$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88c39e84-cb16-3ed7-9b6e-04955442b19e.roa File: 88c39e84-cb16-3ed7-9b6e-04955442b19e.roa (raw, json) Hash identifier: rFxD+H81WlNsgUDOL/W7vFuDt5sEGQgoAG8mFguNN10= Subject key identifier: 41:09:9A:78:A6:62:35:E4:73:14:87:1E:96:B2:57:6C:94:58:91:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4F05E5390A622E120C7B8E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88c39e84-cb16-3ed7-9b6e-04955442b19e.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 397195 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:e5:39:0a:62:2e:12:0c:7b:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=080b9665-bb1f-4e93-8628-75446d735d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:7d:d2:ec:07:70:dd:1c:fe:c0:c9:88:4a: 0a:8b:e1:a9:15:8c:56:0b:33:39:0a:ef:8f:f3:c7: a8:ef:61:41:ed:10:00:ef:72:c0:18:c6:48:84:e0: a5:f1:6a:8e:37:df:15:9c:21:75:f3:40:45:82:17: 0a:94:5d:e1:8c:6f:8d:1c:89:85:e4:5d:bf:40:8d: 36:c6:84:83:cc:9b:b2:71:11:1c:1b:8d:29:d8:17: 38:40:25:89:4e:7b:2a:8c:97:c1:f9:1b:ee:5f:25: 54:d9:6b:a0:58:a7:89:31:37:d0:b8:bb:45:9e:f6: ca:c9:fa:0e:e5:34:14:2d:a1:97:41:6f:32:d0:23: fd:64:ea:b4:cb:a9:9b:df:5f:29:21:cd:a2:b6:32: fe:13:39:81:5a:1c:95:01:40:13:ea:53:41:dd:b1: 2c:9b:92:52:53:9b:3e:c8:ac:ae:da:21:eb:ec:0d: 1d:ee:7c:bd:2d:23:2d:d7:89:53:02:34:71:51:ba: 94:f5:c7:8b:a6:d9:4a:45:6f:62:30:07:33:f4:20: 69:fe:3c:b8:82:ee:ff:d8:ee:21:fe:1d:cc:b2:ab: 64:48:1f:19:1e:92:39:35:5d:cc:5b:2a:72:1d:b4: db:68:de:90:a2:66:9d:5c:dd:83:38:0d:ee:4c:f0: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:09:9A:78:A6:62:35:E4:73:14:87:1E:96:B2:57:6C:94:58:91:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88c39e84-cb16-3ed7-9b6e-04955442b19e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8f:b6:ec:4b:1c:fb:f8:f3:26:a6:58:4d:22:b6:22:a0:70: a7:73:89:21:9e:10:0b:7d:8e:d1:8b:e1:d3:e2:94:4d:00:c8: 75:6e:af:67:be:02:44:ae:69:9c:da:a1:4f:b6:63:60:01:da: 2a:de:d1:49:5b:ec:d8:9e:fc:c3:d5:67:fb:3a:8e:ab:73:e1: 3b:b1:fc:9d:88:4c:c3:55:3a:e6:7d:2a:82:62:4b:2c:bb:22: 6d:50:c8:4e:46:12:7d:73:99:be:5c:1d:ca:b5:c6:18:74:9f: 27:a8:58:7c:d1:57:a9:aa:58:b6:20:f0:ee:21:a1:b6:d3:58: 1d:f8:db:77:12:3c:04:04:b5:60:8c:61:40:a2:2e:2d:31:1b: ac:8f:d6:28:3a:21:5b:99:d5:40:5c:0a:3b:36:49:96:ef:31: 94:36:c1:1f:6b:cf:61:6c:6d:e5:18:cf:05:7d:a9:27:83:4e: 4a:23:1f:3b:c3:d9:4e:87:b8:b2:23:64:6b:72:a7:0f:2b:32: e9:09:f6:3a:5f:5c:1a:b2:05:3a:dc:5b:b5:73:17:aa:bb:0a: 60:42:ee:7f:40:2b:9e:b0:db:05:b2:2b:82:45:bd:0e:c7:fd: e9:f0:8f:f9:35:b7:7b:18:c3:6e:83:c5:8c:44:df:10:33:79: 8c:11:7c:cf -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpPBeU5CmIuEgx7joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MDgwYjk2NjUtYmIxZi00ZTkzLTg2MjgtNzU0NDZkNzM1ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ190uwHcN0c/sDJiEoKi+GpFYxWCzM5Cu+P 88eo72FB7RAA73LAGMZIhOCl8WqON98VnCF180BFghcKlF3hjG+NHImF5F2/QI02 xoSDzJuycREcG40p2Bc4QCWJTnsqjJfB+RvuXyVU2WugWKeJMTfQuLtFnvbKyfoO 5TQULaGXQW8y0CP9ZOq0y6mb318pIc2itjL+EzmBWhyVAUAT6lNB3bEsm5JSU5s+ yKyu2iHr7A0d7ny9LSMt14lTAjRxUbqU9ceLptlKRW9iMAcz9CBp/jy4gu7/2O4h /h3MsqtkSB8ZHpI5NV3MWypyHbTbaN6QomadXN2DOA3uTPD+rwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEEJmnimYjXkcxSHHpayV2yUWJHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODhjMzllODQtY2IxNi0z ZWQ3LTliNmUtMDQ5NTU0NDJiMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6j7bsSxz7+PMmplhNIrYioHCnc4khnhALfY7R i+HT4pRNAMh1bq9nvgJErmmc2qFPtmNgAdoq3tFJW+zYnvzD1Wf7Oo6rc+E7sfyd iEzDVTrmfSqCYkssuyJtUMhORhJ9c5m+XB3KtcYYdJ8nqFh80Vepqli2IPDuIaG2 01gd+Nt3EjwEBLVgjGFAoi4tMRusj9YoOiFbmdVAXAo7NkmW7zGUNsEfa89hbG3l GM8Ffakng05KIx87w9lOh7iyI2RrcqcPKzLpCfY6X1wasgU63Fu1cxequwpgQu5/ QCuesNsFsiuCRb0Ox/3p8I/5Nbd7GMNug8WMRN8QM3mMEXzP -----END CERTIFICATE-----Generated at Mon Jun 30 11:54:04 2025 by rpki-client