$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa File: 23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa (raw, json) Hash identifier: +uzbZR4BUyjGzO8Suq8Vs1VQc+qtr7fL06cSaTKqgTg= Subject key identifier: 9F:CD:73:94:7B:FE:A9:B9:D3:52:E4:EB:70:79:08:03:54:B1:18:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3EA4FB15A748D4EF8A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 396565 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3e:a4:fb:15:a7:48:d4:ef:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=30ddf91b-0a09-4e48-ad04-2b0be949b95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:58:43:be:76:ea:f8:ef:5a:88:0a:6b:44:a5: a8:8c:a0:ec:63:97:4f:b2:4a:40:9b:3b:4a:0a:5c: 5f:50:15:0a:e1:f6:cb:41:aa:7d:b7:33:d4:67:d8: 24:b4:ef:75:9f:6d:b1:5c:28:c7:fc:ff:87:2f:ec: 19:99:2b:6f:df:49:ad:25:c9:1d:8c:0a:1d:0e:d6: ce:e7:12:de:87:93:f4:4e:e4:74:72:ed:fd:83:25: d1:d4:9d:30:32:36:72:0f:80:3e:f0:ce:22:41:31: dc:07:5b:fc:54:64:b5:4f:d5:65:13:0f:27:cd:bf: 53:33:ce:46:56:c5:5a:ac:6f:14:3d:a6:57:98:18: b6:52:4e:0a:df:53:48:e9:43:90:17:ad:6e:bd:61: 92:c6:7d:04:92:a0:c3:c4:48:3c:bf:53:ca:18:c2: 03:df:c9:25:bc:80:cd:59:7f:44:5f:74:a6:26:c2: 9d:49:1e:c0:42:c9:c2:c4:d1:67:80:96:e6:d8:ca: 70:72:f3:dd:35:2d:91:72:4d:0c:e0:2c:6b:f3:0a: c1:7a:84:80:7b:9f:1a:e7:94:9f:d7:c4:1a:99:d0: a7:f1:c3:2b:a7:b1:9e:39:5d:94:52:fa:a5:5d:6d: a5:66:17:1e:29:8a:54:5a:46:e8:5a:82:c0:c9:48: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:CD:73:94:7B:FE:A9:B9:D3:52:E4:EB:70:79:08:03:54:B1:18:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:60:6e:59:7e:f3:65:53:7d:83:85:18:40:27:1f:5e:a8:63: d8:88:6d:b9:a9:d1:1b:4d:03:96:a0:3a:e8:7b:d5:94:ee:2d: bc:55:bf:0c:59:cf:5b:00:08:66:1d:d8:51:90:ed:e1:f5:60: 26:c5:1c:b7:6c:93:a6:1a:d1:29:4b:58:4c:bf:2e:66:33:8b: d5:cc:f3:f7:57:78:c1:7e:99:e2:c6:1e:82:b7:db:85:61:41: c8:85:9c:90:93:b8:03:cb:1f:45:6d:61:c4:c2:a9:7a:a5:a1: f6:08:eb:a4:6d:dd:4e:1c:f6:39:ff:dc:8a:a7:33:9f:21:39: 97:b3:72:35:02:45:96:49:d5:e0:2c:00:9b:0c:6b:97:24:43: d7:66:4d:21:99:86:06:64:05:77:22:14:63:96:9f:d2:08:24: 15:0b:31:ab:e3:4b:89:46:50:7a:16:e6:f6:64:ad:6e:a6:98: 2a:8c:09:1c:86:dc:3c:fa:c2:95:09:c9:23:bb:6e:a1:e7:31: d9:e5:15:a6:4a:23:71:51:70:ce:ff:22:c6:dd:bf:02:a3:23: a1:9f:89:4a:59:a7:31:e4:48:11:5e:45:41:1d:f3:af:f8:df: d8:99:a9:84:cf:bc:37:a7:25:ff:61:6a:65:d0:9d:76:d2:86: 45:3b:8a:b2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOz6k+xWnSNTvioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MzBkZGY5MWItMGEwOS00ZTQ4LWFkMDQtMmIwYmU5NDliOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVhDvnbq+O9aiAprRKWojKDsY5dPskpAmztK ClxfUBUK4fbLQap9tzPUZ9gktO91n22xXCjH/P+HL+wZmStv30mtJckdjAodDtbO 5xLeh5P0TuR0cu39gyXR1J0wMjZyD4A+8M4iQTHcB1v8VGS1T9VlEw8nzb9TM85G VsVarG8UPaZXmBi2Uk4K31NI6UOQF61uvWGSxn0EkqDDxEg8v1PKGMID38klvIDN WX9EX3SmJsKdSR7AQsnCxNFngJbm2MpwcvPdNS2Rck0M4Cxr8wrBeoSAe58a55Sf 18QamdCn8cMrp7GeOV2UUvqlXW2lZhceKYpUWkboWoLAyUhljwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ/Nc5R7/qm501Lk63B5CANUsRidMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNhZGEwYmYtZDQ5ZS0z ZDJiLThkY2EtNGFmMGZkZmI1Njk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBfYG5ZfvNlU32DhRhAJx9eqGPYiG25qdEbTQOW oDroe9WU7i28Vb8MWc9bAAhmHdhRkO3h9WAmxRy3bJOmGtEpS1hMvy5mM4vVzPP3 V3jBfpnixh6Ct9uFYUHIhZyQk7gDyx9FbWHEwql6paH2COukbd1OHPY5/9yKpzOf ITmXs3I1AkWWSdXgLACbDGuXJEPXZk0hmYYGZAV3IhRjlp/SCCQVCzGr40uJRlB6 Fub2ZK1uppgqjAkchtw8+sKVCckju26h5zHZ5RWmSiNxUXDO/yLG3b8CoyOhn4lK Wacx5EgRXkVBHfOv+N/YmamEz7w3pyX/YWpl0J120oZFO4qy -----END CERTIFICATE-----Generated at Mon Jun 30 23:46:08 2025 by rpki-client