$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37978f96-0469-392c-b7f2-0ade9ef1c202.roa File: 37978f96-0469-392c-b7f2-0ade9ef1c202.roa (raw, json) Hash identifier: 2HbMmZEwN/WfJFg7+pr1vTfDUCuDa6cXEeNkDaSUZY4= Subject key identifier: 55:3B:0E:2A:40:55:45:18:FA:65:94:A0:6F:10:4B:DB:8F:66:71:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3F4F2FDFDB99F8A786C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37978f96-0469-392c-b7f2-0ade9ef1c202.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 20172 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3f:4f:2f:df:db:99:f8:a7:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=aabf8a5a-22d7-4f35-b9d5-9e026f7a0424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0c:5c:d4:9f:01:f6:c8:95:62:79:40:17:d3: 0e:d0:e4:bc:a5:9d:d9:ca:ad:78:23:d5:ef:ad:40: 67:7c:44:06:57:5c:26:ca:aa:84:4d:b2:4d:ab:73: 19:5a:51:ae:a0:1a:30:bb:ae:dd:aa:fc:89:40:ed: 65:98:8f:82:25:e3:55:71:fe:1a:a5:5e:20:65:ff: 35:61:e3:ff:0b:71:03:c0:6a:2c:d8:0f:19:23:f5: 29:97:94:07:fb:72:b6:e1:d0:10:6e:16:da:ff:e9: e0:a0:9a:57:a8:16:b3:3e:ca:a0:ae:a6:d4:c1:5f: 52:3d:43:95:c8:21:79:51:f5:4d:f3:f3:56:6f:35: dd:3d:80:65:ea:0e:96:81:9a:5c:56:dd:72:b1:d2: 04:34:3e:a1:ee:84:bc:0f:e3:58:9e:d6:6e:3f:b3: 82:56:18:93:61:41:63:59:da:e0:14:0c:74:28:df: 00:f2:85:fc:75:5d:ab:dd:eb:f1:95:44:54:04:9b: 11:8f:46:e6:bd:8d:82:d7:e3:e8:d5:29:5d:7c:50: 6e:b4:2d:23:3f:38:1d:b4:f7:da:db:2a:00:a0:92: d2:d0:27:6b:49:ad:c9:dd:55:7d:62:27:c1:41:3a: 0e:0d:51:99:f1:f7:ca:87:72:64:f4:bb:96:9c:cb: ca:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3B:0E:2A:40:55:45:18:FA:65:94:A0:6F:10:4B:DB:8F:66:71:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37978f96-0469-392c-b7f2-0ade9ef1c202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1f:67:ef:bc:1a:23:a9:5b:24:9a:ef:69:18:9b:d8:b6:c8: e3:d6:a6:03:84:cc:ad:21:7c:89:ac:01:af:de:82:c6:12:fa: ad:6c:cc:54:79:f9:65:fb:48:b2:e4:f8:f7:ba:ab:75:53:54: dd:a7:37:8e:48:80:14:3a:18:ce:25:f7:7e:a4:b1:e3:d9:c5: 36:cb:2e:81:62:21:20:a7:eb:e2:d9:72:d4:95:99:de:2d:b5: d7:51:09:78:ae:60:03:2d:8b:6f:57:e9:99:3f:c1:7f:0d:2e: ae:83:2e:63:47:2b:93:74:a5:5c:b1:7b:a7:ac:73:2f:52:9d: 20:d4:72:a4:34:d5:1b:fd:13:a8:84:85:5f:43:9c:75:13:57: 8d:10:2e:6c:39:52:20:91:4d:76:6c:65:73:44:ab:64:14:58: ed:76:42:9a:8b:dd:cb:8a:5b:45:62:01:7b:93:e5:6e:2e:fc: 15:9b:32:9b:2b:ae:f7:36:6d:b7:0c:f5:19:c1:52:72:fc:ce: 2e:aa:42:53:f6:aa:6d:ce:d5:4f:a8:f3:26:60:3e:b6:96:e6: 17:ec:0b:c6:d1:8f:ce:9d:2f:ee:39:2a:04:97:9c:c6:eb:a9: 59:df:a4:23:e7:13:90:14:25:3e:e0:cd:25:2c:95:a4:35:9f: 62:60:ec:a5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOz9PL9/bmfinhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk YWFiZjhhNWEtMjJkNy00ZjM1LWI5ZDUtOWUwMjZmN2EwNDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQxc1J8B9siVYnlAF9MO0OS8pZ3Zyq14I9Xv rUBnfEQGV1wmyqqETbJNq3MZWlGuoBowu67dqvyJQO1lmI+CJeNVcf4apV4gZf81 YeP/C3EDwGos2A8ZI/Upl5QH+3K24dAQbhba/+ngoJpXqBazPsqgrqbUwV9SPUOV yCF5UfVN8/NWbzXdPYBl6g6WgZpcVt1ysdIEND6h7oS8D+NYntZuP7OCVhiTYUFj WdrgFAx0KN8A8oX8dV2r3evxlURUBJsRj0bmvY2C1+Po1SldfFButC0jPzgdtPfa 2yoAoJLS0CdrSa3J3VV9YifBQToODVGZ8ffKh3Jk9LuWnMvKZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFU7DipAVUUY+mWUoG8QS9uPZnEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzc5NzhmOTYtMDQ2OS0z OTJjLWI3ZjItMGFkZTllZjFjMjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzH2fvvBojqVskmu9pGJvYtsjj1qYDhMytIXyJ rAGv3oLGEvqtbMxUefll+0iy5Pj3uqt1U1TdpzeOSIAUOhjOJfd+pLHj2cU2yy6B YiEgp+vi2XLUlZneLbXXUQl4rmADLYtvV+mZP8F/DS6ugy5jRyuTdKVcsXunrHMv Up0g1HKkNNUb/ROohIVfQ5x1E1eNEC5sOVIgkU12bGVzRKtkFFjtdkKai93LiltF YgF7k+VuLvwVmzKbK673Nm23DPUZwVJy/M4uqkJT9qptztVPqPMmYD62luYX7AvG 0Y/OnS/uOSoEl5zG66lZ36Qj5xOQFCU+4M0lLJWkNZ9iYOyl -----END CERTIFICATE-----Generated at Mon Jun 30 16:52:30 2025 by rpki-client