$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa File: 3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa (raw, json) Hash identifier: 4DI4MeamlIKTHdExwOyWEAwsed6UMvFJj7LHG/Z2xW0= Subject key identifier: D5:3F:70:5E:FB:D0:85:5F:E7:32:02:40:41:8E:B1:32:67:9C:78:15 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4F05B4D9527F3AB9F2D99D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 397203 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:b4:d9:52:7f:3a:b9:f2:d9:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=ab3fee56-f046-4753-af19-81297cd2fe85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:22:5b:ec:45:c4:cf:2a:1e:8e:76:9e:aa: 46:a2:34:68:57:ea:ac:d9:02:12:39:03:6f:8d:3a: f0:4c:3f:a1:cd:cf:f7:2c:02:b9:6e:0c:15:12:c5: b6:b1:01:bc:63:3e:d4:34:fd:18:62:bf:b9:00:d2: bb:d9:3c:3c:2c:30:da:4e:22:65:5d:05:b1:5d:77: ca:99:8b:0f:61:f0:ec:ff:d6:5f:75:31:85:4a:39: c4:fb:fa:82:82:a9:d1:d1:6a:90:b4:62:81:86:cc: 3e:e1:de:bb:15:0f:ca:90:7c:50:19:9d:8e:5e:f6: 91:cf:96:19:56:07:63:ff:b5:51:69:2e:08:e2:12: 4d:f4:27:dc:2d:98:e9:aa:fd:56:a3:87:4e:3e:52: 0a:ea:5b:7e:37:24:30:44:f0:87:17:26:fa:ff:9d: 78:17:37:0c:a2:69:91:15:6e:a0:fe:e1:97:0a:6f: e3:cc:02:c8:42:f7:19:bb:f5:c4:a2:d2:19:9d:72: f6:69:bc:4e:c8:20:bf:e1:77:a2:36:0a:69:b1:82: 5b:b4:07:f6:74:3e:f2:40:5a:25:10:99:50:de:00: 72:9a:8b:fa:43:53:e8:03:23:cf:6f:e1:01:1e:7d: a9:de:3c:23:25:c8:1e:6c:bb:10:73:de:01:b3:b0: ac:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3F:70:5E:FB:D0:85:5F:E7:32:02:40:41:8E:B1:32:67:9C:78:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fc0b5e2-2efe-3f6d-a351-f6925eae79cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e3:0a:90:50:dc:d9:2c:18:45:f3:0f:c7:be:50:69:d0:9e: 24:d9:8d:5f:99:6b:83:eb:ea:84:f5:59:a6:46:33:df:7e:71: 61:c1:4f:7c:66:29:1e:8d:1f:0b:7a:12:89:63:63:d6:3d:4b: 8f:1a:26:bd:8e:60:db:98:2b:92:13:8d:e5:15:8e:d3:0e:3b: 33:16:c9:d4:c6:45:44:94:3a:d8:31:72:bc:ff:b0:76:a0:3c: 7d:d4:27:61:8a:a7:3c:0d:e4:cc:f5:c3:8d:8f:40:8d:99:5a: d4:df:11:38:2d:a3:fa:b5:b1:10:b4:cb:ba:bd:8e:1b:d8:ad: cb:90:97:7a:6f:4b:42:38:72:5b:d5:c5:df:dc:c2:41:86:d7: ca:8b:e9:6c:50:6c:22:49:f5:b5:1a:2e:cb:07:4b:5e:d9:39: 87:bf:d4:69:40:3f:b3:42:15:33:f1:cd:60:4d:cd:22:e6:95: 0d:d8:3d:8a:88:4b:0d:25:9f:9d:58:6b:a5:51:ef:ec:dd:4b: 91:05:5e:dd:29:94:61:39:52:d3:5f:cb:72:a5:93:ac:d5:c6: c6:00:f2:b0:78:27:ba:bc:d6:d8:dd:be:0c:67:43:1f:76:82: 00:eb:6e:98:d6:f2:ef:0b:e4:6a:29:e4:ae:26:57:fc:43:cb: 93:72:c6:ff -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpPBbTZUn86ufLZnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk YWIzZmVlNTYtZjA0Ni00NzUzLWFmMTktODEyOTdjZDJmZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI8iW+xFxM8qHo52nqpGojRoV+qs2QISOQNv jTrwTD+hzc/3LAK5bgwVEsW2sQG8Yz7UNP0YYr+5ANK72Tw8LDDaTiJlXQWxXXfK mYsPYfDs/9ZfdTGFSjnE+/qCgqnR0WqQtGKBhsw+4d67FQ/KkHxQGZ2OXvaRz5YZ Vgdj/7VRaS4I4hJN9CfcLZjpqv1Wo4dOPlIK6lt+NyQwRPCHFyb6/514FzcMommR FW6g/uGXCm/jzALIQvcZu/XEotIZnXL2abxOyCC/4XeiNgppsYJbtAf2dD7yQFol EJlQ3gBymov6Q1PoAyPPb+EBHn2p3jwjJcgebLsQc94Bs7CshQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNU/cF770IVf5zICQEGOsTJnnHgVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZjMGI1ZTItMmVmZS0z ZjZkLWEzNTEtZjY5MjVlYWU3OWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCD4wqQUNzZLBhF8w/HvlBp0J4k2Y1fmWuD6+qE 9VmmRjPffnFhwU98ZikejR8LehKJY2PWPUuPGia9jmDbmCuSE43lFY7TDjszFsnU xkVElDrYMXK8/7B2oDx91Cdhiqc8DeTM9cONj0CNmVrU3xE4LaP6tbEQtMu6vY4b 2K3LkJd6b0tCOHJb1cXf3MJBhtfKi+lsUGwiSfW1Gi7LB0te2TmHv9RpQD+zQhUz 8c1gTc0i5pUN2D2KiEsNJZ+dWGulUe/s3UuRBV7dKZRhOVLTX8typZOs1cbGAPKw eCe6vNbY3b4MZ0MfdoIA626Y1vLvC+RqKeSuJlf8Q8uTcsb/ -----END CERTIFICATE-----Generated at Mon Jun 30 11:09:33 2025 by rpki-client