$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/851c0678-a48c-3ece-b2ce-39e1514d099e.roa File: 851c0678-a48c-3ece-b2ce-39e1514d099e.roa (raw, json) Hash identifier: BcvBRrjRaBhMj0gaFhmULw8UUDEdW92eItL0IJnXKig= Subject key identifier: 18:FF:25:3C:47:DD:F1:F7:AA:3E:0A:F4:E8:42:FA:6A:4E:6E:40:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB163B163D089A73A7CE328 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/851c0678-a48c-3ece-b2ce-39e1514d099e.roa Signing time: Thu 12 Jun 2025 12:42:08 +0000 ROA not before: Thu 12 Jun 2025 12:42:08 +0000 ROA not after: Wed 10 Sep 2025 12:42:08 +0000 asID: 397205 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:63:b1:63:d0:89:a7:3a:7c:e3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:08 2025 GMT Not After : Sep 10 12:42:08 2025 GMT Subject: CN=58777ec5-dcea-47c7-ac20-7e7e9c4d1b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:dd:11:b1:3f:19:aa:79:7b:05:a2:56:52: 47:1d:dd:40:0a:19:19:23:c7:cc:98:f7:ba:17:e6: 71:21:91:cf:75:ff:74:25:fd:bb:85:7a:9b:d5:d7: 55:c1:12:5f:81:77:db:40:b4:6f:9a:d1:10:33:87: db:46:d4:0a:9c:cb:1d:56:fb:48:fe:9c:50:18:ae: 7c:28:9d:61:53:22:c8:8e:c8:fd:3f:3f:ad:5c:4b: e8:82:6d:69:47:40:27:11:15:08:07:82:94:b4:3f: 6c:6a:11:ec:7e:7b:c2:46:0b:00:d3:bc:cf:87:06: e9:6f:dc:23:a5:93:11:5b:dd:0c:c5:bf:4c:14:cc: 63:41:86:1f:d5:df:54:57:b8:5c:e6:44:36:99:f6: 32:91:40:ee:ee:48:bc:61:13:58:13:3c:a2:d7:ef: cd:e4:59:62:59:ec:84:76:ce:68:73:a7:45:81:d9: 2e:fd:c2:de:45:e0:7d:ee:bf:99:5e:4e:16:0c:64: 7b:79:c8:70:af:cc:84:1c:32:c3:82:91:5d:60:a2: 32:61:17:f0:34:20:88:93:71:4d:73:b3:52:94:42: 0c:24:9a:30:28:3a:0f:58:9f:23:4e:8e:00:51:51: 2f:03:49:9f:18:64:e9:db:7d:38:85:41:1b:5d:22: 9f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FF:25:3C:47:DD:F1:F7:AA:3E:0A:F4:E8:42:FA:6A:4E:6E:40:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/851c0678-a48c-3ece-b2ce-39e1514d099e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:2c:6e:42:ac:e4:c8:ad:52:69:bc:39:73:dd:8f:03:4d:b7: 17:c2:5f:70:b1:2f:28:34:50:45:51:5f:0e:20:2c:19:b5:a8: 2d:69:dc:52:21:9a:ba:95:2f:a0:1a:d7:20:89:17:6c:13:42: 83:cd:d8:6b:2d:44:6d:34:c5:3d:3c:a1:a5:86:56:41:09:54: 49:f2:b0:e5:59:a3:fa:3c:d8:f1:b2:00:d5:32:9a:a7:dd:78: 29:fc:30:b3:6f:30:76:ca:d8:99:60:3d:2a:09:bd:66:fd:c5: e6:a7:d2:43:6f:a6:3c:63:09:2c:c4:31:ff:fd:fb:c0:f3:79: 91:57:f1:b8:0d:03:52:14:65:56:87:91:9a:e6:ea:b0:49:d8: 21:f0:e3:46:d0:a9:80:d5:ac:e6:7c:61:ed:52:cc:28:a3:8e: 5f:06:d7:c2:8f:55:83:57:7b:2e:4a:05:af:d9:40:50:5f:5c: 90:fb:b5:0e:0a:0d:a4:cc:04:b8:cc:37:80:46:94:12:31:23: 95:40:c9:a0:3a:3c:4e:3f:d5:60:79:73:3a:59:79:4b:61:cb: 81:79:37:75:48:67:f2:3e:08:dc:b9:32:56:d7:62:2a:60:62: b3:74:ab:64:33:d0:9b:7e:00:2c:72:a8:d7:72:3b:f1:b8:f4: 5c:75:0b:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWOxY9CJpzp84ygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwOFoXDTI1MDkxMDEyNDIwOFowLzEtMCsGA1UEAxMk NTg3NzdlYzUtZGNlYS00N2M3LWFjMjAtN2U3ZTljNGQxYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua/dEbE/Gap5ewWiVlJHHd1AChkZI8fMmPe6 F+ZxIZHPdf90Jf27hXqb1ddVwRJfgXfbQLRvmtEQM4fbRtQKnMsdVvtI/pxQGK58 KJ1hUyLIjsj9Pz+tXEvogm1pR0AnERUIB4KUtD9sahHsfnvCRgsA07zPhwbpb9wj pZMRW90Mxb9MFMxjQYYf1d9UV7hc5kQ2mfYykUDu7ki8YRNYEzyi1+/N5FliWeyE ds5oc6dFgdku/cLeReB97r+ZXk4WDGR7echwr8yEHDLDgpFdYKIyYRfwNCCIk3FN c7NSlEIMJJowKDoPWJ8jTo4AUVEvA0mfGGTp2304hUEbXSKfyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBj/JTxH3fH3qj4K9OhC+mpObkCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODUxYzA2NzgtYTQ4Yy0z ZWNlLWIyY2UtMzllMTUxNGQwOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKwsbkKs5MitUmm8OXPdjwNNtxfCX3CxLyg0UEVRXw4gLBm1qC1p 3FIhmrqVL6Aa1yCJF2wTQoPN2GstRG00xT08oaWGVkEJVEnysOVZo/o82PGyANUy mqfdeCn8MLNvMHbK2JlgPSoJvWb9xean0kNvpjxjCSzEMf/9+8DzeZFX8bgNA1IU ZVaHkZrm6rBJ2CHw40bQqYDVrOZ8Ye1SzCijjl8G18KPVYNXey5KBa/ZQFBfXJD7 tQ4KDaTMBLjMN4BGlBIxI5VAyaA6PE4/1WB5czpZeUthy4F5N3VIZ/I+CNy5MlbX YipgYrN0q2Qz0Jt+ACxyqNdyO/G49Fx1C70= -----END CERTIFICATE-----Generated at Mon Jun 30 10:35:57 2025 by rpki-client