$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd91116-0197-32f6-a770-d7e7e8fb751e.roa File: 0cd91116-0197-32f6-a770-d7e7e8fb751e.roa (raw, json) Hash identifier: nMA4pbfIMqevah0mHFSjUkSk3BFfNwJHYJso8gfWOLU= Subject key identifier: B9:6A:2F:D6:17:52:0E:9A:4B:01:B4:30:62:CD:6C:8C:C8:B1:B7:41 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4F05CC1BBF63DCBDE29FC180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd91116-0197-32f6-a770-d7e7e8fb751e.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 396610 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:cc:1b:bf:63:dc:bd:e2:9f:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=bea8ab28-7643-4254-8a8b-14c164de0e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:96:d7:f9:60:1f:ac:a1:76:84:42:39:23:26: 30:68:9e:4e:06:94:64:31:c3:17:d7:6e:33:68:18: 5b:6e:87:9a:f0:aa:0c:91:7a:90:37:0d:6a:79:02: 95:8f:ce:d1:2c:61:82:03:39:2b:aa:29:cf:ec:67: 07:12:b0:3c:b9:9f:9e:d0:92:8a:26:c4:78:f0:4a: 20:f6:0d:6a:0d:39:4d:ac:3d:2a:50:ba:cb:fa:a5: 5f:02:f0:66:3d:06:b3:10:64:cf:74:9d:02:fa:09: 1c:68:37:fb:23:b5:9b:3e:40:2a:a7:fd:3f:d9:9c: 95:95:ac:8d:8f:c4:71:f8:4b:14:0b:47:dd:55:32: 82:ff:28:b1:d4:cb:4d:b1:1a:68:bc:6b:76:69:b9: 43:d0:5f:45:28:d1:f6:be:99:0c:1b:5b:81:ff:8f: 47:67:0d:55:83:e3:a5:48:34:df:6d:91:58:f1:e2: f5:f3:7c:25:c2:90:fe:ba:1c:47:34:b3:41:a8:ac: 49:da:63:a5:9f:34:24:a0:0a:1b:2d:28:01:1d:d7: 91:4c:49:6f:32:f8:5a:e8:c2:5e:32:a6:a7:c9:6e: 1e:9e:cb:5f:9a:e6:dc:b7:21:f5:bd:13:d9:1f:4d: de:93:c8:ef:f1:79:4c:42:c4:6c:6f:a6:30:1e:d7: cb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6A:2F:D6:17:52:0E:9A:4B:01:B4:30:62:CD:6C:8C:C8:B1:B7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd91116-0197-32f6-a770-d7e7e8fb751e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4f:03:12:10:2b:43:7e:81:ee:2b:4a:4a:b7:9b:a2:52:a2: e6:ef:bb:15:ca:1a:4c:92:c4:67:a0:1a:94:47:44:f2:d3:f4: 1b:d8:70:da:89:b7:b8:89:af:e5:69:40:30:35:34:6d:b9:04: d7:c4:22:0e:ba:7e:8f:34:51:23:28:42:92:06:b3:47:47:9c: 11:9d:7b:bb:0f:75:9f:e6:7f:a9:fe:da:9c:df:c4:f8:47:f1: fe:8f:47:25:0c:15:93:99:00:07:5b:e8:e1:8a:33:9c:3f:c0: 59:ae:02:1d:79:dc:e5:01:78:59:ad:55:a6:b4:fa:62:2b:3b: c7:e7:b6:05:a7:e6:0e:64:5b:4c:a8:f8:43:f4:6e:c7:bc:52: cf:da:7a:12:40:e2:d5:65:c5:51:87:5c:41:07:44:ad:e0:93: 8c:f4:c7:09:f4:1c:f6:96:d4:57:6b:aa:60:da:90:11:e0:46: 18:2f:9d:d6:25:7e:0e:f0:56:69:3e:01:12:28:a4:cc:49:0e: be:c1:09:08:c9:f4:3c:5c:73:64:95:8f:8b:3e:16:1d:83:36: 20:4d:9f:37:ef:10:f7:e8:85:53:8c:74:59:c0:71:2d:36:b8: 3f:a1:e0:00:cb:99:36:01:f0:ff:55:87:50:3b:c3:47:ad:f1: ae:60:29:2d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpPBcwbv2PcveKfwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YmVhOGFiMjgtNzY0My00MjU0LThhOGItMTRjMTY0ZGUwZTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJbX+WAfrKF2hEI5IyYwaJ5OBpRkMcMX124z aBhbboea8KoMkXqQNw1qeQKVj87RLGGCAzkrqinP7GcHErA8uZ+e0JKKJsR48Eog 9g1qDTlNrD0qULrL+qVfAvBmPQazEGTPdJ0C+gkcaDf7I7WbPkAqp/0/2ZyVlayN j8Rx+EsUC0fdVTKC/yix1MtNsRpovGt2ablD0F9FKNH2vpkMG1uB/49HZw1Vg+Ol SDTfbZFY8eL183wlwpD+uhxHNLNBqKxJ2mOlnzQkoAobLSgBHdeRTElvMvha6MJe MqanyW4enstfmubctyH1vRPZH03ek8jv8XlMQsRsb6YwHtfLfwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLlqL9YXUg6aSwG0MGLNbIzIsbdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGNkOTExMTYtMDE5Ny0z MmY2LWE3NzAtZDdlN2U4ZmI3NTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB+TwMSECtDfoHuK0pKt5uiUqLm77sVyhpMksRn oBqUR0Ty0/Qb2HDaibe4ia/laUAwNTRtuQTXxCIOun6PNFEjKEKSBrNHR5wRnXu7 D3Wf5n+p/tqc38T4R/H+j0clDBWTmQAHW+jhijOcP8BZrgIdedzlAXhZrVWmtPpi KzvH57YFp+YOZFtMqPhD9G7HvFLP2noSQOLVZcVRh1xBB0St4JOM9McJ9Bz2ltRX a6pg2pAR4EYYL53WJX4O8FZpPgESKKTMSQ6+wQkIyfQ8XHNklY+LPhYdgzYgTZ83 7xD36IVTjHRZwHEtNrg/oeAAy5k2AfD/VYdQO8NHrfGuYCkt -----END CERTIFICATE-----Generated at Mon Jun 30 22:40:03 2025 by rpki-client