$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d68fd2db-8ebc-3287-87c2-e719e51b20b5.roa File: d68fd2db-8ebc-3287-87c2-e719e51b20b5.roa (raw, json) Hash identifier: Jws1K6lHHdVtA8UV7EPW6ULN/uqjFKBvmocJYQEowYY= Subject key identifier: 29:D4:3C:A2:90:6C:34:E2:3A:64:27:2F:D7:75:B4:44:EE:36:30:15 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3D86B5E4C13E5F72CE88 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d68fd2db-8ebc-3287-87c2-e719e51b20b5.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 36617 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3d:86:b5:e4:c1:3e:5f:72:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=0e85ec12-7871-49c2-ba4d-54204330e131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:0f:50:e4:29:1f:d7:9c:33:3a:ca:0f:b0: eb:a8:4b:8d:36:e5:90:b0:7a:cd:58:cc:e0:9f:ca: 23:ac:ed:17:c8:d7:d3:90:76:d7:3b:2c:c1:60:13: f6:64:d2:40:70:c4:f9:65:65:87:16:65:0e:4c:6d: be:6e:5d:2f:e5:ee:df:33:7e:25:f7:29:b6:24:1a: 1f:17:2b:b7:71:3e:45:72:b3:f3:ae:d7:7b:5e:7c: 10:ca:28:99:bf:07:ea:ac:8f:6f:d9:1b:3c:6c:6a: ea:06:b3:00:3a:5d:8a:39:03:ca:14:94:7e:15:37: 80:24:2d:7e:b6:e5:06:89:96:dd:db:2f:91:2b:b1: f9:85:75:8b:d9:8f:20:84:45:bb:5e:41:12:54:fc: 78:18:77:5d:0b:f5:58:6d:45:84:5e:8d:12:bf:74: 03:ef:86:31:fe:16:af:e4:d0:33:9a:ac:cd:02:49: aa:b0:8e:a4:29:00:cb:f4:c3:c8:43:7c:08:81:80: 06:c9:24:cc:bc:c0:85:4f:6e:7b:f8:cb:c0:dd:42: f7:b1:bc:1e:b4:49:45:88:2f:8f:88:2d:ae:77:3c: e6:34:e8:0c:8a:81:d4:b6:30:a6:df:9b:de:a1:00: 58:91:9d:6d:b6:c5:56:3d:80:51:84:36:39:bb:02: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D4:3C:A2:90:6C:34:E2:3A:64:27:2F:D7:75:B4:44:EE:36:30:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d68fd2db-8ebc-3287-87c2-e719e51b20b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a4:f8:16:44:a6:e9:65:ed:2a:bc:13:f3:61:aa:23:e8:45: 09:e6:20:dd:ad:c6:cc:5a:5f:ff:c9:86:c7:c6:80:84:12:b1: e7:47:6e:e8:1c:04:25:39:bb:b4:cf:49:d6:c7:12:fb:16:e9: fe:52:f5:c6:47:9b:50:57:a1:b1:c7:95:1f:6c:2c:73:4d:da: b4:03:fb:81:54:d4:a9:1d:71:f3:32:22:a3:9f:18:42:e3:77: 9a:75:0e:cf:36:96:57:a9:22:63:24:c8:33:72:29:ab:ed:6a: 5b:26:de:01:f0:12:de:12:96:84:74:47:b7:b0:b3:e0:eb:0a: c0:1b:1f:d5:79:fb:6b:5b:54:9e:9f:a2:e5:eb:7e:b4:05:62: ce:64:d5:d6:ae:76:74:61:20:87:77:e6:b5:4d:3c:af:a4:43: c0:41:4a:ca:45:da:87:87:db:d1:04:70:b0:65:cf:19:f1:f0: ba:6e:6a:43:9e:e7:12:8c:46:00:d4:a6:f6:23:22:5e:40:45: 76:92:fe:ee:58:31:f7:ae:15:ac:e5:77:d4:f3:bf:ce:6f:7e: e7:a1:52:d9:ab:22:f5:49:71:65:21:01:5e:b6:29:e8:91:10: 40:81:9a:dc:ae:9c:b0:c0:54:af:5e:91:b1:1c:ef:ae:24:54: 5b:1d:2a:95 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOz2GteTBPl9yzogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk MGU4NWVjMTItNzg3MS00OWMyLWJhNGQtNTQyMDQzMzBlMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1gPUOQpH9ecMzrKD7DrqEuNNuWQsHrNWMzg n8ojrO0XyNfTkHbXOyzBYBP2ZNJAcMT5ZWWHFmUOTG2+bl0v5e7fM34l9ym2JBof Fyu3cT5FcrPzrtd7XnwQyiiZvwfqrI9v2Rs8bGrqBrMAOl2KOQPKFJR+FTeAJC1+ tuUGiZbd2y+RK7H5hXWL2Y8ghEW7XkESVPx4GHddC/VYbUWEXo0Sv3QD74Yx/hav 5NAzmqzNAkmqsI6kKQDL9MPIQ3wIgYAGySTMvMCFT257+MvA3UL3sbwetElFiC+P iC2udzzmNOgMioHUtjCm35veoQBYkZ1ttsVWPYBRhDY5uwK+YwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCnUPKKQbDTiOmQnL9d1tETuNjAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDY4ZmQyZGItOGViYy0z Mjg3LTg3YzItZTcxOWU1MWIyMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEpPgWRKbpZe0qvBPzYaoj6EUJ5iDdrcbMWl// yYbHxoCEErHnR27oHAQlObu0z0nWxxL7Fun+UvXGR5tQV6Gxx5UfbCxzTdq0A/uB VNSpHXHzMiKjnxhC43eadQ7PNpZXqSJjJMgzcimr7WpbJt4B8BLeEpaEdEe3sLPg 6wrAGx/VeftrW1Sen6Ll6360BWLOZNXWrnZ0YSCHd+a1TTyvpEPAQUrKRdqHh9vR BHCwZc8Z8fC6bmpDnucSjEYA1Kb2IyJeQEV2kv7uWDH3rhWs5XfU87/Ob37noVLZ qyL1SXFlIQFetinokRBAgZrcrpywwFSvXpGxHO+uJFRbHSqV -----END CERTIFICATE-----Generated at Mon Jun 30 10:26:54 2025 by rpki-client