$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa File: 38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa (raw, json) Hash identifier: 4glK7wG/BvSv+1MQ4Op0KI97nbv5CVkcMWtG2vZ4wsw= Subject key identifier: 91:FA:C9:03:6B:14:39:CC:19:1F:3D:39:FF:85:B9:7C:78:CB:A9:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB16817E7BE7E64DA4B1600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa Signing time: Thu 12 Jun 2025 12:42:10 +0000 ROA not before: Thu 12 Jun 2025 12:42:10 +0000 ROA not after: Wed 10 Sep 2025 12:42:10 +0000 asID: 396582 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:68:17:e7:be:7e:64:da:4b:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:10 2025 GMT Not After : Sep 10 12:42:10 2025 GMT Subject: CN=86e5e420-9f1a-4f9d-9d50-89597ab2d628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:18:55:c6:45:1e:5e:f6:70:1c:09:ef:91: c0:ea:da:71:57:6c:ba:18:c8:af:d5:ff:15:f3:b8: 9e:82:60:14:3d:65:4a:95:03:bd:9b:cc:00:a8:64: 6c:12:73:9c:78:98:f8:ff:13:2c:bb:ae:6c:ff:50: b4:17:0b:af:8d:23:62:e3:91:56:5c:bd:4f:e2:ae: 6a:9c:62:fd:68:f5:91:28:ff:32:97:bf:9b:a8:bd: bf:60:92:98:80:b5:b3:24:a5:c7:0c:5f:a8:5d:aa: 1c:97:b6:da:03:8b:18:73:56:7c:37:6d:41:bb:6f: 40:48:69:cc:c2:19:ce:6b:d5:2e:85:78:63:0e:f1: 68:a2:a0:14:44:96:1b:79:a3:ec:1d:a2:ea:36:94: a5:64:c3:27:84:c3:14:9d:d7:86:4b:97:23:75:9e: 30:fb:a9:56:39:54:d7:ed:2f:ce:b8:0f:ef:49:07: ed:f6:5f:1b:2c:a8:ea:53:71:6b:e8:39:c8:4c:c5: 7a:7e:8c:9c:07:cb:6a:78:ba:24:a3:74:a3:a5:85: 25:d0:17:9e:ee:8f:4f:17:7d:66:27:d4:15:40:6f: 2e:4d:c5:19:d7:0e:e7:48:4b:d6:de:37:ca:09:65: cc:62:0c:01:e9:d3:2e:2e:d9:db:78:0f:92:6a:84: 87:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FA:C9:03:6B:14:39:CC:19:1F:3D:39:FF:85:B9:7C:78:CB:A9:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:be:79:af:7a:60:09:1d:09:ae:2f:45:f1:e0:ff:d6:cd:61: 0f:59:37:58:d9:4c:bb:88:3d:68:0f:93:5e:5c:1a:40:bd:e1: 4b:59:51:41:54:87:f0:48:2a:43:04:4e:17:b7:31:f6:91:91: 6e:ad:9d:98:4d:0b:db:d4:04:b3:8c:4d:07:78:22:7a:3f:5d: 9b:c5:0c:b6:4d:1f:6b:f9:c7:aa:43:34:82:6e:ca:82:1a:89: 0b:11:90:49:82:58:50:51:8b:4b:ef:2b:ce:27:1a:26:08:5c: 34:c1:45:6a:78:2a:3b:78:ad:c2:7f:2e:29:fb:fb:bf:ce:7f: 46:13:cf:b2:d4:99:3b:87:e0:b3:25:48:6f:51:1f:37:00:29: 67:3d:17:7d:3d:91:7e:e0:f1:c7:d6:84:fe:f9:1d:54:19:7f: 0a:42:d6:44:e5:24:d4:43:48:7c:30:c5:93:62:a9:7a:ff:c2: af:03:29:ce:7a:53:42:e9:74:5a:14:5b:5f:e4:e2:b7:fd:fc: 7d:3c:22:74:4e:da:e8:9b:82:62:f0:78:ec:b5:9c:27:01:55: 9b:7f:0c:98:e4:0d:a7:12:70:e0:a4:bd:c3:fc:5e:63:77:51: 1a:4f:f8:99:89:32:f6:81:e8:6a:3b:2f:25:f8:4c:12:c2:b1: 99:a0:2a:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWgX575+ZNpLFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIxMFoXDTI1MDkxMDEyNDIxMFowLzEtMCsGA1UEAxMk ODZlNWU0MjAtOWYxYS00ZjlkLTlkNTAtODk1OTdhYjJkNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vUYVcZFHl72cBwJ75HA6tpxV2y6GMiv1f8V 87iegmAUPWVKlQO9m8wAqGRsEnOceJj4/xMsu65s/1C0FwuvjSNi45FWXL1P4q5q nGL9aPWRKP8yl7+bqL2/YJKYgLWzJKXHDF+oXaocl7baA4sYc1Z8N21Bu29ASGnM whnOa9UuhXhjDvFooqAURJYbeaPsHaLqNpSlZMMnhMMUndeGS5cjdZ4w+6lWOVTX 7S/OuA/vSQft9l8bLKjqU3Fr6DnITMV6foycB8tqeLoko3SjpYUl0Bee7o9PF31m J9QVQG8uTcUZ1w7nSEvW3jfKCWXMYgwB6dMuLtnbeA+SaoSHUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJH6yQNrFDnMGR89Of+FuXx4y6kfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgxNzNhYjktZWFlYi0z YjAyLWI0MWMtZmJhYmRlYWE0OGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADS+ea96YAkdCa4vRfHg/9bNYQ9ZN1jZTLuIPWgPk15cGkC94UtZ UUFUh/BIKkMEThe3MfaRkW6tnZhNC9vUBLOMTQd4Ino/XZvFDLZNH2v5x6pDNIJu yoIaiQsRkEmCWFBRi0vvK84nGiYIXDTBRWp4Kjt4rcJ/Lin7+7/Of0YTz7LUmTuH 4LMlSG9RHzcAKWc9F309kX7g8cfWhP75HVQZfwpC1kTlJNRDSHwwxZNiqXr/wq8D Kc56U0LpdFoUW1/k4rf9/H08InRO2uibgmLweOy1nCcBVZt/DJjkDacScOCkvcP8 XmN3URpP+JmJMvaB6Go7LyX4TBLCsZmgKvA= -----END CERTIFICATE-----Generated at Mon Jun 16 05:26:07 2025 by rpki-client