$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5de6c5-523f-3081-9399-00c00a8ad566.roa File: 4a5de6c5-523f-3081-9399-00c00a8ad566.roa (raw, json) Hash identifier: GLq7v3E7SSEGEn+ZlFk23FJ+qhhrAtR3aS5j73O5Om0= Subject key identifier: 8E:4C:DC:14:76:62:A1:2C:F5:C0:EF:0D:E4:6C:46:78:CF:83:52:D7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4F05BA4DC5B6A9A049C01F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5de6c5-523f-3081-9399-00c00a8ad566.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 396562 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:ba:4d:c5:b6:a9:a0:49:c0:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=b89c5030-8391-4cec-90e7-8cfa2ef25567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:59:48:11:02:c6:76:43:fa:f6:a2:de:ca:f4: c9:47:c8:c5:be:5a:47:81:2d:aa:32:01:90:17:b0: 02:6c:41:9d:1f:a5:72:94:1a:5e:f6:04:0e:58:50: 09:be:2f:67:7a:0b:16:62:27:f1:29:aa:77:f0:56: 59:35:69:d3:b7:38:fb:2b:0e:65:af:be:28:4e:42: b5:d8:07:9e:ff:ca:c4:09:b6:0e:f4:63:3a:f2:a2: 7a:ee:11:f8:a7:08:d0:73:f3:93:8e:d1:11:b8:e7: cd:9c:f7:7d:7c:f9:c3:71:1c:31:89:68:65:2c:84: 05:a5:a1:d9:d2:ae:63:17:41:39:28:31:90:da:da: 21:b8:e8:d6:e6:28:f2:30:31:6a:72:3b:e6:29:2d: 3a:2a:88:56:95:0a:dd:8d:ce:6a:d4:d0:d8:ae:44: c6:6c:1c:00:b4:65:94:26:07:d5:75:e5:76:93:01: ae:1a:96:b1:94:2c:9c:18:91:21:54:c4:57:2a:27: d6:48:de:3a:88:80:83:db:5d:bd:03:7b:7f:8d:be: 5e:5b:31:41:e1:e4:b2:72:05:04:b2:09:a7:71:63: ec:60:cf:28:1d:01:ff:f9:3b:34:cf:73:9e:66:1a: f6:07:50:14:4c:df:db:d0:cd:98:bd:7c:63:1f:65: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4C:DC:14:76:62:A1:2C:F5:C0:EF:0D:E4:6C:46:78:CF:83:52:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5de6c5-523f-3081-9399-00c00a8ad566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:f5:95:c8:a7:b9:d5:e4:05:0d:90:9b:6d:32:2f:dd:e4:1e: 5e:52:52:75:0d:4f:a1:1a:63:23:69:71:41:dd:81:89:1d:dc: 39:b1:34:1c:b5:e7:12:5b:07:6b:e0:88:17:ec:97:fd:f1:b8: e2:d2:24:d5:50:23:1a:6e:4d:de:aa:1a:cd:62:e9:48:b9:22: 2a:d3:ee:c9:2a:c8:8a:03:b1:7d:56:c4:53:34:fd:2e:8f:e1: 2d:86:6d:3e:84:2b:cb:6e:af:52:4a:d8:aa:d1:0d:b5:ae:30: 51:4f:a2:19:e2:0b:9c:f5:61:76:05:1e:f3:59:41:22:e8:1c: 40:b8:f1:ef:ca:c8:37:7a:7a:e1:97:ca:a5:78:9b:57:a8:5f: ff:81:b7:a6:96:c0:42:2c:87:f2:6e:8d:27:57:15:14:2d:78: 53:9e:4f:d6:4a:09:16:ee:00:8d:c3:f9:7b:6a:a7:e3:74:15: 16:10:96:84:4d:37:38:6f:da:e2:27:a9:cc:c2:2c:8c:82:47: c4:a0:84:5e:07:ad:7c:3e:f6:79:98:2f:78:33:aa:75:01:ce: c0:37:76:84:52:bd:7f:03:55:8d:a0:ba:56:bd:82:59:60:2e: a0:7e:64:c0:8a:cc:11:36:2e:6d:17:3c:a2:25:ef:b4:8a:11: 62:54:6b:0f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpPBbpNxbapoEnAHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk Yjg5YzUwMzAtODM5MS00Y2VjLTkwZTctOGNmYTJlZjI1NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApllIEQLGdkP69qLeyvTJR8jFvlpHgS2qMgGQ F7ACbEGdH6VylBpe9gQOWFAJvi9negsWYifxKap38FZZNWnTtzj7Kw5lr74oTkK1 2Aee/8rECbYO9GM68qJ67hH4pwjQc/OTjtERuOfNnPd9fPnDcRwxiWhlLIQFpaHZ 0q5jF0E5KDGQ2tohuOjW5ijyMDFqcjvmKS06KohWlQrdjc5q1NDYrkTGbBwAtGWU JgfVdeV2kwGuGpaxlCycGJEhVMRXKifWSN46iICD2129A3t/jb5eWzFB4eSycgUE sgmncWPsYM8oHQH/+Ts0z3OeZhr2B1AUTN/b0M2YvXxjH2XpJQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI5M3BR2YqEs9cDvDeRsRnjPg1LXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGE1ZGU2YzUtNTIzZi0z MDgxLTkzOTktMDBjMDBhOGFkNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC89ZXIp7nV5AUNkJttMi/d5B5eUlJ1DU+hGmMj aXFB3YGJHdw5sTQctecSWwdr4IgX7Jf98bji0iTVUCMabk3eqhrNYulIuSIq0+7J KsiKA7F9VsRTNP0uj+Ethm0+hCvLbq9SStiq0Q21rjBRT6IZ4guc9WF2BR7zWUEi 6BxAuPHvysg3enrhl8qleJtXqF//gbemlsBCLIfybo0nVxUULXhTnk/WSgkW7gCN w/l7aqfjdBUWEJaETTc4b9riJ6nMwiyMgkfEoIReB618PvZ5mC94M6p1Ac7AN3aE Ur1/A1WNoLpWvYJZYC6gfmTAiswRNi5tFzyiJe+0ihFiVGsP -----END CERTIFICATE-----Generated at Mon Jun 30 18:38:29 2025 by rpki-client