$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa File: 5ba34bcf-5357-3076-9123-9ef84349756a.roa (raw, json) Hash identifier: WpinA0hqP7x15Ox/7z7cC+cvvJNcORzk+IvGDvfZzY8= Subject key identifier: AF:EB:3B:26:9B:EB:C2:52:F5:FF:62:D0:CA:4F:73:59:81:09:BA:8E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3BDC1F02E23EA1E0C680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 396591 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3b:dc:1f:02:e2:3e:a1:e0:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=a581b3cb-9cf6-4341-98e1-001ad5a98f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d4:15:5f:08:0a:1a:7a:01:13:4a:39:a4:d1: ae:0d:88:34:dd:cd:0f:fd:ba:4d:cb:74:af:f1:42: 79:33:3a:91:5d:ee:77:db:98:92:68:43:84:c0:e1: dd:18:24:63:77:df:7b:5a:ea:58:8b:0f:e4:87:6f: a8:e3:ee:96:0e:52:07:8a:21:1c:35:f4:42:0e:f8: 1c:27:f5:c1:0e:ed:fb:c7:42:5c:de:53:0d:77:37: 1e:cb:f3:01:50:fa:ad:fe:92:af:76:aa:b2:0d:f7: ae:3f:f9:c5:c7:6a:7c:bb:f3:05:b9:9a:47:7e:7d: 78:fd:c2:84:af:37:a4:d7:93:94:4a:20:f7:17:1c: c8:d3:8d:c7:c8:28:06:5a:76:c1:55:f8:77:92:f3: db:3e:77:ae:54:b1:20:28:94:d8:1e:65:8b:9e:b0: fc:6a:a3:1e:ed:ae:d9:0e:5a:16:d1:d9:20:45:fb: f8:de:0e:32:e7:12:9b:c1:8f:73:28:d2:da:a3:03: 7e:0a:81:c2:12:90:24:e0:e2:17:35:be:bf:d9:84: ee:46:76:ba:a9:1c:d0:1f:dc:7c:18:bc:18:20:fd: e8:f4:b9:ce:c7:4e:6c:b2:65:44:a6:18:ee:fd:3e: eb:5b:5b:e8:80:c8:b6:a2:ec:98:f2:49:23:09:91: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EB:3B:26:9B:EB:C2:52:F5:FF:62:D0:CA:4F:73:59:81:09:BA:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ba34bcf-5357-3076-9123-9ef84349756a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:78:6b:fc:9b:cc:61:68:b1:f1:6f:6d:9a:a6:33:9f:aa:31: d5:15:2f:d0:93:98:72:89:09:1a:70:d4:d6:05:f2:ad:93:1b: 93:7a:39:27:eb:7e:f3:06:d9:ae:6e:b1:d2:e1:93:2b:1b:13: a7:a9:f4:e3:21:45:6a:16:ef:5f:dd:23:62:8e:4d:99:97:d1: 72:19:55:0c:86:b7:6b:05:32:04:bc:98:de:67:13:bf:a5:c6: 4f:ce:79:ba:c9:a1:ca:98:f9:f9:fb:02:74:88:c5:dd:68:bb: 46:98:41:0c:f0:a5:97:4f:80:b0:1c:81:54:21:5a:9e:a3:52: 50:77:e6:a4:9f:7d:0e:6b:8b:b2:4a:51:97:45:a5:09:20:8c: 50:41:c4:60:23:c3:b5:24:fe:5a:a2:a6:b5:61:63:a1:25:6b: 32:ad:be:09:c4:7c:b0:ce:58:f5:d7:6b:ea:e2:a1:73:df:ce: c1:ae:f2:6e:8c:05:b7:4e:fb:fa:81:50:02:23:d3:0e:3a:bb: a6:c7:12:c9:fa:1b:8a:06:a6:6d:20:a5:12:97:de:6b:60:dc: 10:71:88:32:1b:c6:d4:86:5a:10:9d:a0:9d:87:07:2b:4d:1a: 28:c2:45:e9:44:bd:03:a1:e2:7c:90:bb:0e:36:33:06:57:14: 5e:48:a9:d3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOzvcHwLiPqHgxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk YTU4MWIzY2ItOWNmNi00MzQxLTk4ZTEtMDAxYWQ1YTk4ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstQVXwgKGnoBE0o5pNGuDYg03c0P/bpNy3Sv 8UJ5MzqRXe5325iSaEOEwOHdGCRjd997WupYiw/kh2+o4+6WDlIHiiEcNfRCDvgc J/XBDu37x0Jc3lMNdzcey/MBUPqt/pKvdqqyDfeuP/nFx2p8u/MFuZpHfn14/cKE rzek15OUSiD3FxzI043HyCgGWnbBVfh3kvPbPneuVLEgKJTYHmWLnrD8aqMe7a7Z DloW0dkgRfv43g4y5xKbwY9zKNLaowN+CoHCEpAk4OIXNb6/2YTuRna6qRzQH9x8 GLwYIP3o9LnOx05ssmVEphju/T7rW1vogMi2ouyY8kkjCZHscQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK/rOyab68JS9f9i0MpPc1mBCbqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJhMzRiY2YtNTM1Ny0z MDc2LTkxMjMtOWVmODQzNDk3NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCzeGv8m8xhaLHxb22apjOfqjHVFS/Qk5hyiQka cNTWBfKtkxuTejkn637zBtmubrHS4ZMrGxOnqfTjIUVqFu9f3SNijk2Zl9FyGVUM hrdrBTIEvJjeZxO/pcZPznm6yaHKmPn5+wJ0iMXdaLtGmEEM8KWXT4CwHIFUIVqe o1JQd+akn30Oa4uySlGXRaUJIIxQQcRgI8O1JP5aoqa1YWOhJWsyrb4JxHywzlj1 12vq4qFz387BrvJujAW3Tvv6gVACI9MOOrumxxLJ+huKBqZtIKUSl95rYNwQcYgy G8bUhloQnaCdhwcrTRoowkXpRL0DoeJ8kLsONjMGVxReSKnT -----END CERTIFICATE-----Generated at Tue Jul 1 21:59:03 2025 by rpki-client