$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af8d2d17-7702-34f6-9f15-9f5d9cd8b565.roa File: af8d2d17-7702-34f6-9f15-9f5d9cd8b565.roa (raw, json) Hash identifier: kTWqkcc4Q7bg3ggfCc007GPF1y9OOQX0SbrV/KoU+Ug= Subject key identifier: 96:CD:25:4A:2D:1A:B4:88:BB:BB:9F:E9:04:D7:C0:68:08:36:11:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A4F05CA9F2DCF4D7E71BEEAC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af8d2d17-7702-34f6-9f15-9f5d9cd8b565.roa Signing time: Wed 25 Jun 2025 13:01:04 +0000 ROA not before: Wed 25 Jun 2025 13:01:04 +0000 ROA not after: Tue 23 Sep 2025 13:01:04 +0000 asID: 36617 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4f:05:ca:9f:2d:cf:4d:7e:71:be:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 25 13:01:04 2025 GMT Not After : Sep 23 13:01:04 2025 GMT Subject: CN=35b6db62-dc82-40ea-9566-1e7b3413a95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:b1:4f:49:e1:78:46:1e:44:6b:05:9e:47: b9:9c:72:9d:9c:d0:cb:99:5d:5b:d3:21:33:b6:02: 9a:44:80:e2:90:d0:95:9d:fe:99:77:dd:5e:29:f5: a6:c2:08:be:64:3e:c6:a3:37:e3:1c:20:1e:83:6f: e5:c2:fc:ac:3d:2c:86:f3:40:3e:1b:eb:3b:51:de: 57:ce:b1:40:d2:37:ae:aa:80:95:53:c7:18:d1:75: 3c:b1:c5:a3:35:9a:7c:4b:3d:e1:2e:92:0a:4e:fe: 38:9f:fb:35:c0:f9:dc:bf:a8:2d:53:22:16:c6:e2: ae:16:16:f1:0b:61:30:ed:70:50:73:d1:5f:03:bd: 30:4f:eb:f1:54:1b:50:b9:d4:a4:32:17:30:42:6b: 83:38:49:27:5c:72:5b:7b:49:3c:5f:2b:7f:a3:9d: 6e:01:ce:14:e0:f2:27:17:dd:4a:92:93:66:1c:55: e3:74:b4:41:e6:d3:e3:3f:53:2f:d0:10:38:53:d3: 0d:fd:27:f1:46:81:5b:75:c5:3e:d3:25:f1:9b:94: f0:cf:9e:99:96:cf:51:b3:4a:68:b4:a2:e5:41:de: 32:97:9d:e3:30:39:43:1a:e8:25:84:3e:3e:0e:f7: ab:42:cd:71:da:d4:52:fa:31:10:20:57:79:9b:54: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CD:25:4A:2D:1A:B4:88:BB:BB:9F:E9:04:D7:C0:68:08:36:11:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/af8d2d17-7702-34f6-9f15-9f5d9cd8b565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fb:0b:cc:71:cd:da:f8:b6:e4:5f:c4:5a:ef:64:ca:86:f5: d9:f2:ab:ee:99:a3:81:5e:a8:cb:6d:dc:f4:ef:f3:36:47:dd: 6c:5f:be:2b:60:2a:dd:75:2a:f8:6d:3c:65:65:c1:ca:73:20: 74:19:5d:7f:81:38:11:91:48:0e:86:bd:05:fb:58:76:5d:7d: 7e:6d:5d:7b:cf:62:15:0f:47:44:f0:bf:72:54:60:1d:05:f9: 6e:5a:11:7e:d0:59:12:0b:af:63:f2:79:9b:2f:53:d6:f5:98: ac:20:52:42:ea:11:f9:e7:e6:65:2e:fd:45:cc:93:92:56:d4: c5:38:dc:9b:b3:4e:66:38:d2:52:84:67:4c:26:bc:59:7a:47: 14:4d:c0:20:fb:7a:bc:cc:9e:6d:9a:ef:80:c3:3e:27:7b:0f: b9:ee:3e:52:13:16:57:02:26:b0:6e:9b:a9:3d:b3:93:a7:db: d4:7b:72:55:14:5d:48:89:9e:b7:83:0b:7d:5c:0a:06:f9:3e: 81:c1:73:eb:54:34:0d:a5:cf:ba:4f:32:29:4f:b2:f2:98:10: 80:94:bb:3a:37:d8:c4:e9:c8:03:4e:b9:d9:f3:8d:6c:98:d1: 29:ff:8f:42:7c:90:78:17:b2:46:60:27:65:68:3c:45:ff:01: 9a:17:d1:71 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpPBcqfLc9NfnG+6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk MzViNmRiNjItZGM4Mi00MGVhLTk1NjYtMWU3YjM0MTNhOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGaxT0nheEYeRGsFnke5nHKdnNDLmV1b0yEz tgKaRIDikNCVnf6Zd91eKfWmwgi+ZD7GozfjHCAeg2/lwvysPSyG80A+G+s7Ud5X zrFA0jeuqoCVU8cY0XU8scWjNZp8Sz3hLpIKTv44n/s1wPncv6gtUyIWxuKuFhbx C2Ew7XBQc9FfA70wT+vxVBtQudSkMhcwQmuDOEknXHJbe0k8Xyt/o51uAc4U4PIn F91KkpNmHFXjdLRB5tPjP1Mv0BA4U9MN/SfxRoFbdcU+0yXxm5Twz56Zls9Rs0po tKLlQd4yl53jMDlDGuglhD4+DverQs1x2tRS+jEQIFd5m1RA6wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJbNJUotGrSIu7uf6QTXwGgINhGgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWY4ZDJkMTctNzcwMi0z NGY2LTlmMTUtOWY1ZDljZDhiNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAe+wvMcc3a+LbkX8Ra72TKhvXZ8qvumaOBXqjL bdz07/M2R91sX74rYCrddSr4bTxlZcHKcyB0GV1/gTgRkUgOhr0F+1h2XX1+bV17 z2IVD0dE8L9yVGAdBfluWhF+0FkSC69j8nmbL1PW9ZisIFJC6hH55+ZlLv1FzJOS VtTFONybs05mONJShGdMJrxZekcUTcAg+3q8zJ5tmu+Awz4new+57j5SExZXAiaw bpupPbOTp9vUe3JVFF1IiZ63gwt9XAoG+T6BwXPrVDQNpc+6TzIpT7LymBCAlLs6 N9jE6cgDTrnZ841smNEp/49CfJB4F7JGYCdlaDxF/wGaF9Fx -----END CERTIFICATE-----Generated at Mon Jun 30 10:43:43 2025 by rpki-client