$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a411552-773f-38c8-abd9-423ef19c1e77.roa File: 3a411552-773f-38c8-abd9-423ef19c1e77.roa (raw, json) Hash identifier: gILZE1LXtJsaLKiInQ95raHLGZUn7MbrDQ4d5BFLEUI= Subject key identifier: 97:EF:8E:11:AD:68:4D:B8:CA:CB:63:AE:6A:73:14:F4:D9:62:B1:C7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB160E2127000494CF66600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a411552-773f-38c8-abd9-423ef19c1e77.roa Signing time: Thu 12 Jun 2025 12:42:07 +0000 ROA not before: Thu 12 Jun 2025 12:42:07 +0000 ROA not after: Wed 10 Sep 2025 12:42:07 +0000 asID: 396591 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:60:e2:12:70:00:49:4c:f6:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:07 2025 GMT Not After : Sep 10 12:42:07 2025 GMT Subject: CN=db798ff6-e19f-474b-8f85-5b7444e5bbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3e:26:ec:4c:34:9c:b7:c1:55:c7:0e:86:21: 77:b6:ea:58:8f:1a:e4:23:77:df:f2:55:8d:1d:98: 8e:6c:23:9c:67:2d:30:d7:e3:a0:f6:13:84:0a:7a: e4:70:9d:46:fb:27:68:24:2e:a2:26:62:b3:2a:de: 2d:1e:5b:ac:5c:0c:c6:f7:9f:27:25:27:75:6e:f4: f5:f5:0d:dc:35:e0:59:f7:88:82:47:fe:4b:92:91: 72:2f:e8:85:49:6a:22:9c:30:47:a8:e5:7e:8d:c2: af:e5:a0:7e:66:11:6b:10:59:31:3a:f3:29:68:e6: fb:96:cb:5e:cd:45:17:71:eb:b4:60:1c:1c:50:9e: 56:a0:cf:d8:c5:56:71:ad:9c:33:d5:44:2d:17:24: 3d:42:8c:ec:71:c1:8d:8b:80:a1:10:81:a6:ec:42: 77:c4:f2:a7:cb:72:20:a4:ce:b4:8a:ff:47:a3:ba: b0:07:f0:a2:2b:78:0c:65:1e:4b:d0:53:96:a9:4c: 65:e3:49:94:9c:6d:9f:bc:fb:d0:a3:ef:e6:bf:07: 96:25:c8:fa:11:c2:f0:2f:e1:94:e4:6f:64:48:b6: c3:39:88:71:11:20:f1:56:3b:4e:ea:a8:7d:09:84: 70:0c:d0:65:4d:a8:d2:7f:dc:b1:14:45:1f:c6:9f: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EF:8E:11:AD:68:4D:B8:CA:CB:63:AE:6A:73:14:F4:D9:62:B1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a411552-773f-38c8-abd9-423ef19c1e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:aa:c1:0b:83:74:c4:26:2d:01:ed:a8:2d:65:ff:59:d0:18: 6c:f5:2d:da:2e:1a:f2:9d:63:7f:4e:95:2d:4b:c2:4d:ab:84: 26:4d:04:b6:85:00:3a:44:fd:26:4b:ba:93:0d:cc:4d:99:c6: 34:99:ae:80:46:d2:e7:13:77:58:e2:1a:69:d4:51:81:32:2a: 5f:62:9e:16:86:5a:21:b5:9d:16:69:5e:a9:48:bd:9f:9c:f9: db:69:2f:e0:75:50:17:cc:16:54:7b:58:c7:7a:5a:c5:00:ff: 2d:8a:7a:61:1d:75:a7:01:45:a6:b7:90:cc:cc:00:10:9c:13: 7c:78:05:bf:37:54:bc:37:d6:be:82:98:b2:e4:61:9d:7a:8b: 5b:a4:fc:90:65:75:30:6b:be:1c:a8:ef:28:a5:8d:b7:e1:fa: b2:d1:d3:ab:21:36:73:80:94:cb:8e:1b:40:35:68:e3:f0:5b: 4d:3d:8f:9d:57:4a:7e:71:5d:dc:88:56:36:ce:2b:30:38:75: 9f:77:b0:24:08:6c:77:ad:e9:a7:d1:8c:0a:1e:6f:23:0e:94: cc:64:19:f5:80:ab:25:8b:38:04:74:c3:07:81:82:18:09:24: d9:8f:c4:1a:8c:14:85:85:5c:9f:d1:b3:03:64:d3:ac:0b:02: 13:c5:12:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWDiEnAASUz2ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwN1oXDTI1MDkxMDEyNDIwN1owLzEtMCsGA1UEAxMk ZGI3OThmZjYtZTE5Zi00NzRiLThmODUtNWI3NDQ0ZTViYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT4m7Ew0nLfBVccOhiF3tupYjxrkI3ff8lWN HZiObCOcZy0w1+Og9hOECnrkcJ1G+ydoJC6iJmKzKt4tHlusXAzG958nJSd1bvT1 9Q3cNeBZ94iCR/5LkpFyL+iFSWoinDBHqOV+jcKv5aB+ZhFrEFkxOvMpaOb7lste zUUXceu0YBwcUJ5WoM/YxVZxrZwz1UQtFyQ9QozsccGNi4ChEIGm7EJ3xPKny3Ig pM60iv9Ho7qwB/CiK3gMZR5L0FOWqUxl40mUnG2fvPvQo+/mvweWJcj6EcLwL+GU 5G9kSLbDOYhxESDxVjtO6qh9CYRwDNBlTajSf9yxFEUfxp8aNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJfvjhGtaE24ystjrmpzFPTZYrHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E0MTE1NTItNzczZi0z OGM4LWFiZDktNDIzZWYxOWMxZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAyqwQuDdMQmLQHtqC1l/1nQGGz1LdouGvKdY39OlS1Lwk2rhCZN BLaFADpE/SZLupMNzE2ZxjSZroBG0ucTd1jiGmnUUYEyKl9inhaGWiG1nRZpXqlI vZ+c+dtpL+B1UBfMFlR7WMd6WsUA/y2KemEddacBRaa3kMzMABCcE3x4Bb83VLw3 1r6CmLLkYZ16i1uk/JBldTBrvhyo7yiljbfh+rLR06shNnOAlMuOG0A1aOPwW009 j51XSn5xXdyIVjbOKzA4dZ93sCQIbHet6afRjAoebyMOlMxkGfWAqyWLOAR0wweB ghgJJNmPxBqMFIWFXJ/RswNk06wLAhPFEng= -----END CERTIFICATE-----Generated at Mon Jun 16 13:12:21 2025 by rpki-client