$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f380bf3-8250-3d15-aab7-97d6680f64b8.roa File: 9f380bf3-8250-3d15-aab7-97d6680f64b8.roa (raw, json) Hash identifier: 2ILe8/3Jaa59WEu0JXLU3fMkZLsnzE5xC9yXvKTzngs= Subject key identifier: AC:F1:64:DE:93:75:C0:26:7D:20:6C:92:AF:B0:47:DA:DE:A1:19:E9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3AABFE39E647568CE100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f380bf3-8250-3d15-aab7-97d6680f64b8.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 396550 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3a:ab:fe:39:e6:47:56:8c:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=74fb4283-cfe5-419c-b47b-a7a2b836d2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:f7:61:26:4e:74:d5:7d:00:ff:a9:ba:0c: 32:7e:27:e0:c3:57:cd:55:d6:9c:57:e8:33:0a:0a: 28:47:b0:2f:96:ce:ac:a1:6e:65:fe:06:37:4d:05: cc:99:40:74:5e:b4:e1:58:b8:e2:75:7d:31:e9:e2: fb:d1:eb:e2:5d:07:9e:4c:68:19:95:43:cd:cb:d6: ac:47:b9:b5:e8:33:b8:53:82:55:88:07:60:ea:43: 41:a6:21:d3:97:ab:bc:cb:79:49:60:c7:0c:c6:27: 67:a1:6b:4d:b4:56:47:40:ad:77:1a:b9:b3:25:f7: 6f:a6:96:07:fe:03:d5:0f:38:bd:a1:42:b8:cf:4a: f9:e2:0a:66:c3:97:13:c0:d2:27:0f:20:9d:f7:83: 62:f5:d2:a6:56:a1:50:ad:d8:11:8f:c6:60:41:cb: 07:03:55:58:dd:97:08:ae:01:09:97:f9:20:fa:41: 71:0d:92:aa:27:aa:e6:b2:d8:ea:c4:8d:64:7f:0f: ef:13:df:f9:e1:c6:aa:4d:8c:d1:06:04:99:79:65: 3f:b3:a1:c3:9e:c3:28:a1:a9:50:13:e6:89:b1:11: 85:aa:a6:9f:68:dd:5c:b5:06:1a:d2:63:1b:4f:f6: 74:30:de:8c:b9:8f:11:c3:39:cd:99:d5:7b:8c:82: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F1:64:DE:93:75:C0:26:7D:20:6C:92:AF:B0:47:DA:DE:A1:19:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f380bf3-8250-3d15-aab7-97d6680f64b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e4:dc:01:49:8b:50:03:5c:ac:86:94:2c:bc:05:b5:2a:59: 8e:3f:80:e8:53:80:16:db:c7:9c:bd:cc:9e:a1:59:ad:ab:e9: 46:1a:04:a5:3c:96:02:83:aa:30:0e:94:63:82:67:c3:df:fb: b9:bb:f8:b8:49:7c:99:be:c0:02:78:88:e9:68:8c:13:9c:5b: d8:e9:ae:88:73:f5:78:7c:84:b3:34:6f:6f:6a:54:0b:4a:f4: d6:76:4c:4f:fc:f6:0b:58:28:6a:61:9d:29:26:83:b4:7b:72: 25:f1:62:b0:dd:e8:75:16:33:7e:30:44:88:6d:15:5e:76:8c: 12:6e:9d:20:45:45:a8:7f:cd:76:bc:15:9c:a6:be:db:db:af: 03:59:f9:4a:8e:c1:0c:a9:e5:2f:cf:ae:a2:04:45:2b:be:e6: 1c:3e:68:71:14:3d:98:a8:8c:0f:1b:b9:f9:e4:3f:10:e2:0d: 1d:80:ae:9f:19:c0:36:89:c9:27:d4:f5:d8:3c:c5:7e:a2:09: d1:c7:ec:73:1f:c0:4e:0c:f1:cc:6b:95:61:26:ad:f1:cc:26: d6:61:36:b5:2c:50:bb:3a:38:80:82:35:db:87:1b:d3:5a:29: 0f:59:69:60:85:13:e2:82:1c:05:73:b5:1f:ef:0d:8a:ea:94: 6e:03:fd:9e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOzqr/jnmR1aM4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NzRmYjQyODMtY2ZlNS00MTljLWI0N2ItYTdhMmI4MzZkMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/b3YSZOdNV9AP+pugwyfifgw1fNVdacV+gz CgooR7Avls6soW5l/gY3TQXMmUB0XrThWLjidX0x6eL70eviXQeeTGgZlUPNy9as R7m16DO4U4JViAdg6kNBpiHTl6u8y3lJYMcMxidnoWtNtFZHQK13GrmzJfdvppYH /gPVDzi9oUK4z0r54gpmw5cTwNInDyCd94Ni9dKmVqFQrdgRj8ZgQcsHA1VY3ZcI rgEJl/kg+kFxDZKqJ6rmstjqxI1kfw/vE9/54caqTYzRBgSZeWU/s6HDnsMooalQ E+aJsRGFqqafaN1ctQYa0mMbT/Z0MN6MuY8RwznNmdV7jIKLPwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKzxZN6TdcAmfSBskq+wR9reoRnpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWYzODBiZjMtODI1MC0z ZDE1LWFhYjctOTdkNjY4MGY2NGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBo5NwBSYtQA1yshpQsvAW1KlmOP4DoU4AW28ec vcyeoVmtq+lGGgSlPJYCg6owDpRjgmfD3/u5u/i4SXyZvsACeIjpaIwTnFvY6a6I c/V4fISzNG9valQLSvTWdkxP/PYLWChqYZ0pJoO0e3Il8WKw3eh1FjN+MESIbRVe dowSbp0gRUWof812vBWcpr7b268DWflKjsEMqeUvz66iBEUrvuYcPmhxFD2YqIwP G7n55D8Q4g0dgK6fGcA2ickn1PXYPMV+ognRx+xzH8BODPHMa5VhJq3xzCbWYTa1 LFC7OjiAgjXbhxvTWikPWWlghRPighwFc7Uf7w2K6pRuA/2e -----END CERTIFICATE-----Generated at Mon Jun 30 13:34:38 2025 by rpki-client