$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa File: 645b07f9-416b-3a45-abac-a1788c7a9e98.roa (raw, json) Hash identifier: TxVlio/7a5y960OVqRZqmhY5ve2KfRdxxt6F4XIIu4Q= Subject key identifier: 78:86:9E:15:9A:E8:95:48:B8:7A:1A:5A:C6:04:70:22:9E:F0:39:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB164AE95BB1F3A91FD9F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa Signing time: Thu 12 Jun 2025 12:42:08 +0000 ROA not before: Thu 12 Jun 2025 12:42:08 +0000 ROA not after: Wed 10 Sep 2025 12:42:08 +0000 asID: 36617 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:64:ae:95:bb:1f:3a:91:fd:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:08 2025 GMT Not After : Sep 10 12:42:08 2025 GMT Subject: CN=a4580786-4785-4914-9d55-0f1d53153395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:12:95:87:06:6f:cc:45:5d:f0:5c:65:73:90: 4f:69:60:55:32:5d:8f:a1:df:c7:5b:ae:ea:f0:39: c6:69:ff:e2:82:b9:57:1e:7d:cd:08:81:1a:5e:0b: dc:1c:1c:1b:50:6c:f3:63:f3:04:2b:0d:f9:2e:94: 87:cc:b1:10:a2:6f:67:08:03:9a:43:34:7a:a2:2f: 26:55:36:3d:b6:b2:4b:a0:93:83:a9:2b:60:a8:3d: 76:de:d6:2d:b7:d3:fd:fe:d1:3c:7e:52:90:d4:14: f7:ee:ae:62:f9:29:cb:74:64:e4:85:ff:7a:33:18: c4:8e:f7:8f:0f:fd:aa:fe:2c:b5:d4:a5:99:21:68: fc:26:a2:22:1d:c8:1a:37:8a:eb:dc:13:48:fa:fd: a0:87:f6:14:b3:2c:b4:d9:48:a9:ac:8a:cb:26:08: 36:fd:40:c4:cf:4a:30:a2:a5:2e:b9:69:dc:60:59: c2:a1:51:89:23:5e:9e:18:98:d5:23:1a:ea:1a:a3: f8:cd:95:4e:1a:f5:dc:c9:fe:a3:f9:39:fe:3e:ae: 14:92:f6:ab:00:f9:e5:3d:1a:b5:5b:1e:77:45:f7: cf:d4:89:76:2b:0d:71:3b:9c:3a:77:59:41:e7:93: 6e:e8:b9:81:fb:e6:41:98:29:df:5d:a2:f2:96:cc: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:86:9E:15:9A:E8:95:48:B8:7A:1A:5A:C6:04:70:22:9E:F0:39:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:9c:36:e0:a0:5d:72:90:db:69:77:4a:40:30:ea:49:71:72: d6:d8:cf:71:17:81:91:dc:0c:83:ed:3c:b3:bd:c5:de:15:1a: 55:d2:3f:fc:50:af:6d:63:68:ad:e6:6b:7e:bb:64:94:9f:d3: 1e:9f:ac:09:4f:f1:ad:66:da:a8:fa:9c:1e:67:26:d9:a4:9a: b5:f7:26:16:b2:bc:6a:32:ff:cc:42:d9:01:2b:5f:69:c3:32: b8:42:ae:7e:5d:95:93:e0:7f:df:7f:61:da:da:03:de:8c:39: f5:5a:65:98:fa:c6:fe:08:00:be:f8:5b:62:26:5b:77:7a:65: 66:9f:82:b5:4e:39:d9:08:0b:cf:00:04:7a:6e:c3:c7:0d:e1: 2d:0d:d0:8a:90:0d:a6:4a:9d:32:0b:9d:38:5d:01:ec:0b:3c: 00:dd:a5:7b:5d:89:c8:c3:85:cb:35:99:04:4a:96:9f:40:82: 80:13:2b:fa:ae:fd:c8:24:ed:38:c3:56:8f:ec:fd:40:95:cd: d8:87:ef:97:2c:6c:09:86:90:43:11:df:9c:f7:54:3a:e9:6e: df:01:cd:28:35:4f:b5:d8:7c:1d:12:91:9c:2b:cf:cd:f0:ac: 05:02:ae:c0:b1:e2:c2:03:ee:db:5d:2d:7b:f6:ba:6c:da:38: ae:60:a6:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWSulbsfOpH9nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwOFoXDTI1MDkxMDEyNDIwOFowLzEtMCsGA1UEAxMk YTQ1ODA3ODYtNDc4NS00OTE0LTlkNTUtMGYxZDUzMTUzMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxKVhwZvzEVd8Fxlc5BPaWBVMl2Pod/HW67q 8DnGaf/igrlXHn3NCIEaXgvcHBwbUGzzY/MEKw35LpSHzLEQom9nCAOaQzR6oi8m VTY9trJLoJODqStgqD123tYtt9P9/tE8flKQ1BT37q5i+SnLdGTkhf96MxjEjveP D/2q/iy11KWZIWj8JqIiHcgaN4rr3BNI+v2gh/YUsyy02UiprIrLJgg2/UDEz0ow oqUuuWncYFnCoVGJI16eGJjVIxrqGqP4zZVOGvXcyf6j+Tn+Pq4UkvarAPnlPRq1 Wx53RffP1Il2Kw1xO5w6d1lB55Nu6LmB++ZBmCnfXaLylsw9BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHiGnhWa6JVIuHoaWsYEcCKe8DloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ1YjA3ZjktNDE2Yi0z YTQ1LWFiYWMtYTE3ODhjN2E5ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEOcNuCgXXKQ22l3SkAw6klxctbYz3EXgZHcDIPtPLO9xd4VGlXS P/xQr21jaK3ma367ZJSf0x6frAlP8a1m2qj6nB5nJtmkmrX3JhayvGoy/8xC2QEr X2nDMrhCrn5dlZPgf99/YdraA96MOfVaZZj6xv4IAL74W2ImW3d6ZWafgrVOOdkI C88ABHpuw8cN4S0N0IqQDaZKnTILnThdAewLPADdpXtdicjDhcs1mQRKlp9AgoAT K/qu/cgk7TjDVo/s/UCVzdiH75csbAmGkEMR35z3VDrpbt8BzSg1T7XYfB0SkZwr z83wrAUCrsCx4sID7ttdLXv2umzaOK5gpiE= -----END CERTIFICATE-----Generated at Mon Jun 30 18:13:17 2025 by rpki-client