$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f6bfe5d-8ad8-3533-98b8-319aa90aa643.roa File: 7f6bfe5d-8ad8-3533-98b8-319aa90aa643.roa (raw, json) Hash identifier: CyfTL1EGhGnLOhqU7+1qB/oCXQkRDj0A5Ez4Bgtv3Go= Subject key identifier: 90:FD:4F:9E:44:3F:8C:CA:91:53:8A:30:29:A1:D4:D4:31:2A:49:C1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB15CD2457BB1F4CE054A10 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f6bfe5d-8ad8-3533-98b8-319aa90aa643.roa Signing time: Thu 12 Jun 2025 12:42:05 +0000 ROA not before: Thu 12 Jun 2025 12:42:05 +0000 ROA not after: Wed 10 Sep 2025 12:42:05 +0000 asID: 396602 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:5c:d2:45:7b:b1:f4:ce:05:4a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:05 2025 GMT Not After : Sep 10 12:42:05 2025 GMT Subject: CN=6a1fac76-adb6-464e-80e8-81d73e647a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:71:56:1a:bf:bd:a5:31:4c:f5:02:c4:b4:8b: 26:6f:98:52:b5:51:6e:e0:13:50:a8:0b:5b:bd:44: 2f:fc:d7:da:3d:65:be:88:fe:22:a5:5d:47:99:e0: bc:c2:aa:20:4c:d4:eb:28:a1:ca:8e:59:56:8c:b2: 00:6e:c1:9d:c8:d2:5e:c9:96:e8:0c:b9:5d:e1:9a: f0:85:f2:50:fb:d0:c4:1b:4f:ce:81:78:0c:bf:be: 76:64:32:3b:80:3d:33:3d:8e:be:ae:fc:43:77:03: 72:a6:ee:32:60:e3:83:ad:62:46:00:ab:9d:b6:7b: 8c:44:af:96:c7:00:7c:34:01:55:3a:8f:90:a5:41: ff:7c:9b:0e:d1:47:18:a6:67:b2:dc:cc:e3:1d:bc: ab:61:22:c1:d0:f5:a4:5d:1f:f1:47:5f:c7:63:62: fa:fb:68:df:5e:7b:ac:54:a3:3e:16:0b:85:b0:86: 2a:60:6c:b3:dd:11:c9:24:f3:b0:7f:7c:1a:40:0a: 5b:85:4c:e0:bd:89:7a:fa:60:65:3b:3f:c2:52:42: d6:8b:e8:5c:b9:0f:55:20:91:f1:15:88:0f:ea:62: 2a:07:74:09:14:eb:ca:04:58:64:7e:ef:c4:af:13: f3:ac:f1:9d:67:f6:cd:1d:06:9a:7b:e4:6c:e8:a2: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FD:4F:9E:44:3F:8C:CA:91:53:8A:30:29:A1:D4:D4:31:2A:49:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f6bfe5d-8ad8-3533-98b8-319aa90aa643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:63:2a:8d:37:73:98:38:4c:eb:ca:ae:80:57:df:0b:34:ed: 35:55:15:bd:6d:c6:7c:1e:87:dc:22:fe:ba:41:47:fd:90:01: 2e:ae:8b:06:6e:9f:c0:82:b9:9f:0b:0c:35:93:81:33:2e:74: ef:ac:32:1e:b8:13:31:75:34:e1:a8:89:48:24:c8:a7:3c:d0: 24:b8:35:24:2e:e6:49:41:12:20:bf:7d:91:38:67:dd:f9:e3: 58:13:a0:85:95:bd:5b:4c:9b:e0:95:ed:b7:a2:7d:b3:30:dc: 4f:f5:5b:10:21:33:a4:b8:94:f3:34:25:8f:e9:3a:e8:8e:2d: b7:8d:d4:1d:13:4f:fb:00:1c:a9:da:12:b5:88:ce:ed:47:ac: c3:5c:2f:6e:89:cd:2f:e3:68:38:4a:fc:60:37:e6:6d:cb:01: 74:e9:7b:be:fd:a8:71:1a:78:a0:c7:8d:dd:b3:96:f9:be:eb: 3f:3b:89:a0:ca:e0:d8:7f:6e:aa:eb:e2:c1:5b:b5:32:c2:5f: d9:55:11:f7:d2:48:78:e8:62:00:94:08:d6:f9:52:9f:ad:d4: 34:98:18:f2:84:27:b9:29:bb:ff:29:9c:41:2a:b2:9c:0d:df: d2:7a:86:4a:66:66:7e:41:f1:fb:fe:5b:3d:2c:88:b8:49:b3: 0c:b5:21:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsVzSRXux9M4FShAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwNVoXDTI1MDkxMDEyNDIwNVowLzEtMCsGA1UEAxMk NmExZmFjNzYtYWRiNi00NjRlLTgwZTgtODFkNzNlNjQ3YTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHFWGr+9pTFM9QLEtIsmb5hStVFu4BNQqAtb vUQv/NfaPWW+iP4ipV1HmeC8wqogTNTrKKHKjllWjLIAbsGdyNJeyZboDLld4Zrw hfJQ+9DEG0/OgXgMv752ZDI7gD0zPY6+rvxDdwNypu4yYOODrWJGAKudtnuMRK+W xwB8NAFVOo+QpUH/fJsO0UcYpmey3MzjHbyrYSLB0PWkXR/xR1/HY2L6+2jfXnus VKM+FguFsIYqYGyz3RHJJPOwf3waQApbhUzgvYl6+mBlOz/CUkLWi+hcuQ9VIJHx FYgP6mIqB3QJFOvKBFhkfu/ErxPzrPGdZ/bNHQaae+Rs6KKOoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJD9T55EP4zKkVOKMCmh1NQxKknBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2Y2YmZlNWQtOGFkOC0z NTMzLTk4YjgtMzE5YWE5MGFhNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABxjKo03c5g4TOvKroBX3ws07TVVFb1txnweh9wi/rpBR/2QAS6u iwZun8CCuZ8LDDWTgTMudO+sMh64EzF1NOGoiUgkyKc80CS4NSQu5klBEiC/fZE4 Z93541gToIWVvVtMm+CV7beifbMw3E/1WxAhM6S4lPM0JY/pOuiOLbeN1B0TT/sA HKnaErWIzu1HrMNcL26JzS/jaDhK/GA35m3LAXTpe779qHEaeKDHjd2zlvm+6z87 iaDK4Nh/bqrr4sFbtTLCX9lVEffSSHjoYgCUCNb5Up+t1DSYGPKEJ7kpu/8pnEEq spwN39J6hkpmZn5B8fv+Wz0siLhJswy1IUU= -----END CERTIFICATE-----Generated at Tue Jul 1 08:03:58 2025 by rpki-client