$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa File: d345e031-7e87-3977-9aa7-6b7e19f3795e.roa (raw, json) Hash identifier: GumcUWdP6vEpg7j1bl+MftfMPcMA1jYXNiS7d0KIAfk= Subject key identifier: 36:56:95:D6:5E:E3:FE:5B:61:EE:53:65:51:EF:0C:31:35:B2:66:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1F904FBDBA32E7B621FD9620 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 396609 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:4f:bd:ba:32:e7:b6:21:fd:96:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=ab0fd423-527e-4a87-9a28-9eb20f3af4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:c5:c4:bd:9d:59:e5:e9:13:0c:46:4c:d6: d9:16:31:d1:c6:e2:ed:0a:ee:41:69:54:44:c2:75: c9:dd:72:66:82:40:78:dc:8f:f1:eb:e6:db:8c:a3: 8d:6e:6d:f3:04:66:0b:b0:aa:ad:15:c6:1f:ff:83: e3:e5:08:88:fe:24:0b:a8:71:0d:fc:11:b7:88:ca: 84:43:bb:4d:fe:34:47:c4:2c:d5:8d:4a:3a:bc:36: 10:5f:d0:9f:19:cc:26:d1:18:e8:a6:87:c5:1d:26: fb:0c:fe:f2:21:87:48:7d:55:c8:45:63:9b:96:b3: 02:32:91:07:72:48:37:15:5a:8e:7e:30:38:a4:03: 86:b6:9c:ba:ed:a3:37:a2:07:f2:88:d0:88:c2:87: dd:f0:e0:84:eb:e7:35:b6:d4:0a:48:7e:56:bf:d4: ba:c9:90:6a:ef:7e:bd:85:04:43:a6:b5:f0:4c:6a: f2:02:78:e2:37:6a:27:d2:11:fe:27:3c:e4:af:72: 03:75:f1:3f:e0:b0:35:8d:58:c6:05:62:79:63:3b: 5f:59:11:ef:90:4e:e5:9a:cc:d3:88:94:80:9c:4d: ca:e0:a0:9f:df:80:dc:7e:4a:fa:9c:32:f6:86:20: d9:6c:fe:9c:df:c2:f5:1b:7f:48:22:05:15:c1:a7: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:56:95:D6:5E:E3:FE:5B:61:EE:53:65:51:EF:0C:31:35:B2:66:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:32:99:c3:46:92:f7:0c:9e:53:30:fe:ea:38:29:00:83:92: e3:e8:32:38:81:d8:f7:32:0f:35:54:82:56:1f:e3:7a:bf:af: 46:44:83:71:1f:6f:bc:c9:80:c9:50:94:6f:9c:3d:f7:3d:a5: ad:00:ba:dd:8b:32:69:d3:f1:ba:ad:cb:3b:00:b1:93:67:76: f5:13:f7:ae:e4:0a:7e:23:ad:9c:26:09:65:83:37:8b:76:27: 20:3d:a0:9c:99:db:50:72:f3:bc:67:40:a5:24:55:31:ce:b8: c5:55:28:5c:4d:ee:77:d5:19:61:9d:ea:35:13:6d:a5:64:24: 34:47:9e:04:38:ee:ee:2d:9d:3b:9b:99:b5:70:e7:91:1e:83: 52:d2:b0:af:8c:f3:80:a6:20:1f:bf:de:60:d1:95:de:fa:7e: 93:34:09:d5:83:ef:0d:f2:2f:4e:11:5e:7d:7c:98:27:aa:7c: b3:b4:f9:e5:0c:75:6f:40:6d:87:cc:fa:c3:07:5e:db:8a:7c: c0:11:df:c8:a4:da:46:65:39:80:a7:3a:10:0b:d1:37:33:1e: 19:cd:5e:b8:37:c1:a3:b3:2a:c4:cf:65:62:57:9b:7f:da:a6: 6a:83:6f:b8:5b:ee:56:09:63:48:5f:f0:a4:c4:27:67:35:28: d4:5a:2c:1a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEofkE+9ujLntiH9liAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YWIwZmQ0MjMtNTI3ZS00YTg3LTlhMjgtOWViMjBmM2FmNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXnFxL2dWeXpEwxGTNbZFjHRxuLtCu5BaVRE wnXJ3XJmgkB43I/x6+bbjKONbm3zBGYLsKqtFcYf/4Pj5QiI/iQLqHEN/BG3iMqE Q7tN/jRHxCzVjUo6vDYQX9CfGcwm0RjopofFHSb7DP7yIYdIfVXIRWOblrMCMpEH ckg3FVqOfjA4pAOGtpy67aM3ogfyiNCIwofd8OCE6+c1ttQKSH5Wv9S6yZBq7369 hQRDprXwTGryAnjiN2on0hH+Jzzkr3IDdfE/4LA1jVjGBWJ5YztfWRHvkE7lmszT iJSAnE3K4KCf34Dcfkr6nDL2hiDZbP6c38L1G39IIgUVwaddxQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDZWldZe4/5bYe5TZVHvDDE1smalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM0NWUwMzEtN2U4Ny0z OTc3LTlhYTctNmI3ZTE5ZjM3OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBTMpnDRpL3DJ5TMP7qOCkAg5Lj6DI4gdj3Mg81 VIJWH+N6v69GRINxH2+8yYDJUJRvnD33PaWtALrdizJp0/G6rcs7ALGTZ3b1E/eu 5Ap+I62cJgllgzeLdicgPaCcmdtQcvO8Z0ClJFUxzrjFVShcTe531Rlhneo1E22l ZCQ0R54EOO7uLZ07m5m1cOeRHoNS0rCvjPOApiAfv95g0ZXe+n6TNAnVg+8N8i9O EV59fJgnqnyztPnlDHVvQG2HzPrDB17binzAEd/IpNpGZTmApzoQC9E3Mx4ZzV64 N8GjsyrEz2ViV5t/2qZqg2+4W+5WCWNIX/CkxCdnNSjUWiwa -----END CERTIFICATE-----Generated at Mon Jun 30 18:13:55 2025 by rpki-client