$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f98fb75e-ea7c-3119-acb5-dee95e24e1c1.roa File: f98fb75e-ea7c-3119-acb5-dee95e24e1c1.roa (raw, json) Hash identifier: F3b8gjdAzY04EoZNdCkPWtRCr586InTLbE2j2tnl+ak= Subject key identifier: 39:76:24:F4:C7:DB:68:60:63:DF:06:D1:E0:61:6D:F3:ED:66:8B:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1F90542F9D647E1E1A00B300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f98fb75e-ea7c-3119-acb5-dee95e24e1c1.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 397205 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:54:2f:9d:64:7e:1e:1a:00:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=22cc1367-eaa6-4f8e-b461-34723ce08eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:fb:db:18:d7:33:62:9d:77:8c:fc:4e:d1: 66:b1:ab:3b:dd:3d:a4:e9:98:f8:07:7d:12:c2:2b: 76:39:fb:56:ee:5b:d3:ba:9a:2e:46:df:9c:7f:0c: de:7d:b9:7e:17:a6:c7:b8:e6:0e:41:ad:25:f2:7e: 22:9c:8c:60:1d:cd:59:99:84:08:3c:d9:5a:50:32: 43:50:77:c2:75:77:3f:2d:0e:94:bd:f3:8b:a3:01: 3a:82:bf:61:7d:0e:9e:6b:b2:4b:4d:dd:5f:bb:f1: d9:b2:2c:ce:d8:51:aa:c3:76:e5:b3:cd:77:11:43: a4:46:59:02:40:bc:52:74:b2:1c:87:50:1e:01:1f: a1:f1:9f:e1:aa:95:2f:a3:5a:51:41:0d:c2:ce:3d: 4e:9f:08:69:ac:77:95:12:dd:05:1c:87:9a:1d:28: d3:62:11:a0:a5:35:3d:9a:3e:f7:91:fe:49:06:b5: 83:2e:41:41:d7:47:ba:ce:17:b5:61:2c:42:89:e0: 17:76:39:1d:67:55:47:67:b9:d3:92:04:00:60:25: fe:be:b4:c9:40:84:63:2b:ae:d7:2b:09:ac:c6:c9: 1a:b6:25:99:27:49:8b:cb:71:db:84:df:61:09:4f: 5e:bc:31:1c:b8:a2:d2:9f:c1:5c:1b:26:cf:8d:52: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:24:F4:C7:DB:68:60:63:DF:06:D1:E0:61:6D:F3:ED:66:8B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f98fb75e-ea7c-3119-acb5-dee95e24e1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:11:ed:68:8b:3a:53:c3:4b:7b:ff:1e:06:ab:f2:9c:c4:d2: 64:c4:9f:af:38:20:6c:18:c7:e1:83:25:70:2d:f5:c5:55:99: 5b:f7:58:8f:a5:24:13:28:d5:18:b3:8c:69:42:30:2d:e1:72: 51:a8:13:9f:c4:1f:f6:ab:13:63:b8:11:20:bd:99:7e:53:0a: 48:5d:2e:18:5c:b8:e5:12:00:a3:5e:23:d8:21:ae:94:50:7f: 79:52:80:bf:a9:6a:13:84:0f:2f:0d:b7:10:4b:75:b0:24:93: e5:b5:3e:2d:15:f5:1a:74:01:13:a7:ba:42:8e:7a:b9:a5:30: 7f:98:e1:4a:d1:0a:a1:34:fd:39:32:f0:d6:4b:53:46:0b:55: 8e:99:74:92:e8:08:9a:b1:87:f6:0c:ad:f6:52:a1:b1:16:03: 56:f1:44:47:11:3f:fb:61:14:9b:71:ee:9b:90:49:4b:b0:81: d4:c3:dd:5c:1b:dc:0e:ef:d6:f8:21:c3:43:c7:56:23:01:f1: d7:9f:1a:83:b7:43:2c:8a:c6:5a:58:02:ce:e4:88:fb:71:83: d2:26:4a:2f:d0:df:f8:56:ab:42:81:b0:a2:48:13:1d:a4:88: 48:f6:b9:ff:6b:00:99:0b:83:1d:a1:18:ef:27:6f:f4:6c:43: 3d:1a:c8:e6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEofkFQvnWR+HhoAswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk MjJjYzEzNjctZWFhNi00ZjhlLWI0NjEtMzQ3MjNjZTA4ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzL72xjXM2Kdd4z8TtFmsas73T2k6Zj4B30S wit2OftW7lvTupouRt+cfwzefbl+F6bHuOYOQa0l8n4inIxgHc1ZmYQIPNlaUDJD UHfCdXc/LQ6UvfOLowE6gr9hfQ6ea7JLTd1fu/HZsizO2FGqw3bls813EUOkRlkC QLxSdLIch1AeAR+h8Z/hqpUvo1pRQQ3Czj1OnwhprHeVEt0FHIeaHSjTYhGgpTU9 mj73kf5JBrWDLkFB10e6zhe1YSxCieAXdjkdZ1VHZ7nTkgQAYCX+vrTJQIRjK67X KwmsxskatiWZJ0mLy3HbhN9hCU9evDEcuKLSn8FcGybPjVLDtwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDl2JPTH22hgY98G0eBhbfPtZotbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk4ZmI3NWUtZWE3Yy0z MTE5LWFjYjUtZGVlOTVlMjRlMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCjEe1oizpTw0t7/x4Gq/KcxNJkxJ+vOCBsGMfh gyVwLfXFVZlb91iPpSQTKNUYs4xpQjAt4XJRqBOfxB/2qxNjuBEgvZl+UwpIXS4Y XLjlEgCjXiPYIa6UUH95UoC/qWoThA8vDbcQS3WwJJPltT4tFfUadAETp7pCjnq5 pTB/mOFK0QqhNP05MvDWS1NGC1WOmXSS6AiasYf2DK32UqGxFgNW8URHET/7YRSb ce6bkElLsIHUw91cG9wO79b4IcNDx1YjAfHXnxqDt0MsisZaWALO5Ij7cYPSJkov 0N/4VqtCgbCiSBMdpIhI9rn/awCZC4MdoRjvJ2/0bEM9Gsjm -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:04 2025 by rpki-client