$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa File: 4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa (raw, json) Hash identifier: bjbuy+wcp7rZseg0lDHw0bUzX5ZOI8Y6AthvRLcs3N0= Subject key identifier: E5:DC:00:31:22:4C:6B:6B:02:D3:61:6A:09:74:0B:C1:60:3A:38:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1F904ED86D83FFD2790FCD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 396563 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:4e:d8:6d:83:ff:d2:79:0f:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=855b41cd-596b-494b-9791-f3752045d54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:4f:cc:ea:8a:23:5b:2f:70:5c:f0:f6:e8: b9:77:b2:99:0f:9a:32:74:22:04:14:8f:76:53:09: ec:25:a0:80:a1:43:b3:d6:88:13:82:33:82:3f:d7: c6:c3:89:72:df:2e:4d:df:a1:f7:78:dc:ef:62:b6: 13:fd:a4:70:8d:d4:64:4c:87:c1:9b:e8:9c:f0:29: 8e:36:9e:e0:57:a7:ec:d8:67:05:da:26:32:e7:9c: 6a:02:ad:c7:b6:c1:ea:78:25:de:72:f1:e6:e3:52: 7b:64:4d:eb:62:4e:5c:45:e8:6d:92:10:7e:82:56: 1c:52:9e:90:f2:8a:71:9b:a3:dc:ee:a2:ec:51:d0: 6e:2a:0e:49:22:ca:fd:c7:e2:1d:0c:0c:ea:3e:a0: 2a:f0:28:52:d4:be:8a:f5:72:82:aa:02:14:e3:51: 36:7b:bb:9d:b5:18:7a:42:32:d5:67:b0:06:c6:cc: a5:a6:31:f3:b1:40:aa:cf:13:88:ab:0a:22:70:70: 7b:bf:bf:4d:50:06:e9:c1:39:9a:10:37:08:85:15: e2:36:09:6e:e8:16:df:6f:14:ec:71:59:70:11:7b: f5:e1:1f:41:b1:54:d2:fa:ec:32:82:0c:51:f1:9c: d4:4c:9b:ce:ea:a7:58:d7:27:fa:3e:ab:95:0f:4d: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DC:00:31:22:4C:6B:6B:02:D3:61:6A:09:74:0B:C1:60:3A:38:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:6f:60:1c:3a:f7:61:29:66:e9:3e:77:b8:44:57:83:14:0e: 4e:16:82:0f:ed:cb:12:9b:94:c9:8e:0c:53:fd:44:de:0f:ba: 18:75:11:88:29:f2:e2:94:ef:6e:c4:e3:5b:34:5a:5f:62:42: 5e:8a:e2:f7:e6:b6:a9:d6:ee:2f:87:d9:06:c7:d5:b5:69:6f: f9:7f:9c:69:02:97:1d:45:f8:42:9e:b5:f8:01:93:c0:d0:3b: 4d:25:e3:ad:f9:50:14:4c:95:42:da:dd:03:1e:eb:fa:a3:3e: 8d:d1:f5:7c:36:39:a5:8e:ae:14:f5:67:57:e2:ca:2b:1d:48: 24:23:f2:92:f5:d9:a5:fb:4a:7e:39:78:bb:1d:41:9d:90:b8: 77:0e:13:c6:55:fa:3e:2f:73:42:43:58:0b:a5:9f:73:13:56: 9e:a7:4a:c3:fa:86:ea:88:c2:34:a6:eb:7f:95:f1:84:d0:81: 67:0c:b2:0a:5c:78:d8:06:b2:cf:7d:01:ca:c1:a4:eb:df:50: 3e:20:db:91:84:24:67:2e:31:64:26:23:c0:00:e8:5d:83:a3: 98:5f:98:63:d8:4f:34:73:2e:c2:a9:fb:7c:05:1e:f3:f8:d7: 59:a1:66:15:91:26:29:ac:5a:50:39:8b:f9:bc:63:8f:ff:78: 19:b8:80:e1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEofkE7YbYP/0nkPzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk ODU1YjQxY2QtNTk2Yi00OTRiLTk3OTEtZjM3NTIwNDVkNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG1PzOqKI1svcFzw9ui5d7KZD5oydCIEFI92 UwnsJaCAoUOz1ogTgjOCP9fGw4ly3y5N36H3eNzvYrYT/aRwjdRkTIfBm+ic8CmO Np7gV6fs2GcF2iYy55xqAq3HtsHqeCXecvHm41J7ZE3rYk5cRehtkhB+glYcUp6Q 8opxm6Pc7qLsUdBuKg5JIsr9x+IdDAzqPqAq8ChS1L6K9XKCqgIU41E2e7udtRh6 QjLVZ7AGxsylpjHzsUCqzxOIqwoicHB7v79NUAbpwTmaEDcIhRXiNglu6BbfbxTs cVlwEXv14R9BsVTS+uwyggxR8ZzUTJvO6qdY1yf6PquVD02+6QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOXcADEiTGtrAtNhagl0C8FgOjg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGE1ZDA0YTgtN2VmZS0z NTQwLTljMWItZWI1MTc5NTNkMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQClb2AcOvdhKWbpPne4RFeDFA5OFoIP7csSm5TJ jgxT/UTeD7oYdRGIKfLilO9uxONbNFpfYkJeiuL35rap1u4vh9kGx9W1aW/5f5xp ApcdRfhCnrX4AZPA0DtNJeOt+VAUTJVC2t0DHuv6oz6N0fV8Njmljq4U9WdX4sor HUgkI/KS9dml+0p+OXi7HUGdkLh3DhPGVfo+L3NCQ1gLpZ9zE1aep0rD+obqiMI0 put/lfGE0IFnDLIKXHjYBrLPfQHKwaTr31A+INuRhCRnLjFkJiPAAOhdg6OYX5hj 2E80cy7Cqft8BR7z+NdZoWYVkSYprFpQOYv5vGOP/3gZuIDh -----END CERTIFICATE-----Generated at Tue Jul 1 11:03:58 2025 by rpki-client