$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d24499a-123f-30a3-8240-4a4d64a8f486.roa File: 9d24499a-123f-30a3-8240-4a4d64a8f486.roa (raw, json) Hash identifier: RkZlkBgR1RICKjuIWrG9LDofMO23teetP102pMIdhog= Subject key identifier: 43:51:5D:75:67:36:27:0B:4D:36:DA:24:D1:0E:48:F4:04:F2:E2:F1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A00DB11DF107FACF4ABF83FC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d24499a-123f-30a3-8240-4a4d64a8f486.roa Signing time: Wed 28 May 2025 13:01:04 +0000 ROA not before: Wed 28 May 2025 13:01:04 +0000 ROA not after: Tue 26 Aug 2025 13:01:04 +0000 asID: 396612 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:00:db:11:df:10:7f:ac:f4:ab:f8:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 28 13:01:04 2025 GMT Not After : Aug 26 13:01:04 2025 GMT Subject: CN=0d0ad6fd-5093-4b85-89bf-50e2f325d94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:39:fa:f7:2a:c3:50:1f:22:be:ee:54:e0: 15:5f:0a:d5:b0:7c:12:ac:10:72:ad:93:1a:dd:de: 66:b9:bd:50:49:da:59:54:55:97:1d:05:e4:ef:16: 37:a9:d2:97:d6:3f:d3:9a:60:98:2b:74:a2:c5:4a: 3f:bf:72:3c:0d:ac:f1:9f:90:ab:ea:c2:9c:27:10: a2:d3:23:c1:bb:6f:2e:66:0e:69:f9:3d:89:f5:28: 66:82:64:87:a5:b6:0d:43:6d:81:51:84:3c:5b:27: f6:52:51:bb:09:99:7e:4c:e0:0e:76:c0:8c:bc:78: b2:3e:fa:27:78:99:b4:33:b8:ab:a4:23:fc:5c:dd: a5:29:96:60:96:2c:03:2b:5f:dd:dd:f8:95:d7:51: a0:88:de:78:49:59:77:03:49:21:19:71:f7:c7:5c: ba:37:b9:d0:c8:67:03:ba:e5:30:7a:27:2d:83:39: dd:5b:74:73:bc:cf:c5:62:b7:d4:a0:11:dc:91:dc: bc:b4:06:53:2a:20:2d:a1:f5:c5:bc:61:68:b4:ef: be:15:90:4a:24:49:1e:10:1c:a1:3d:86:0c:98:38: ea:82:24:bc:45:27:42:9f:e1:43:4f:48:78:bf:ad: 80:12:88:82:9e:d1:54:34:9e:d1:c5:9e:d6:15:a9: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:5D:75:67:36:27:0B:4D:36:DA:24:D1:0E:48:F4:04:F2:E2:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d24499a-123f-30a3-8240-4a4d64a8f486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a3:d4:41:53:d5:06:da:3f:07:4c:e8:d2:eb:f1:98:49:f1: df:b9:37:98:33:84:f7:6a:78:16:5b:d7:a0:45:a3:ca:46:0b: 76:e1:63:ae:a4:40:e3:6d:99:57:b8:33:93:13:9a:2c:93:08: 85:c6:68:08:95:b8:57:b5:0b:c8:c6:47:e6:26:c3:08:0e:85: a7:cd:c7:84:a8:94:90:ee:93:56:05:af:40:c0:27:e5:7c:e8: c0:29:34:c7:9f:26:40:d5:e0:6f:28:da:1a:29:2d:d6:21:2e: e3:32:67:2a:e2:a1:17:a8:67:8c:72:5f:3a:57:79:f2:e2:22: 05:25:dd:78:49:ab:f9:22:fd:34:df:8d:a3:ca:6c:32:03:4f: b1:a4:a8:0c:35:15:c8:c7:c8:94:73:33:8b:1c:05:87:7c:19: ba:0f:df:a1:47:6b:06:b5:b6:51:ae:1a:a2:3d:67:88:38:22: 01:80:33:67:2a:e5:d0:3b:18:91:68:03:5d:db:91:81:32:4b: 4b:dc:68:dd:71:e7:13:ec:d4:6a:a7:b3:95:82:2e:4b:5e:5d: a4:0f:c0:86:42:ca:72:ea:28:12:0d:4f:7c:ac:39:a2:b4:6f: df:56:b3:0b:75:a5:3f:37:1e:83:57:6c:29:17:58:ce:98:6d: 77:af:18:bc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2xHfEH+s9Kv4P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk MGQwYWQ2ZmQtNTA5My00Yjg1LTg5YmYtNTBlMmYzMjVkOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXM5+vcqw1AfIr7uVOAVXwrVsHwSrBByrZMa 3d5mub1QSdpZVFWXHQXk7xY3qdKX1j/TmmCYK3SixUo/v3I8Dazxn5Cr6sKcJxCi 0yPBu28uZg5p+T2J9ShmgmSHpbYNQ22BUYQ8Wyf2UlG7CZl+TOAOdsCMvHiyPvon eJm0M7irpCP8XN2lKZZgliwDK1/d3fiV11GgiN54SVl3A0khGXH3x1y6N7nQyGcD uuUweictgzndW3RzvM/FYrfUoBHckdy8tAZTKiAtofXFvGFotO++FZBKJEkeEByh PYYMmDjqgiS8RSdCn+FDT0h4v62AEoiCntFUNJ7RxZ7WFakXOwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFENRXXVnNicLTTbaJNEOSPQE8uLxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWQyNDQ5OWEtMTIzZi0z MGEzLTgyNDAtNGE0ZDY0YThmNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBno9RBU9UG2j8HTOjS6/GYSfHfuTeYM4T3angW W9egRaPKRgt24WOupEDjbZlXuDOTE5oskwiFxmgIlbhXtQvIxkfmJsMIDoWnzceE qJSQ7pNWBa9AwCflfOjAKTTHnyZA1eBvKNoaKS3WIS7jMmcq4qEXqGeMcl86V3ny 4iIFJd14Sav5Iv00342jymwyA0+xpKgMNRXIx8iUczOLHAWHfBm6D9+hR2sGtbZR rhqiPWeIOCIBgDNnKuXQOxiRaANd25GBMktL3GjdcecT7NRqp7OVgi5LXl2kD8CG Qspy6igSDU98rDmitG/fVrMLdaU/Nx6DV2wpF1jOmG13rxi8 -----END CERTIFICATE-----Generated at Tue Jun 17 00:51:56 2025 by rpki-client