$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa File: 210d4d14-2a06-3f69-b6aa-fef29ada604f.roa (raw, json) Hash identifier: Q3nswQUJnKiBFgYO/DbLvXKrkCejBbktNWr4gt+47HQ= Subject key identifier: 50:DE:F2:D4:F6:2B:2C:13:89:46:7F:EC:5D:6B:C6:9B:42:04:A7:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3CBD1637917E44D24580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 396563 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3c:bd:16:37:91:7e:44:d2:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=2cf24652-7415-4569-a0a2-a04bd077b8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5b:92:1b:06:fa:f4:42:98:1f:94:ae:70:52: c3:8f:12:16:33:48:39:28:03:27:73:45:ba:78:5a: a1:b9:ca:6b:6c:64:f1:20:f8:70:2b:73:d5:ba:93: fa:17:0d:c3:16:65:3e:f8:2d:05:08:ac:f2:06:cc: 5e:dd:d1:03:9c:74:dc:59:1f:aa:94:95:41:19:f4: 4e:0b:24:f9:72:54:ab:1f:a2:5f:16:bf:77:10:91: 20:e1:9b:24:65:13:21:02:99:69:6a:1e:98:e5:a7: ed:93:b3:b1:90:d2:d9:9d:b7:78:08:26:73:27:37: fe:c0:65:4e:25:ba:a6:37:52:aa:21:eb:e2:74:83: 38:ce:a9:ef:4d:24:32:28:6d:9e:b6:e3:c3:1b:a9: 8d:16:17:df:81:ae:a9:90:dc:6d:2b:ba:8d:a4:16: b1:54:b0:5c:1f:2e:be:01:34:05:87:4c:ce:50:8b: 5c:7c:79:43:15:e0:ec:66:2a:33:ae:b1:5c:8f:53: c6:aa:d8:91:6c:59:c0:a8:d5:04:af:4f:c4:4a:8b: b5:d4:e0:89:38:3f:df:80:c4:f5:57:e8:f3:8b:4f: a7:8d:b7:67:5d:8e:47:82:2f:fa:6a:90:5f:e6:2e: d4:5e:83:0b:ee:6f:fd:c4:58:dc:11:c6:43:f0:af: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DE:F2:D4:F6:2B:2C:13:89:46:7F:EC:5D:6B:C6:9B:42:04:A7:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:60:0f:72:ee:3e:c0:d1:f0:21:17:5c:96:ca:d7:7b:aa:54: bc:5a:50:9d:13:c1:2c:e5:1c:1a:a1:42:3d:a8:78:b2:03:f2: 74:0e:6d:4f:f8:0d:72:5e:0a:9f:68:35:b4:c9:37:95:0d:4e: 11:d6:c1:67:7c:41:fa:48:29:bc:56:be:ab:88:36:84:84:f9: 57:53:04:43:83:b2:9c:a5:c2:fc:37:f8:4b:20:b8:b8:95:66: 90:c8:4e:a3:5d:6e:62:b4:e0:67:59:83:0b:f7:8d:1d:b7:8a: ac:0a:73:e9:da:fa:14:fd:df:bf:33:ff:6f:ec:a1:d3:1a:9c: 38:51:58:93:db:83:98:a6:45:b9:a1:be:b1:a1:8d:6d:8f:85: dd:87:4e:d7:93:42:38:ff:c2:60:1c:f2:8a:9e:a8:09:c1:e8: cb:3b:e1:e7:99:c4:2b:b1:7b:97:e7:b6:5a:82:b3:84:ef:fe: 89:61:e3:15:e9:59:97:28:65:4c:29:de:39:19:12:c7:16:49: 0a:1b:d6:9f:87:b6:d8:1d:54:bd:75:21:c1:b5:28:0a:f6:cd: 29:a9:3b:72:f0:fd:58:bc:0f:98:92:db:c6:71:c0:21:77:42: a8:a2:2f:17:a0:c5:75:3d:0a:7e:b7:73:a8:da:30:e2:69:3c: 44:4c:52:05 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOzy9FjeRfkTSRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MmNmMjQ2NTItNzQxNS00NTY5LWEwYTItYTA0YmQwNzdiOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVuSGwb69EKYH5SucFLDjxIWM0g5KAMnc0W6 eFqhucprbGTxIPhwK3PVupP6Fw3DFmU++C0FCKzyBsxe3dEDnHTcWR+qlJVBGfRO CyT5clSrH6JfFr93EJEg4ZskZRMhAplpah6Y5aftk7OxkNLZnbd4CCZzJzf+wGVO JbqmN1KqIevidIM4zqnvTSQyKG2etuPDG6mNFhffga6pkNxtK7qNpBaxVLBcHy6+ ATQFh0zOUItcfHlDFeDsZiozrrFcj1PGqtiRbFnAqNUEr0/ESou11OCJOD/fgMT1 V+jzi0+njbdnXY5Hgi/6apBf5i7UXoML7m/9xFjcEcZD8K+PEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFDe8tT2KywTiUZ/7F1rxptCBKf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjEwZDRkMTQtMmEwNi0z ZjY5LWI2YWEtZmVmMjlhZGE2MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB9YA9y7j7A0fAhF1yWytd7qlS8WlCdE8Es5Rwa oUI9qHiyA/J0Dm1P+A1yXgqfaDW0yTeVDU4R1sFnfEH6SCm8Vr6riDaEhPlXUwRD g7KcpcL8N/hLILi4lWaQyE6jXW5itOBnWYML940dt4qsCnPp2voU/d+/M/9v7KHT Gpw4UViT24OYpkW5ob6xoY1tj4Xdh07Xk0I4/8JgHPKKnqgJwejLO+HnmcQrsXuX 57ZagrOE7/6JYeMV6VmXKGVMKd45GRLHFkkKG9afh7bYHVS9dSHBtSgK9s0pqTty 8P1YvA+YktvGccAhd0Kooi8XoMV1PQp+t3Oo2jDiaTxETFIF -----END CERTIFICATE-----Generated at Mon Jun 30 11:27:34 2025 by rpki-client