$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5fa858b-4c27-3e51-b910-a63fc26b41e4.roa File: e5fa858b-4c27-3e51-b910-a63fc26b41e4.roa (raw, json) Hash identifier: Aas16cn42lDb3dBU6Ai4XJ0NLNw+N56Bkz38Z5TLNpI= Subject key identifier: 6B:A5:E1:9B:CA:0B:FC:64:51:20:5E:33:28:04:A7:83:06:48:C0:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB160503B65BED4208A5F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5fa858b-4c27-3e51-b910-a63fc26b41e4.roa Signing time: Thu 12 Jun 2025 12:42:06 +0000 ROA not before: Thu 12 Jun 2025 12:42:06 +0000 ROA not after: Wed 10 Sep 2025 12:42:06 +0000 asID: 36629 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:60:50:3b:65:be:d4:20:8a:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:06 2025 GMT Not After : Sep 10 12:42:06 2025 GMT Subject: CN=81436831-58fc-4c3c-af26-4d17a60852b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:8d:a1:ee:58:44:d4:fd:22:6b:36:f3:e3: fd:6d:0d:88:51:74:04:73:bf:9f:24:44:30:89:5b: d1:8f:e7:76:a8:25:dd:45:03:77:6e:15:00:40:3f: f5:84:97:9d:0f:3a:d0:9f:70:5a:86:f8:7b:7b:90: 7e:5d:b3:1e:a9:af:23:79:a2:d4:07:91:0f:a7:aa: eb:a5:34:aa:a2:9f:5a:87:9e:bf:72:fe:de:0a:37: df:e1:bf:22:42:10:a6:10:aa:fa:0e:67:48:52:45: e7:b1:32:5a:d5:0b:68:e0:8a:00:2d:5a:1d:97:f6: d8:70:b0:9e:51:bc:41:eb:d6:40:f7:80:04:82:24: 0f:64:54:19:4c:41:87:7e:58:09:81:3b:0b:ea:c7: b6:9c:33:5b:73:51:30:47:0e:1f:27:59:bb:b7:32: 2d:b7:06:fe:20:83:c6:64:b7:e6:d2:79:5a:bf:d5: d7:c9:7c:31:21:52:2b:77:0a:69:11:63:f4:38:21: c0:98:fc:c2:d6:77:2a:14:5c:c8:9b:f8:83:8b:94: 92:bb:46:08:ae:7a:2e:2c:f2:0f:33:0d:f4:80:7f: 69:98:d3:df:61:54:87:80:cf:53:c3:11:54:c2:49: 29:5f:33:bf:70:2a:cd:20:b6:54:2a:13:39:ba:9d: ed:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A5:E1:9B:CA:0B:FC:64:51:20:5E:33:28:04:A7:83:06:48:C0:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5fa858b-4c27-3e51-b910-a63fc26b41e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:95:09:b8:41:ed:27:90:95:f4:42:be:0e:96:c4:f1:a0:7e: e3:f6:eb:dd:79:6a:70:c7:04:65:65:c3:1d:c7:c7:7a:b3:f0: 6d:80:94:f0:44:6d:5d:b1:b2:f9:0d:58:64:11:a7:bc:34:43: f0:c2:ba:86:63:2f:bd:91:ef:c6:c6:e6:5d:62:04:ed:77:6d: 50:97:c6:02:cb:a2:21:fc:72:4f:c4:0c:b8:ca:64:eb:ef:94: a6:b1:3a:de:ff:0d:6a:2b:a6:3e:e7:bb:75:49:ff:ff:b5:3e: d6:6e:4d:2f:cd:1c:0f:9b:19:4a:58:5f:14:0f:12:ea:a5:83: d2:96:78:2b:5e:95:1e:57:1a:cf:f1:d5:94:56:c7:cf:b7:7c: 20:10:43:aa:6f:38:16:ec:cf:35:2a:65:23:df:11:97:53:33: 70:c9:c0:35:fa:fa:d9:df:ae:e0:40:82:78:bc:c6:a9:a4:91: a3:5d:27:96:dc:5c:30:16:04:a2:95:89:b1:1b:b2:9e:f3:cf: 88:c1:5b:0b:9c:1e:0f:43:13:53:5e:c3:2e:19:a6:32:bc:ca: 6e:84:93:56:a6:94:46:07:0d:30:bc:1c:95:e0:1a:71:64:0f: 98:3d:5a:52:6c:d2:61:46:29:c9:8e:d5:79:c0:06:80:c6:f4: fa:7c:17:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWBQO2W+1CCKX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwNloXDTI1MDkxMDEyNDIwNlowLzEtMCsGA1UEAxMk ODE0MzY4MzEtNThmYy00YzNjLWFmMjYtNGQxN2E2MDg1MmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5CNoe5YRNT9Ims28+P9bQ2IUXQEc7+fJEQw iVvRj+d2qCXdRQN3bhUAQD/1hJedDzrQn3Bahvh7e5B+XbMeqa8jeaLUB5EPp6rr pTSqop9ah56/cv7eCjff4b8iQhCmEKr6DmdIUkXnsTJa1Qto4IoALVodl/bYcLCe UbxB69ZA94AEgiQPZFQZTEGHflgJgTsL6se2nDNbc1EwRw4fJ1m7tzIttwb+IIPG ZLfm0nlav9XXyXwxIVIrdwppEWP0OCHAmPzC1ncqFFzIm/iDi5SSu0YIrnouLPIP Mw30gH9pmNPfYVSHgM9TwxFUwkkpXzO/cCrNILZUKhM5up3tJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGul4ZvKC/xkUSBeMygEp4MGSMDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTVmYTg1OGItNGMyNy0z ZTUxLWI5MTAtYTYzZmMyNmI0MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFyVCbhB7SeQlfRCvg6WxPGgfuP26915anDHBGVlwx3Hx3qz8G2A lPBEbV2xsvkNWGQRp7w0Q/DCuoZjL72R78bG5l1iBO13bVCXxgLLoiH8ck/EDLjK ZOvvlKaxOt7/DWorpj7nu3VJ//+1PtZuTS/NHA+bGUpYXxQPEuqlg9KWeCtelR5X Gs/x1ZRWx8+3fCAQQ6pvOBbszzUqZSPfEZdTM3DJwDX6+tnfruBAgni8xqmkkaNd J5bcXDAWBKKVibEbsp7zz4jBWwucHg9DE1Newy4ZpjK8ym6Ek1amlEYHDTC8HJXg GnFkD5g9WlJs0mFGKcmO1XnABoDG9Pp8F1I= -----END CERTIFICATE-----Generated at Mon Jun 30 10:57:06 2025 by rpki-client