$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa File: 289088e7-2494-30b1-ae68-ca383973f1d7.roa (raw, json) Hash identifier: +RKblyYZOD+f0AQSm2eKimhpIqrU2eNPdPA22z/SnoA= Subject key identifier: 03:3B:55:36:6A:8C:DB:AA:32:6A:E2:8B:B8:6D:9B:FB:96:D3:75:86 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A119AC2B4EA35A482CDBCF900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 397197 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c2:b4:ea:35:a4:82:cd:bc:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=2be53a2a-99b9-450c-b9da-5fd315f25deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:a8:d1:18:7d:0e:ce:70:8f:1c:b9:f5:4e: eb:f4:f7:e7:5c:63:22:26:97:71:1e:95:d1:51:e3: cb:e5:89:4f:1f:36:79:00:60:67:c6:69:82:a6:7f: aa:ea:e8:fc:3b:9e:94:92:f6:06:0a:b6:b4:0c:92: bd:91:60:29:b5:31:92:36:9e:09:d3:7e:60:e1:08: 4d:9d:7c:15:00:9d:78:c7:76:da:f1:64:06:02:50: 4e:71:25:67:3c:cb:ee:e5:14:57:3a:8c:80:85:94: 42:a7:d4:06:4b:74:1b:0c:2f:0a:80:4c:fa:b4:e5: 94:a4:a8:e1:a5:bf:bc:ef:d3:e5:d6:49:ee:34:fa: 4b:5a:59:2f:cc:f7:dc:2c:63:13:8e:5a:77:a4:c3: d2:11:37:39:f8:3e:1c:6f:8d:9a:32:56:c8:c9:ec: 63:65:67:19:9a:18:8d:b2:a8:f4:38:d1:14:c6:11: 1b:43:e5:a2:e6:65:6d:59:c9:03:1a:cb:05:3a:b3: d8:0e:e4:79:c8:df:d1:2a:c3:59:9e:ae:e1:18:c4: 34:42:b2:69:f5:0c:dc:31:06:10:69:c6:13:64:f3: 59:09:5f:a7:22:4d:bd:14:80:ca:7d:e9:3b:fd:46: 32:15:de:38:53:ec:57:08:07:2f:17:92:43:11:54: c5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3B:55:36:6A:8C:DB:AA:32:6A:E2:8B:B8:6D:9B:FB:96:D3:75:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/289088e7-2494-30b1-ae68-ca383973f1d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a9:9f:2b:a3:1a:a8:b9:ae:41:85:2b:b5:8c:6c:ed:fb:fd: 70:fb:b8:6b:7b:0c:4b:f6:92:49:13:dc:ba:7c:c0:9d:fe:7a: 45:44:d9:0e:e9:e3:e1:f9:a8:d1:77:ca:41:0d:69:2e:8b:1d: a2:a3:34:6d:b1:a5:43:b4:ea:ea:06:52:09:97:f6:c9:7d:75: da:91:ea:cc:2c:73:9b:e3:1c:ab:aa:00:86:14:f8:4e:46:9e: ad:5a:b9:3f:bc:b8:16:01:5a:4d:e8:fb:0e:46:0d:59:e3:d1: ca:68:2f:88:0b:a3:ba:f3:7e:15:40:80:c5:eb:d8:90:6f:63: 33:59:92:69:3c:52:00:d8:b5:c1:14:83:7a:eb:bb:db:8e:e5: f6:7a:d8:14:d2:94:26:6d:40:85:a7:e1:81:04:6f:e7:ae:b7: 89:f0:8f:4d:18:79:5d:eb:4d:85:2f:61:48:40:25:70:6e:a0: 04:59:0f:3e:87:b7:3f:69:64:48:f0:30:26:6d:f2:4d:21:33: e4:2a:9e:62:c3:2f:77:81:a2:39:8d:8d:01:70:91:ca:73:da: c4:8a:78:65:22:65:ef:5d:37:a5:73:26:4d:ca:3c:7b:17:7b: 38:9d:4b:95:2d:29:b8:16:50:83:09:01:5e:ce:33:5e:c0:fd: 05:11:93:5c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoRmsK06jWkgs28+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MmJlNTNhMmEtOTliOS00NTBjLWI5ZGEtNWZkMzE1ZjI1ZGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovCo0Rh9Ds5wjxy59U7r9PfnXGMiJpdxHpXR UePL5YlPHzZ5AGBnxmmCpn+q6uj8O56UkvYGCra0DJK9kWAptTGSNp4J035g4QhN nXwVAJ14x3ba8WQGAlBOcSVnPMvu5RRXOoyAhZRCp9QGS3QbDC8KgEz6tOWUpKjh pb+879Pl1knuNPpLWlkvzPfcLGMTjlp3pMPSETc5+D4cb42aMlbIyexjZWcZmhiN sqj0ONEUxhEbQ+Wi5mVtWckDGssFOrPYDuR5yN/RKsNZnq7hGMQ0QrJp9QzcMQYQ acYTZPNZCV+nIk29FIDKfek7/UYyFd44U+xXCAcvF5JDEVTFIwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAM7VTZqjNuqMmrii7htm/uW03WGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg5MDg4ZTctMjQ5NC0z MGIxLWFlNjgtY2EzODM5NzNmMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLqZ8roxqoua5BhSu1jGzt+/1w+7hrewxL9pJJ E9y6fMCd/npFRNkO6ePh+ajRd8pBDWkuix2iozRtsaVDtOrqBlIJl/bJfXXakerM LHOb4xyrqgCGFPhORp6tWrk/vLgWAVpN6PsORg1Z49HKaC+IC6O6834VQIDF69iQ b2MzWZJpPFIA2LXBFIN667vbjuX2etgU0pQmbUCFp+GBBG/nrreJ8I9NGHld602F L2FIQCVwbqAEWQ8+h7c/aWRI8DAmbfJNITPkKp5iwy93gaI5jY0BcJHKc9rEinhl ImXvXTelcyZNyjx7F3s4nUuVLSm4FlCDCQFezjNewP0FEZNc -----END CERTIFICATE-----Generated at Mon Jun 16 08:27:40 2025 by rpki-client