$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8366cb20-f10f-3373-b046-694ad480a5b0.roa File: 8366cb20-f10f-3373-b046-694ad480a5b0.roa (raw, json) Hash identifier: XEZ2Vn3oUlfM2vgtsXuAA23T2lRUPxXQ/CbXejfI7ks= Subject key identifier: 00:08:C9:20:20:94:85:DF:37:D2:21:A3:60:73:77:EB:F9:A7:68:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B39DC5FE2365DE15CD280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8366cb20-f10f-3373-b046-694ad480a5b0.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 397193 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:39:dc:5f:e2:36:5d:e1:5c:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=ce274c08-7986-4d96-91b0-4ed35a581a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:ea:70:bc:9d:f4:00:97:8b:95:5d:58:dd: 59:72:30:e3:47:3b:14:6f:c4:9b:f7:b3:83:de:04: 34:53:e2:1d:3d:cb:a7:23:a6:22:6e:ab:6c:b0:f8: d2:aa:b3:d8:68:2f:0e:c7:e0:91:9b:0c:99:be:dc: 91:64:1a:eb:86:1c:ba:9b:6f:8f:ea:bc:fc:3c:d3: 86:9a:e3:8e:1e:5a:44:7f:f1:b5:1f:d5:ad:f9:be: 66:7e:c8:df:fd:7e:8e:64:13:f5:53:25:57:b3:83: cd:e6:56:11:45:85:2c:b8:20:7c:c8:66:2f:a2:be: bc:b5:08:b9:75:d6:fe:04:d8:94:48:a8:ce:11:9a: 33:50:23:9a:a3:55:a7:a8:9c:51:a3:91:1c:17:64: fc:a9:cd:ea:09:38:79:6c:6d:9f:e1:02:8e:b8:fb: 3e:d2:af:cc:0e:3c:b8:d8:59:77:09:2f:5a:94:14: 2a:70:16:3e:a3:a5:72:f7:94:bc:ca:5a:b5:b5:c0: 77:ec:8d:65:c9:7b:47:19:b9:50:e7:81:b0:8d:41: 53:1c:ac:c8:18:4e:82:1f:f1:fb:14:27:8b:57:44: a0:38:17:a8:44:5a:42:85:32:73:da:bc:ff:cd:7a: 24:30:df:cb:99:53:dc:72:78:1a:b5:e3:2a:76:b0: 70:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:08:C9:20:20:94:85:DF:37:D2:21:A3:60:73:77:EB:F9:A7:68:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8366cb20-f10f-3373-b046-694ad480a5b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e3:1a:a2:91:13:7d:0e:b9:4e:3d:95:c9:da:4d:11:62:99: 2f:31:2b:29:a9:6d:ae:c2:e8:59:90:59:45:ff:fc:c3:98:47: 74:a7:7a:e6:ff:c6:0d:8e:1c:02:e4:4f:f8:a3:27:8f:a5:36: 14:84:ee:4d:81:62:31:90:f0:38:67:4b:9c:e4:c4:8c:e1:e0: ab:3c:48:22:0a:3c:e3:f0:6b:8a:56:d7:59:12:9b:41:8c:00: 21:b9:c4:ad:55:4a:8e:50:92:11:6a:30:ff:19:5f:5c:6a:c9: f1:df:13:a4:9f:9b:9b:d6:c4:ab:2e:74:cd:90:6b:8d:2a:41: 4d:56:de:b8:2e:10:af:2f:dd:48:36:18:30:09:8e:5f:98:e0: 9f:4e:a8:d3:9f:13:c0:ad:be:ab:46:c2:5f:30:96:14:9b:68: 97:88:09:7c:93:ca:7b:ef:68:1e:43:91:fe:f1:b8:5a:d0:ab: 47:e4:9a:15:e4:a4:7d:30:96:f6:5c:bd:a3:9d:4a:e0:66:26: 25:ae:c3:f3:3c:33:57:84:02:61:7d:fb:92:f1:ae:7a:a9:a2: 40:62:9b:2d:e3:74:b5:23:ce:74:ff:54:05:13:ea:b0:7c:7f: 20:96:a7:04:10:4a:fd:c5:95:b0:a7:fb:23:43:e7:f3:8e:99: b4:8c:9f:1a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOzncX+I2XeFc0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk Y2UyNzRjMDgtNzk4Ni00ZDk2LTkxYjAtNGVkMzVhNTgxYTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF/qcLyd9ACXi5VdWN1ZcjDjRzsUb8Sb97OD 3gQ0U+IdPcunI6YibqtssPjSqrPYaC8Ox+CRmwyZvtyRZBrrhhy6m2+P6rz8PNOG muOOHlpEf/G1H9Wt+b5mfsjf/X6OZBP1UyVXs4PN5lYRRYUsuCB8yGYvor68tQi5 ddb+BNiUSKjOEZozUCOao1WnqJxRo5EcF2T8qc3qCTh5bG2f4QKOuPs+0q/MDjy4 2Fl3CS9alBQqcBY+o6Vy95S8ylq1tcB37I1lyXtHGblQ54GwjUFTHKzIGE6CH/H7 FCeLV0SgOBeoRFpChTJz2rz/zXokMN/LmVPccngateMqdrBwNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAAIySAglIXfN9Iho2Bzd+v5p2hgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODM2NmNiMjAtZjEwZi0z MzczLWIwNDYtNjk0YWQ0ODBhNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBq4xqikRN9DrlOPZXJ2k0RYpkvMSspqW2uwuhZ kFlF//zDmEd0p3rm/8YNjhwC5E/4oyePpTYUhO5NgWIxkPA4Z0uc5MSM4eCrPEgi Cjzj8GuKVtdZEptBjAAhucStVUqOUJIRajD/GV9casnx3xOkn5ub1sSrLnTNkGuN KkFNVt64LhCvL91INhgwCY5fmOCfTqjTnxPArb6rRsJfMJYUm2iXiAl8k8p772ge Q5H+8bha0KtH5JoV5KR9MJb2XL2jnUrgZiYlrsPzPDNXhAJhffuS8a56qaJAYpst 43S1I850/1QFE+qwfH8glqcEEEr9xZWwp/sjQ+fzjpm0jJ8a -----END CERTIFICATE-----Generated at Tue Jul 1 16:10:30 2025 by rpki-client