$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/128e9646-cdf1-3d0e-8049-37a4c61c3b2c.roa File: 128e9646-cdf1-3d0e-8049-37a4c61c3b2c.roa (raw, json) Hash identifier: +fZfr+Xf5N5Oee8v1sd+sQe+0q7ERXq7AHxCy0FPILo= Subject key identifier: 64:67:ED:80:41:FF:13:B6:76:61:5B:7D:E9:08:2C:95:FB:37:38:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB167A7205AD745D36B8340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/128e9646-cdf1-3d0e-8049-37a4c61c3b2c.roa Signing time: Thu 12 Jun 2025 12:42:10 +0000 ROA not before: Thu 12 Jun 2025 12:42:10 +0000 ROA not after: Wed 10 Sep 2025 12:42:10 +0000 asID: 396595 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:67:a7:20:5a:d7:45:d3:6b:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:10 2025 GMT Not After : Sep 10 12:42:10 2025 GMT Subject: CN=400ae1c2-e1d7-4b3f-9c1a-8186457d5172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6f:6f:da:df:3b:2e:ce:dc:8c:b3:d1:ff:7e: 81:70:52:cf:e5:bf:43:72:9a:1d:39:0e:30:8c:7f: 5f:b9:d0:4a:8e:6b:ea:e7:d3:f9:95:1d:40:6c:24: e5:49:e0:18:8e:2d:55:b3:2c:79:4b:3b:be:ba:fa: 6e:17:de:c1:bd:84:10:ee:44:ed:e2:3e:56:55:2d: 60:c3:05:e6:7d:e9:c0:cd:13:e4:68:ae:0a:05:26: 3f:be:ae:ea:fb:0d:53:c6:45:75:bb:24:67:3a:14: 0d:fb:b8:8f:7c:0e:3f:c0:db:fc:9b:1c:87:91:fb: 52:24:04:15:e3:a8:20:2b:5d:45:c2:91:d0:97:06: e0:22:92:bb:14:c4:ec:03:df:4b:35:4b:b3:87:31: a8:d1:2f:a7:73:3d:73:a6:4b:91:77:ca:e7:e4:68: 02:9a:2b:3c:df:f7:11:2c:ed:da:77:b8:77:05:85: f5:d4:31:ad:9c:1b:1a:a2:92:f3:64:d7:96:3d:e6: 6e:68:10:13:41:5d:8c:03:a4:db:d2:33:d4:09:36: 03:f3:7b:3b:c6:2c:77:5e:3a:7f:16:ca:c7:4f:3f: a1:63:c9:cc:cf:a9:a1:3e:8d:5e:c1:0c:0a:3c:4b: f7:9f:ca:81:28:15:2e:84:c0:ab:75:ef:81:95:52: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:ED:80:41:FF:13:B6:76:61:5B:7D:E9:08:2C:95:FB:37:38:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/128e9646-cdf1-3d0e-8049-37a4c61c3b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f4:8b:39:f8:2c:21:c9:9f:e2:42:36:39:61:cd:1c:4d:3a: ef:7b:ee:89:6f:df:a2:2a:79:d6:02:5f:5c:48:b2:ff:e1:e1: 14:78:2f:1f:e9:8f:8e:66:70:81:a0:77:fc:f4:d4:83:c6:5e: 10:08:94:9d:6a:e8:c7:6c:72:b8:b2:84:4a:eb:a5:9f:52:cf: 54:c5:c8:3d:c5:1e:18:71:fe:e7:d9:91:b2:34:ca:0a:8f:75: 64:d4:53:de:31:33:b4:64:1b:26:be:a3:10:22:f4:e0:90:34: ec:2b:ed:38:f9:f5:8c:6e:f3:32:e2:f0:2a:8e:dd:7f:55:ba: 3e:82:6b:8e:6f:3e:ca:c9:1a:4e:f4:44:b8:0b:4b:6f:17:f3: 34:ac:cb:fa:5b:0b:26:b6:20:6c:51:09:16:1e:9c:50:42:2e: ca:26:58:e5:da:58:8e:49:70:76:45:95:2a:11:39:6a:62:13: fb:23:96:93:11:81:35:00:91:ad:4d:2e:1c:29:5c:a5:b8:86: 8f:e1:1e:d1:20:e3:1f:44:52:14:8c:f2:60:12:90:cd:85:4c: fd:5d:40:e0:f7:c9:8f:21:ad:5c:9c:e4:5c:3b:69:ed:e4:21: ad:40:a0:e2:bc:91:05:15:82:fb:c6:c0:ca:7d:e7:58:d0:b3: 48:ed:ed:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWenIFrXRdNrg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIxMFoXDTI1MDkxMDEyNDIxMFowLzEtMCsGA1UEAxMk NDAwYWUxYzItZTFkNy00YjNmLTljMWEtODE4NjQ1N2Q1MTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj29v2t87Ls7cjLPR/36BcFLP5b9DcpodOQ4w jH9fudBKjmvq59P5lR1AbCTlSeAYji1Vsyx5Szu+uvpuF97BvYQQ7kTt4j5WVS1g wwXmfenAzRPkaK4KBSY/vq7q+w1TxkV1uyRnOhQN+7iPfA4/wNv8mxyHkftSJAQV 46ggK11FwpHQlwbgIpK7FMTsA99LNUuzhzGo0S+ncz1zpkuRd8rn5GgCmis83/cR LO3ad7h3BYX11DGtnBsaopLzZNeWPeZuaBATQV2MA6Tb0jPUCTYD83s7xix3Xjp/ FsrHTz+hY8nMz6mhPo1ewQwKPEv3n8qBKBUuhMCrde+BlVJe/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRn7YBB/xO2dmFbfekILJX7NzhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTI4ZTk2NDYtY2RmMS0z ZDBlLTgwNDktMzdhNGM2MWMzYjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAET0izn4LCHJn+JCNjlhzRxNOu977olv36IqedYCX1xIsv/h4RR4 Lx/pj45mcIGgd/z01IPGXhAIlJ1q6MdscriyhErrpZ9Sz1TFyD3FHhhx/ufZkbI0 ygqPdWTUU94xM7RkGya+oxAi9OCQNOwr7Tj59Yxu8zLi8CqO3X9Vuj6Ca45vPsrJ Gk70RLgLS28X8zSsy/pbCya2IGxRCRYenFBCLsomWOXaWI5JcHZFlSoROWpiE/sj lpMRgTUAka1NLhwpXKW4ho/hHtEg4x9EUhSM8mASkM2FTP1dQOD3yY8hrVyc5Fw7 ae3kIa1AoOK8kQUVgvvGwMp951jQs0jt7X8= -----END CERTIFICATE-----Generated at Mon Jun 16 12:24:43 2025 by rpki-client