$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa File: 852947b5-d299-3a43-8987-66a2c6a604b1.roa (raw, json) Hash identifier: 98U3okWXe5/xS2IIMH6dtysfqrJCa0POGHMHw8OuAwU= Subject key identifier: 8C:05:88:9C:40:82:92:2C:F8:32:50:AF:15:86:3E:60:9F:70:40:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4F05E5812F731E14E139DE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 397199 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e5:81:2f:73:1e:14:e1:39:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=28430cee-b7c3-49ee-ab52-865d0f3f9ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:2e:76:92:57:67:64:89:5a:8f:fc:7a:8e: fd:50:91:3b:93:d2:57:46:41:7a:e4:00:a4:56:26: 92:27:20:76:15:54:a9:19:35:b1:d9:cd:40:ad:87: 46:1e:1f:5d:67:90:7e:b7:98:d6:df:26:eb:97:c2: 70:3f:8d:83:18:e1:f0:50:05:e1:cb:69:cf:8c:5f: 0e:63:d4:22:18:a1:dd:a9:4c:b3:5d:da:69:a3:33: 2a:8f:0d:39:c2:7d:e7:f8:96:bc:cf:c7:87:b2:4e: ca:a4:8f:71:a5:f1:5e:50:63:16:4d:97:af:ff:64: 40:ec:80:cc:3d:55:3c:ac:a1:81:38:f5:fe:62:8c: a1:ce:76:5d:b5:c6:89:54:b1:21:e6:47:a4:5f:87: 95:f0:1d:f6:28:9d:5c:59:47:3d:92:4c:e8:e6:a5: 4b:f5:64:b1:a8:eb:5f:ec:8e:35:bb:4f:19:7a:90: 89:0b:77:90:e2:f9:17:d2:d6:19:17:1b:b7:86:10: 28:58:11:b2:51:b3:97:fc:54:6b:01:01:ab:4f:5a: fc:d7:bc:e1:b6:fb:d1:44:54:bf:dd:70:76:b6:da: 80:8e:29:d7:02:67:1d:b9:b2:ce:91:71:cb:9f:14: f8:eb:b1:dd:be:cc:a9:1e:8e:1e:83:26:af:56:0c: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:05:88:9C:40:82:92:2C:F8:32:50:AF:15:86:3E:60:9F:70:40:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b7:50:00:b4:4e:bb:8c:a9:60:ab:d6:09:e7:10:e7:5c:28: dc:e8:bc:ab:48:a8:e4:11:d3:3e:27:cd:59:50:ee:df:0b:50: 65:5f:4b:71:2c:44:d9:f6:f8:fc:2d:32:32:64:16:44:a5:09: c5:16:0f:58:42:51:ee:df:32:bd:e2:ce:2f:65:aa:71:97:61: 00:56:85:46:29:cc:94:46:54:ef:a0:74:0b:fc:c5:0b:60:d4: a0:cf:d4:dd:a7:49:dc:cd:41:81:c1:39:2f:31:db:35:d4:72: e3:bf:ff:fc:02:75:c8:fe:3f:8f:b9:a5:5d:a6:23:69:fb:45: 6a:fa:a5:b9:bd:c9:61:f9:b9:56:0e:40:63:bf:a5:29:4e:3a: 0e:3c:77:a8:df:22:f1:b0:d7:eb:5a:ea:fd:fd:2a:ef:23:f1: b4:a8:5b:6e:6f:0a:d6:f5:7b:60:2a:da:78:83:fd:7a:77:0f: 46:3e:66:ad:02:9f:ea:58:b4:b3:bc:ca:1e:85:38:69:e9:8c: 26:89:2a:b5:e4:27:db:6b:30:58:5e:ed:a6:f9:5e:b2:a8:d8: 2f:b5:d8:47:57:e5:6a:9a:8a:be:1a:ba:75:27:49:fc:b6:d1: f1:80:d0:7d:ce:0c:cf:33:aa:15:d3:2f:2b:25:c0:30:5d:6f: a8:94:10:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpPBeWBL3MeFOE53oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk Mjg0MzBjZWUtYjdjMy00OWVlLWFiNTItODY1ZDBmM2Y5YWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJsudpJXZ2SJWo/8eo79UJE7k9JXRkF65ACk ViaSJyB2FVSpGTWx2c1ArYdGHh9dZ5B+t5jW3ybrl8JwP42DGOHwUAXhy2nPjF8O Y9QiGKHdqUyzXdppozMqjw05wn3n+Ja8z8eHsk7KpI9xpfFeUGMWTZev/2RA7IDM PVU8rKGBOPX+YoyhznZdtcaJVLEh5kekX4eV8B32KJ1cWUc9kkzo5qVL9WSxqOtf 7I41u08ZepCJC3eQ4vkX0tYZFxu3hhAoWBGyUbOX/FRrAQGrT1r817zhtvvRRFS/ 3XB2ttqAjinXAmcdubLOkXHLnxT467HdvsypHo4egyavVgxh5QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIwFiJxAgpIs+DJQrxWGPmCfcEC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODUyOTQ3YjUtZDI5OS0z YTQzLTg5ODctNjZhMmM2YTYwNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAit1AAtE67jKlgq9YJ5xDnXCjc6LyrSKjkEdM+ J81ZUO7fC1BlX0txLETZ9vj8LTIyZBZEpQnFFg9YQlHu3zK94s4vZapxl2EAVoVG KcyURlTvoHQL/MULYNSgz9Tdp0nczUGBwTkvMds11HLjv//8AnXI/j+PuaVdpiNp +0Vq+qW5vclh+blWDkBjv6UpTjoOPHeo3yLxsNfrWur9/SrvI/G0qFtubwrW9Xtg Ktp4g/16dw9GPmatAp/qWLSzvMoehThp6YwmiSq15CfbazBYXu2m+V6yqNgvtdhH V+Vqmoq+Grp1J0n8ttHxgNB9zgzPM6oV0y8rJcAwXW+olBAz -----END CERTIFICATE-----Generated at Tue Jul 1 06:34:10 2025 by rpki-client