$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98b1a606-ab1a-3c9c-9d9a-7c3b6a45f42d.roa File: 98b1a606-ab1a-3c9c-9d9a-7c3b6a45f42d.roa (raw, json) Hash identifier: Ghdwd8ssjtBB1agqSYw7pnMtM4g5jmOZ7SmZsqXN8r0= Subject key identifier: 59:BA:56:31:C9:24:8E:4E:06:81:9F:45:78:81:57:F3:EF:3D:1F:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4F05CAD56C9081FF7B26E580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98b1a606-ab1a-3c9c-9d9a-7c3b6a45f42d.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 397207 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:ca:d5:6c:90:81:ff:7b:26:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=3a9ad715-d260-4c2a-9dde-8755ea22e09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:df:e4:3d:32:0d:ff:c0:21:1b:c4:28:24:b3: 2c:aa:38:51:a9:52:50:2b:f1:dd:0a:32:29:7f:ee: cf:8e:6e:17:81:3d:57:d5:ae:bd:8f:2b:9a:d4:34: ec:00:b7:26:45:8c:98:c2:59:fe:25:96:7e:9a:f0: d3:cb:ad:eb:5a:c8:f8:dc:fe:dc:67:59:33:9e:c8: 67:3f:6b:aa:ec:e4:f5:83:02:96:c5:8d:5d:b0:cc: 95:76:1c:c9:e4:f4:89:8e:2a:d8:d9:8d:7d:58:9e: 16:ff:6f:f6:c2:da:21:5f:2e:62:8b:2d:a0:a7:30: 32:0a:ca:4d:25:11:73:93:99:d0:8e:65:b5:55:44: e8:a5:aa:9a:21:59:c2:b4:7b:12:07:36:6f:91:bb: b8:4a:2c:41:fc:25:f0:0d:a3:0d:61:cd:a3:74:9e: 20:4c:88:7d:cd:89:46:4c:ce:8a:e9:98:8e:e6:d3: 92:7e:e3:0e:c8:1d:09:67:25:c9:37:b5:13:3b:44: 61:67:6f:2a:14:16:08:93:9e:6d:c6:bd:1d:94:4c: 65:35:c7:16:78:c6:1d:72:a0:4b:ba:fb:cb:38:47: 3f:90:77:32:a2:8c:97:46:71:10:70:9b:bb:bc:b3: bb:d9:3c:16:db:26:e4:e8:1c:00:fd:8f:9a:04:a3: c8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BA:56:31:C9:24:8E:4E:06:81:9F:45:78:81:57:F3:EF:3D:1F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98b1a606-ab1a-3c9c-9d9a-7c3b6a45f42d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:8f:3a:59:3d:50:ab:a1:ba:1f:43:da:00:6d:2e:01:32:a7: 78:e8:8d:3a:32:d5:9d:0f:f6:dd:68:dd:c8:32:54:7d:34:c5: 12:f1:cd:d1:59:e5:b7:bf:21:75:37:a5:7b:3d:0a:27:08:62: d8:dc:c3:de:bd:2a:b9:9a:67:6b:7f:2b:d4:b4:c0:f2:6f:a9: 5b:48:78:2c:28:6b:8f:b9:c3:c3:3c:6b:a5:b6:1e:f7:7c:82: 58:e1:c1:55:ea:df:70:6b:cf:3d:7e:95:ed:3d:d8:a7:38:26: 84:e1:4d:ce:be:9b:0e:ec:62:19:5d:0a:f9:da:7b:31:a6:22: c7:3d:fb:cc:ad:cd:ec:de:75:fa:4d:76:79:ce:08:8d:77:0c: 2c:21:5a:30:13:84:a6:28:57:d7:dc:8f:12:8d:c3:c6:a6:3a: f3:0f:24:83:03:1a:6a:a7:63:d3:82:7f:c9:78:9c:c2:23:a4: 10:ba:cd:83:7c:88:2e:d3:5e:63:05:8c:9b:1c:a7:4f:03:1b: fe:48:e8:26:6d:66:87:e8:c0:55:6c:f5:ec:27:50:fe:20:c4: 1b:6b:ba:2d:25:97:9a:95:50:2c:2c:0a:cd:25:3d:2c:5e:8a: 6a:86:53:97:57:e0:c2:b4:08:44:6d:db:b9:ca:f4:f1:36:d2: db:e6:81:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpPBcrVbJCB/3sm5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk M2E5YWQ3MTUtZDI2MC00YzJhLTlkZGUtODc1NWVhMjJlMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9/kPTIN/8AhG8QoJLMsqjhRqVJQK/HdCjIp f+7Pjm4XgT1X1a69jyua1DTsALcmRYyYwln+JZZ+mvDTy63rWsj43P7cZ1kznshn P2uq7OT1gwKWxY1dsMyVdhzJ5PSJjirY2Y19WJ4W/2/2wtohXy5iiy2gpzAyCspN JRFzk5nQjmW1VUTopaqaIVnCtHsSBzZvkbu4SixB/CXwDaMNYc2jdJ4gTIh9zYlG TM6K6ZiO5tOSfuMOyB0JZyXJN7UTO0RhZ28qFBYIk55txr0dlExlNccWeMYdcqBL uvvLOEc/kHcyooyXRnEQcJu7vLO72TwW2ybk6BwA/Y+aBKPIEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFm6VjHJJI5OBoGfRXiBV/PvPR/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOThiMWE2MDYtYWIxYS0z YzljLTlkOWEtN2MzYjZhNDVmNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCsjzpZPVCrobofQ9oAbS4BMqd46I06MtWdD/bd aN3IMlR9NMUS8c3RWeW3vyF1N6V7PQonCGLY3MPevSq5mmdrfyvUtMDyb6lbSHgs KGuPucPDPGulth73fIJY4cFV6t9wa889fpXtPdinOCaE4U3OvpsO7GIZXQr52nsx piLHPfvMrc3s3nX6TXZ5zgiNdwwsIVowE4SmKFfX3I8SjcPGpjrzDySDAxpqp2PT gn/JeJzCI6QQus2DfIgu015jBYybHKdPAxv+SOgmbWaH6MBVbPXsJ1D+IMQba7ot JZealVAsLArNJT0sXopqhlOXV+DCtAhEbdu5yvTxNtLb5oEV -----END CERTIFICATE-----Generated at Mon Jun 30 13:40:49 2025 by rpki-client