$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2404bca1-330b-3d86-81e6-f933f047d2c0.roa File: 2404bca1-330b-3d86-81e6-f933f047d2c0.roa (raw, json) Hash identifier: y3it11nRHDmpLbIZ29MgyTjlcheiyCTwVfts+xo1D2Y= Subject key identifier: 6C:5A:34:B2:A8:2D:45:E8:B6:F6:85:9D:4F:16:14:70:FA:EE:CC:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB16B8D227B908AFC41E860 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2404bca1-330b-3d86-81e6-f933f047d2c0.roa Signing time: Thu 12 Jun 2025 12:42:12 +0000 ROA not before: Thu 12 Jun 2025 12:42:12 +0000 ROA not after: Wed 10 Sep 2025 12:42:12 +0000 asID: 396612 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:6b:8d:22:7b:90:8a:fc:41:e8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:12 2025 GMT Not After : Sep 10 12:42:12 2025 GMT Subject: CN=b5d100ac-6dc3-4728-a3ca-cb4c761c9fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:59:a2:47:ae:ef:b5:cd:2b:44:94:82:b1: d1:e1:e5:32:06:ab:f8:55:1f:48:8c:6e:c2:55:27: 70:29:cc:8a:7b:a4:4b:e5:7c:56:c3:89:3c:33:6a: 2d:0d:c0:82:aa:80:57:cd:87:eb:0b:3f:d9:83:a3: 82:b5:66:4e:74:7d:ab:85:04:b8:2b:7f:9d:c8:0c: 0b:be:ab:38:c8:f8:89:c4:9e:cb:6b:8d:a6:ed:76: 27:32:e1:ab:49:60:01:48:e2:66:60:78:73:16:e3: 0f:42:75:fb:83:ac:ed:28:52:95:26:65:c1:d8:34: 5e:98:3a:d6:08:14:65:fd:8a:1f:3b:6f:c0:fa:49: 67:15:2b:79:4b:ce:f1:11:07:7d:dd:b5:bf:7e:cf: ce:b8:ac:25:43:b7:fe:29:5a:c7:1e:29:c1:f3:5a: f3:8c:83:e4:7b:c4:a2:b2:c4:ca:7c:d6:fd:e7:9a: df:29:42:5c:e8:92:2c:07:6a:92:03:b0:0f:97:c8: 50:93:0f:84:26:e9:87:9e:e2:35:b9:b9:ec:70:e4: 83:3f:01:c3:21:6b:b3:df:76:84:23:95:a6:9f:19: cb:98:13:aa:7b:2b:18:70:c0:ba:57:e6:50:3a:8d: a3:11:3d:25:ca:de:36:65:7c:4d:22:50:e4:be:2e: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5A:34:B2:A8:2D:45:E8:B6:F6:85:9D:4F:16:14:70:FA:EE:CC:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2404bca1-330b-3d86-81e6-f933f047d2c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:9e:e5:f9:f7:e0:ef:8b:5b:e3:f3:31:ec:07:94:ad:25:eb: 8d:69:de:1c:d3:dc:b3:33:0a:4b:9b:ef:39:97:42:88:ad:1c: 15:e3:fd:92:29:bb:4b:ef:d5:bc:97:9d:69:5a:0b:3c:07:a3: 48:9a:08:a6:c5:a6:d9:0f:2b:95:85:d1:dc:15:1d:c0:7e:14: 79:db:cb:58:24:0b:85:34:42:0b:6b:8d:ac:ca:4d:bc:c2:ca: a1:fd:fd:9d:e2:9c:72:cc:14:e3:b8:41:42:cd:94:79:21:aa: 27:81:e0:2f:8d:f2:89:86:7c:4a:ba:bd:41:11:10:1d:17:51: 78:c4:d8:ce:c0:09:7a:ee:85:d5:be:b6:69:f3:61:99:d1:51: 83:b9:07:2c:c4:0d:f4:66:38:d9:31:f1:87:9b:2b:14:f5:be: ec:53:1c:d1:09:a6:60:f0:df:fb:f7:cf:1e:39:15:f1:27:0d: c5:31:ea:75:51:71:99:44:eb:56:44:41:19:23:3f:03:24:10: 2f:79:3b:d4:ab:7b:ca:16:0a:4c:09:5a:e6:bd:88:0a:72:21: d7:40:b8:99:28:bd:96:26:27:ad:6a:e5:e1:85:59:f4:3f:c7: cc:4e:70:9a:ce:8e:61:ba:d3:c0:12:a8:b5:89:11:85:3f:da: df:bf:69:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWuNInuQivxB6GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIxMloXDTI1MDkxMDEyNDIxMlowLzEtMCsGA1UEAxMk YjVkMTAwYWMtNmRjMy00NzI4LWEzY2EtY2I0Yzc2MWM5ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3NZokeu77XNK0SUgrHR4eUyBqv4VR9IjG7C VSdwKcyKe6RL5XxWw4k8M2otDcCCqoBXzYfrCz/Zg6OCtWZOdH2rhQS4K3+dyAwL vqs4yPiJxJ7La42m7XYnMuGrSWABSOJmYHhzFuMPQnX7g6ztKFKVJmXB2DRemDrW CBRl/YofO2/A+klnFSt5S87xEQd93bW/fs/OuKwlQ7f+KVrHHinB81rzjIPke8Si ssTKfNb955rfKUJc6JIsB2qSA7APl8hQkw+EJumHnuI1ubnscOSDPwHDIWuz33aE I5WmnxnLmBOqeysYcMC6V+ZQOo2jET0lyt42ZXxNIlDkvi4vMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGxaNLKoLUXotvaFnU8WFHD67sz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQwNGJjYTEtMzMwYi0z ZDg2LTgxZTYtZjkzM2YwNDdkMmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALGe5fn34O+LW+PzMewHlK0l641p3hzT3LMzCkub7zmXQoitHBXj /ZIpu0vv1byXnWlaCzwHo0iaCKbFptkPK5WF0dwVHcB+FHnby1gkC4U0QgtrjazK TbzCyqH9/Z3inHLMFOO4QULNlHkhqieB4C+N8omGfEq6vUEREB0XUXjE2M7ACXru hdW+tmnzYZnRUYO5ByzEDfRmONkx8YebKxT1vuxTHNEJpmDw3/v3zx45FfEnDcUx 6nVRcZlE61ZEQRkjPwMkEC95O9Sre8oWCkwJWua9iApyIddAuJkovZYmJ61q5eGF WfQ/x8xOcJrOjmG608ASqLWJEYU/2t+/aQE= -----END CERTIFICATE-----Generated at Mon Jun 16 04:00:10 2025 by rpki-client