx5lZ633OTmKLkWAUUj3zBumxske3SG1QAXWojFg+mLsyS kHiCVEeIhoggIka8bxw/FAK7EjDNlOqYddYHnP8pSPHBqXkFQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMp78soyj3CJ6I2jTVx0t6OW9lp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTBiMzdiZjctMjRmYy0z NjU5LWE0NDctYjdkMTJlNzNmN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxG32vI0yLbbYkRpJwmZoepcaBnyzdmCz7I3QI 6UHYD3yZs0Cfnh+IfZ23ONAJ7ZJ27yyuKdIRBBk4Kxlm2lsETUkWgJ8F7RzMi1Br GxGGahUPkriWCpwP6SkEmzItwDj8vDF2vRCYRNrya1gSmUcdG+YHkhObv79e64WT 1v+l3HfqVAB1P/QXkEymOoxcueftsGQDA9dxhW6fUwJc5Bk6mnAyPX0tfwCpF4yr xBBAtdbAZq2mG6kPskeybgMht1qNBsHEwn74jNxq+NuWZ5tP4p/8tzjWZsLXkKj+ G1aN7wUSxlUSv0r3hPpAZLEd7dZys66AMcEM9/uZ8W5jP0dg -----END CERTIFICATE-----Generated at Mon Jun 30 13:40:51 2025 by rpki-client