$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa File: f25258cd-4993-32b9-98e9-af41e0a3f994.roa (raw, json) Hash identifier: nRfpJDMYOC8Qv7qQXvE9Chxnx5nSJp5fL3e9piUmATE= Subject key identifier: D5:D5:D0:13:71:06:E2:D2:14:06:AA:3B:82:95:C5:ED:0D:33:70:F2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4C3B3FEC60293AA2D7067620 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 396569 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:3f:ec:60:29:3a:a2:d7:06:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=f7057f3d-37c3-407e-a526-8fdfa6a5f256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:f0:81:dd:83:c9:dc:84:01:4d:d7:45:17: 21:ed:82:83:13:c4:84:7e:f7:9e:0d:80:31:94:b3: 11:be:53:c4:18:76:12:27:58:de:1e:df:b9:4a:ae: f7:8a:af:a8:38:aa:78:98:cc:c2:2c:17:01:5f:8d: 4b:9e:19:e7:88:1f:39:4b:5b:6d:a9:1c:8b:c8:1f: 86:17:c9:52:f0:5c:e6:36:e6:93:19:c1:1a:3d:ab: f6:a2:9e:4e:c7:86:1c:aa:46:1f:0b:a2:09:3e:5a: 69:77:ce:c4:85:e9:88:c8:32:a2:57:ce:ce:0c:bf: 5e:96:cf:b6:26:a4:9d:49:e5:35:86:62:f4:e0:a3: ea:7e:03:06:d9:92:fc:e6:d3:04:32:24:1b:11:30: fc:83:c6:ee:07:c0:f4:32:26:46:b9:b9:41:f1:c4: d9:33:ad:f6:7f:c2:1c:ce:b8:0a:eb:80:87:aa:e3: 27:8d:7e:73:38:f6:61:e3:4d:74:6b:f6:8b:8b:a7: ed:4a:11:d3:fe:41:a8:d2:e2:f7:94:85:24:4f:09: 15:1a:05:62:48:c7:8b:36:0e:97:91:e0:62:3d:e9: d8:4f:d6:51:87:9c:c4:b3:92:c4:e4:ee:53:64:25: 49:39:88:1e:eb:a2:a0:4c:e2:f2:b1:e2:b5:24:8a: 46:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D5:D0:13:71:06:E2:D2:14:06:AA:3B:82:95:C5:ED:0D:33:70:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c2:77:79:61:eb:ba:26:0c:55:01:a1:5a:8c:0a:4a:4a:6e: b2:9f:75:1f:5f:c7:f2:0e:ff:04:3d:52:25:01:f1:5c:a3:2a: 21:85:25:a5:ea:7f:9c:71:94:ea:96:40:55:e2:e9:74:67:2e: 0a:35:73:25:27:78:c7:e5:7e:45:85:41:6c:69:56:20:eb:50: c3:8b:17:48:36:9c:24:66:55:91:00:71:03:b3:09:3f:da:3a: b8:0e:3b:ab:b1:fc:0b:d9:05:78:fa:ce:6d:98:e4:33:f1:87: e4:b2:8d:3a:d2:7f:1e:b8:11:a0:82:e4:2f:10:3a:90:a6:27: d0:d4:65:5d:ea:ec:0c:c8:5f:f7:bb:48:b4:7d:70:c1:1d:d1: e0:90:b6:45:ff:07:54:14:39:b4:18:65:7a:38:ca:3b:e0:c5: c6:8f:3e:bd:14:7f:ae:53:2b:87:e5:6e:61:80:56:58:6c:44: f8:b7:4e:51:5d:51:48:ab:fd:b9:21:6a:8d:1d:59:16:46:af: da:dd:c0:77:b7:cf:d1:3b:4b:ac:5e:9d:c2:8e:40:19:b2:7c: 36:31:4c:39:6d:03:a2:8e:7f:11:5d:db:4c:e2:91:af:a7:8b: ec:bf:2b:e2:a4:8d:5c:d2:c3:9b:24:f0:2b:fe:7a:7b:49:39: a0:10:2f:41 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpMOz/sYCk6otcGdiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk ZjcwNTdmM2QtMzdjMy00MDdlLWE1MjYtOGZkZmE2YTVmMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI/wgd2DydyEAU3XRRch7YKDE8SEfveeDYAx lLMRvlPEGHYSJ1jeHt+5Sq73iq+oOKp4mMzCLBcBX41LnhnniB85S1ttqRyLyB+G F8lS8FzmNuaTGcEaPav2op5Ox4YcqkYfC6IJPlppd87EhemIyDKiV87ODL9els+2 JqSdSeU1hmL04KPqfgMG2ZL85tMEMiQbETD8g8buB8D0MiZGublB8cTZM632f8Ic zrgK64CHquMnjX5zOPZh4010a/aLi6ftShHT/kGo0uL3lIUkTwkVGgViSMeLNg6X keBiPenYT9ZRh5zEs5LE5O5TZCVJOYge66KgTOLyseK1JIpG5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNXV0BNxBuLSFAaqO4KVxe0NM3DyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjI1MjU4Y2QtNDk5My0z MmI5LTk4ZTktYWY0MWUwYTNmOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQClwnd5Yeu6JgxVAaFajApKSm6yn3UfX8fyDv8E PVIlAfFcoyohhSWl6n+ccZTqlkBV4ul0Zy4KNXMlJ3jH5X5FhUFsaVYg61DDixdI NpwkZlWRAHEDswk/2jq4DjursfwL2QV4+s5tmOQz8Yfkso060n8euBGgguQvEDqQ pifQ1GVd6uwMyF/3u0i0fXDBHdHgkLZF/wdUFDm0GGV6OMo74MXGjz69FH+uUyuH 5W5hgFZYbET4t05RXVFIq/25IWqNHVkWRq/a3cB3t8/RO0usXp3CjkAZsnw2MUw5 bQOijn8RXdtM4pGvp4vsvyvipI1c0sObJPAr/np7STmgEC9B -----END CERTIFICATE-----Generated at Tue Jul 1 19:44:56 2025 by rpki-client