$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa File: c8406f43-0956-3a10-83a7-1a88bee01778.roa (raw, json) Hash identifier: YDjMx38wibGn+jvzISje5uBPDAXX4YTdK4DgaEUJAsI= Subject key identifier: 37:9D:E9:AC:F9:7C:47:8C:03:CF:A4:16:A6:33:28:44:75:EB:44:C8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5A307B6A89B525E177CC90C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 396572 IP address blocks: 2001:500:30ff::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:7b:6a:89:b5:25:e1:77:cc:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=f30f3866-a1ed-43a6-afc8-08aca7678d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4d:a8:09:cf:cb:81:59:fd:f8:7b:57:f9:0f: d0:e2:33:fb:fe:83:3e:87:73:e9:25:14:58:79:4d: 76:41:35:c8:01:e0:1c:7f:e1:32:c2:76:61:3c:ae: 5d:b9:de:41:e3:45:32:9a:4a:ed:e7:1a:8e:03:45: ff:ef:d6:f4:97:3e:00:ed:d7:f5:35:4b:5d:5c:de: 9b:d1:22:a5:b1:32:19:79:f4:56:5c:b1:85:ef:70: e3:d5:8c:5f:7b:f1:31:a2:7c:84:b1:ff:bc:88:36: 8e:7f:63:42:66:4d:11:c4:e0:4b:b9:53:a0:c5:3c: f0:34:b1:99:f1:64:b9:c6:9c:96:6d:fb:6b:45:7f: 2a:ac:2b:1f:80:a1:53:45:ad:c0:23:b7:73:c9:df: cb:0e:a7:59:86:46:a4:a5:5c:25:03:7b:14:f6:af: 6f:3d:be:bb:81:99:23:bc:1d:fe:4b:37:3d:80:8b: de:77:09:a4:10:2a:eb:3b:ab:7f:3a:78:6c:52:a4: 7b:dc:8c:45:2a:11:f8:77:56:e8:d8:47:ff:d0:7e: 8e:95:0a:a6:66:8c:51:d1:25:ca:7f:e9:f2:a9:ce: 37:6c:cc:44:7e:06:74:c1:6f:c2:1e:07:ab:eb:8d: 7c:2f:0d:b6:fa:12:05:5a:3b:71:2e:b2:2e:ae:b2: 55:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9D:E9:AC:F9:7C:47:8C:03:CF:A4:16:A6:33:28:44:75:EB:44:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8406f43-0956-3a10-83a7-1a88bee01778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:a1:46:be:b7:bf:de:04:f7:4d:08:ea:90:c2:bd:db:91:a1: 47:ac:a0:fb:2e:86:8c:23:12:0e:b7:9c:93:9b:02:80:fa:9b: 1d:ea:62:41:c4:ac:54:95:73:6d:86:70:83:b4:60:29:f2:8d: 3d:4f:02:b0:62:dc:c9:88:48:11:44:97:bb:29:29:5c:26:36: b0:a1:85:3d:85:0e:0a:b8:e9:cd:05:08:cd:c5:76:66:3e:92: 02:bb:59:af:72:de:86:24:45:fd:43:3d:07:2d:02:b1:6f:d6: 57:df:d6:7e:99:f5:c2:9e:0c:fd:8d:bc:0c:d9:fa:a6:db:ba: 2d:bc:fa:a2:8c:0b:4f:09:c6:04:65:dd:cd:77:d4:1a:01:33: 05:d1:89:c2:33:11:45:e2:7f:6a:90:ee:64:0a:a6:e5:2a:12: 4e:8d:4a:bd:29:d7:4b:3c:ee:24:a1:0e:f2:c4:90:05:c5:fd: e3:50:e6:d6:4f:3a:ce:4b:59:f2:f8:9f:e0:48:37:89:0b:56: 3a:d4:48:c9:80:d1:c7:2c:c7:89:80:aa:79:5d:b3:8f:06:a5: 90:d8:3a:64:dc:96:1f:ca:4f:40:f3:ef:ff:d6:73:aa:9e:f4: 45:c1:06:20:57:d8:d3:50:6d:d5:dd:22:df:39:84:f5:5a:d3: 22:4b:0e:e3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpaMHtqibUl4XfMkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZjMwZjM4NjYtYTFlZC00M2E2LWFmYzgtMDhhY2E3Njc4ZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU2oCc/LgVn9+HtX+Q/Q4jP7/oM+h3PpJRRY eU12QTXIAeAcf+EywnZhPK5dud5B40Uymkrt5xqOA0X/79b0lz4A7df1NUtdXN6b 0SKlsTIZefRWXLGF73Dj1Yxfe/ExonyEsf+8iDaOf2NCZk0RxOBLuVOgxTzwNLGZ 8WS5xpyWbftrRX8qrCsfgKFTRa3AI7dzyd/LDqdZhkakpVwlA3sU9q9vPb67gZkj vB3+Szc9gIvedwmkECrrO6t/OnhsUqR73IxFKhH4d1bo2Ef/0H6OlQqmZoxR0SXK f+nyqc43bMxEfgZ0wW/CHger6418Lw22+hIFWjtxLrIurrJVTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDed6az5fEeMA8+kFqYzKER160TIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg0MDZmNDMtMDk1Ni0z YTEwLTgzYTctMWE4OGJlZTAxNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC6oUa+t7/eBPdNCOqQwr3bkaFHrKD7LoaMIxIO t5yTmwKA+psd6mJBxKxUlXNthnCDtGAp8o09TwKwYtzJiEgRRJe7KSlcJjawoYU9 hQ4KuOnNBQjNxXZmPpICu1mvct6GJEX9Qz0HLQKxb9ZX39Z+mfXCngz9jbwM2fqm 27otvPqijAtPCcYEZd3Nd9QaATMF0YnCMxFF4n9qkO5kCqblKhJOjUq9KddLPO4k oQ7yxJAFxf3jUObWTzrOS1ny+J/gSDeJC1Y61EjJgNHHLMeJgKp5XbOPBqWQ2Dpk 3JYfyk9A8+//1nOqnvRFwQYgV9jTUG3V3SLfOYT1WtMiSw7j -----END CERTIFICATE-----Generated at Mon Jun 30 11:38:23 2025 by rpki-client