$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa File: c86bea9a-2b90-3624-a5e2-2428810756d4.roa (raw, json) Hash identifier: ZCMWInJAh6wDCTGUBHer/tlWvKKP+DUKTZ9apVVxgKI= Subject key identifier: 39:8B:62:38:01:88:16:A2:6F:4D:E4:93:79:1C:07:15:DB:6A:55:6A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1F90536454C9116BF0170380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 40717 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:53:64:54:c9:11:6b:f0:17:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=afabae26-ac09-4a9a-9a68-82816be4d656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f3:7e:82:34:a1:72:29:42:4f:c7:3c:dd:ee: ea:e4:4c:f4:a0:41:1e:2f:51:9a:57:bf:7e:43:37: 23:6e:86:99:ec:05:11:3e:4b:1e:ca:33:b9:36:e2: d1:8e:a5:f4:ae:e9:c8:16:17:f3:57:a3:42:b3:54: 8d:d5:4e:84:ef:96:b0:47:e3:6e:2e:5f:6f:93:0b: 56:1f:ec:67:c4:e2:77:18:d5:cf:23:56:f4:53:4d: 68:dd:16:3d:94:96:1f:0e:b6:df:24:3a:4f:d3:fc: 3f:93:75:65:3f:88:4b:2b:52:c3:c0:5d:6c:00:3f: 69:19:aa:78:45:9a:0a:b9:a9:99:13:50:bf:94:7b: f3:e1:81:89:e2:2b:29:bf:c5:71:e2:a0:37:16:98: c4:e6:9f:29:4a:cc:fb:7e:13:c2:09:5e:80:42:3d: fa:d8:ac:52:c2:a5:47:dc:98:7e:a3:4a:87:50:ff: 04:5b:eb:29:93:e7:a5:52:a1:ee:13:1b:10:25:76: 5a:b4:9d:09:5a:d4:00:4e:28:37:73:36:be:33:f5: 2e:09:fa:e7:94:17:fe:44:04:2c:c9:3a:29:dd:47: 93:00:b2:87:9a:ea:96:14:34:df:c1:5e:76:52:df: 12:bd:f0:1e:5e:ef:33:3e:20:b2:a7:b6:ac:81:d5: 3d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:62:38:01:88:16:A2:6F:4D:E4:93:79:1C:07:15:DB:6A:55:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c86bea9a-2b90-3624-a5e2-2428810756d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ff:cb:2f:5a:7b:de:a1:af:ff:9b:9d:6a:31:d8:ab:a6:c6: 57:08:a7:8f:e7:a9:09:47:8f:43:d0:a0:be:5f:66:4a:da:f4: 6b:40:c5:03:ed:b8:7a:d5:5b:d2:45:94:45:b5:7e:6e:bf:ba: 24:e9:2b:09:15:bf:02:bb:05:77:d0:06:b4:c1:c7:6b:79:9b: ac:89:12:cd:3e:0e:d8:d5:2b:4d:ab:da:e1:e5:6c:17:e3:61: 80:6e:91:bc:f6:a8:0c:c0:9e:8d:d7:28:51:bf:ac:82:b8:ab: 68:a0:82:9d:2c:95:9c:4b:d5:9d:96:49:a8:4b:ab:b2:33:a4: c8:90:a6:88:63:81:23:92:b2:30:5e:dc:11:59:4f:e6:9b:f1: 23:9f:90:08:26:ad:7d:9f:0e:d7:d5:79:f2:52:91:d2:17:5a: da:9a:02:dd:af:0c:9f:05:f4:1f:28:f6:e3:a5:ed:1f:ab:75: 18:0f:5b:94:ab:28:63:d6:79:f7:94:a8:a8:3d:f2:23:ec:87: a8:ce:36:15:37:da:c0:03:6c:e7:ae:bb:8e:c8:94:a4:cd:a7: 44:ce:54:f2:77:a2:08:68:70:e7:4a:08:75:c3:66:6b:30:d6: 18:59:48:94:de:46:b8:88:ea:81:01:a2:0b:11:ec:12:3a:de: 8a:3d:d2:16 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEofkFNkVMkRa/AXA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk YWZhYmFlMjYtYWMwOS00YTlhLTlhNjgtODI4MTZiZTRkNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPN+gjShcilCT8c83e7q5Ez0oEEeL1GaV79+ QzcjboaZ7AURPkseyjO5NuLRjqX0runIFhfzV6NCs1SN1U6E75awR+NuLl9vkwtW H+xnxOJ3GNXPI1b0U01o3RY9lJYfDrbfJDpP0/w/k3VlP4hLK1LDwF1sAD9pGap4 RZoKuamZE1C/lHvz4YGJ4ispv8Vx4qA3FpjE5p8pSsz7fhPCCV6AQj362KxSwqVH 3Jh+o0qHUP8EW+spk+elUqHuExsQJXZatJ0JWtQATig3cza+M/UuCfrnlBf+RAQs yTop3UeTALKHmuqWFDTfwV52Ut8SvfAeXu8zPiCyp7asgdU9QQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDmLYjgBiBaib03kk3kcBxXbalVqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg2YmVhOWEtMmI5MC0z NjI0LWE1ZTItMjQyODgxMDc1NmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBx/8svWnveoa//m51qMdirpsZXCKeP56kJR49D 0KC+X2ZK2vRrQMUD7bh61VvSRZRFtX5uv7ok6SsJFb8CuwV30Aa0wcdreZusiRLN Pg7Y1StNq9rh5WwX42GAbpG89qgMwJ6N1yhRv6yCuKtooIKdLJWcS9WdlkmoS6uy M6TIkKaIY4EjkrIwXtwRWU/mm/Ejn5AIJq19nw7X1XnyUpHSF1ramgLdrwyfBfQf KPbjpe0fq3UYD1uUqyhj1nn3lKioPfIj7IeozjYVN9rAA2znrruOyJSkzadEzlTy d6IIaHDnSgh1w2ZrMNYYWUiU3ka4iOqBAaILEewSOt6KPdIW -----END CERTIFICATE-----Generated at Tue Jul 1 09:10:10 2025 by rpki-client