$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa File: 3a88b321-e458-3859-b51a-662aa9fe79f6.roa (raw, json) Hash identifier: WLjOqKwRSNqfSS0XjGY3/4LzkAH1/Zi9QuuJYdbuCd0= Subject key identifier: 9F:90:4C:90:13:67:54:53:F2:EF:A3:63:7C:F9:1B:EE:84:13:8C:14 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3F79FE9E4EE0F8DF9840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 396551 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3f:79:fe:9e:4e:e0:f8:df:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=91d55a5f-2025-4eeb-8a61-b164c261d7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:70:ec:79:0e:fd:49:52:e5:5e:35:49:d8: 74:e3:0f:84:a2:5e:67:4a:1e:23:11:5a:5b:a5:d9: c9:0b:da:9a:2d:57:52:26:b9:ac:11:f4:0a:36:cc: f3:75:3d:f1:7a:99:e1:35:44:a6:8b:22:e1:26:0f: 2f:b6:dc:8a:e3:cd:66:99:3c:93:52:69:cf:69:04: dc:a1:3f:33:b7:b9:41:14:1e:6d:9f:f4:ee:f4:b3: 05:2c:06:db:64:6a:33:30:36:93:34:fe:3f:7b:a1: bc:f4:4b:34:62:5d:3f:35:16:84:5b:4a:c4:93:bf: f9:7f:04:55:36:9d:7d:b7:7a:81:2f:ad:26:0d:f7: 4d:7d:fb:f6:4b:25:fd:0c:1a:5f:08:d9:15:5b:96: 59:51:30:34:59:9c:92:ed:c7:fe:5b:dd:01:91:18: db:ae:48:08:32:d8:80:d7:e7:8f:bd:be:ef:c2:00: 9b:60:b7:71:8f:c6:c9:8d:32:e5:b3:d8:ae:63:bc: 6b:5e:50:86:6a:26:3e:68:01:5c:24:f3:66:cd:15: 12:76:d1:bc:99:62:44:65:62:33:15:69:ec:db:ac: 95:c8:7e:42:27:24:8d:18:aa:dd:ad:c9:c2:3f:69: 24:59:6e:8b:5b:df:14:13:95:a8:40:61:48:2c:97: 2d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:90:4C:90:13:67:54:53:F2:EF:A3:63:7C:F9:1B:EE:84:13:8C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a88b321-e458-3859-b51a-662aa9fe79f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:04:a8:7f:0d:95:b3:ff:7b:e3:22:04:40:d3:5b:11:8c:f0: 36:9b:11:12:0f:96:ca:48:14:7d:20:ab:c7:62:c6:c1:f8:57: 2a:0a:ae:18:b9:ec:9b:7c:71:c2:c7:70:a7:c5:ef:a5:b1:3b: c3:c9:18:3f:14:20:33:4b:e9:90:7e:e9:59:2d:02:84:12:e9: cb:85:d1:e4:49:ee:34:91:a1:05:ab:33:ee:f9:53:94:2e:22: 86:18:7e:f1:1d:a1:90:f0:b4:f6:55:c1:79:56:f2:07:f1:5c: 5d:6c:9f:8d:d0:3a:22:3f:ae:e7:0a:55:93:9b:ad:e8:34:41: 7c:0e:80:b8:e2:7a:4c:40:ec:b6:12:be:45:cb:69:a8:bd:6d: d5:d3:0d:19:d1:4b:68:b1:ab:e8:c6:e5:51:be:2a:17:af:c3: 3f:c0:19:de:05:32:af:ba:58:c2:c5:5e:e6:0f:f1:e4:c7:f0: b2:3f:a5:d9:82:09:f1:29:9c:9e:62:da:e0:90:ef:73:ce:97: 7a:b4:88:e9:b5:58:8c:d4:60:72:28:36:48:2a:62:10:15:23: 8c:ac:f9:9a:77:b8:04:23:6c:01:68:84:c5:88:e6:95:9b:0d: 2f:3b:87:32:e1:1e:74:ff:41:c1:89:2b:5b:54:fa:6e:58:16: ed:9a:a7:79 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOz95/p5O4PjfmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk OTFkNTVhNWYtMjAyNS00ZWViLThhNjEtYjE2NGMyNjFkN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyExw7HkO/UlS5V41Sdh04w+Eol5nSh4jEVpb pdnJC9qaLVdSJrmsEfQKNszzdT3xepnhNUSmiyLhJg8vttyK481mmTyTUmnPaQTc oT8zt7lBFB5tn/Tu9LMFLAbbZGozMDaTNP4/e6G89Es0Yl0/NRaEW0rEk7/5fwRV Np19t3qBL60mDfdNffv2SyX9DBpfCNkVW5ZZUTA0WZyS7cf+W90BkRjbrkgIMtiA 1+ePvb7vwgCbYLdxj8bJjTLls9iuY7xrXlCGaiY+aAFcJPNmzRUSdtG8mWJEZWIz FWns26yVyH5CJySNGKrdrcnCP2kkWW6LW98UE5WoQGFILJctRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ+QTJATZ1RT8u+jY3z5G+6EE4wUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E4OGIzMjEtZTQ1OC0z ODU5LWI1MWEtNjYyYWE5ZmU3OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC9BKh/DZWz/3vjIgRA01sRjPA2mxESD5bKSBR9 IKvHYsbB+FcqCq4YueybfHHCx3Cnxe+lsTvDyRg/FCAzS+mQfulZLQKEEunLhdHk Se40kaEFqzPu+VOULiKGGH7xHaGQ8LT2VcF5VvIH8VxdbJ+N0DoiP67nClWTm63o NEF8DoC44npMQOy2Er5Fy2movW3V0w0Z0UtosavoxuVRvioXr8M/wBneBTKvuljC xV7mD/Hkx/CyP6XZggnxKZyeYtrgkO9zzpd6tIjptViM1GByKDZIKmIQFSOMrPma d7gEI2wBaITFiOaVmw0vO4cy4R50/0HBiStbVPpuWBbtmqd5 -----END CERTIFICATE-----Generated at Mon Jun 30 10:21:13 2025 by rpki-client