$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa File: 3f88418f-0cbf-3f8a-83bc-29643139b994.roa (raw, json) Hash identifier: whUV+VJazQOxhUiOMHvnkWzZcRivacJxWHJqPdvRC0M= Subject key identifier: CD:2F:A2:ED:88:65:B4:48:1E:67:38:A5:6C:5A:E7:8A:3D:DB:B3:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB15CE5471A9985AE81D000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa Signing time: Thu 12 Jun 2025 12:42:05 +0000 ROA not before: Thu 12 Jun 2025 12:42:05 +0000 ROA not after: Wed 10 Sep 2025 12:42:05 +0000 asID: 396599 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:5c:e5:47:1a:99:85:ae:81:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:05 2025 GMT Not After : Sep 10 12:42:05 2025 GMT Subject: CN=4f66b2e7-b721-43e7-88ee-42caa8cef3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:90:c8:f9:3a:cd:c9:c7:09:4c:0d:4d:22: 2c:89:c0:92:9c:5f:b8:42:0b:1f:0c:4f:c5:b2:20: a2:59:0c:85:93:c9:0b:76:c7:2a:3d:21:34:f1:bd: e2:79:0b:2d:08:50:9c:a9:22:8d:f2:06:09:66:ac: c6:d4:66:d4:ef:8e:2f:5f:4d:fd:82:2a:cf:4d:55: 4d:61:b2:21:39:e8:8f:52:a6:97:0e:a1:da:fd:bd: 3d:a5:15:11:aa:d2:26:66:61:23:8e:99:24:f1:bd: 15:ce:aa:3a:f6:5c:9f:7d:53:78:c8:7a:aa:27:5d: 22:d5:fd:aa:3d:7e:5d:cb:f3:d3:74:d7:60:a7:6f: 67:e5:17:63:1b:43:2c:2d:87:87:27:4f:21:01:34: 6f:af:5d:eb:58:f3:81:36:d6:77:2a:15:ab:ba:b0: 26:7f:ea:a0:1e:97:db:7f:71:fe:dd:56:5d:36:7c: 95:fb:c1:fc:bf:fa:0d:55:4c:e5:30:f7:52:39:10: 15:16:eb:2f:88:3c:55:44:c2:a3:c9:ae:05:7f:02: 20:56:06:52:aa:03:4b:c4:dc:c6:27:43:83:94:f8: ea:ad:b9:7b:6c:34:49:99:a2:dc:15:69:9a:83:ad: 46:4d:e7:6b:93:7c:41:55:65:d7:ef:d3:5e:c6:64: 69:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2F:A2:ED:88:65:B4:48:1E:67:38:A5:6C:5A:E7:8A:3D:DB:B3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f88418f-0cbf-3f8a-83bc-29643139b994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7d:0d:77:6b:f2:70:2e:b3:83:3d:3e:42:0d:1a:39:0e:d9: 58:3c:8b:9c:5c:97:12:61:2b:0d:3a:99:65:a7:0b:3f:0a:2d: bc:be:f5:ac:98:47:88:cf:c1:89:31:e0:bd:13:8d:8d:41:26: 5c:95:a4:75:7c:e0:2c:12:54:af:74:b1:89:dc:42:7a:3b:0e: 23:67:3e:4b:48:9d:97:d8:cc:be:65:70:e5:5a:2d:1c:b4:8a: f7:20:29:5e:44:9c:b8:05:4c:e7:fe:49:93:6d:72:a7:9f:cf: 5f:90:cf:19:ab:da:71:55:c3:4b:df:3a:b0:60:8c:37:45:59: 76:8c:38:db:22:1b:4d:1e:c8:3e:15:05:9a:55:af:f7:6d:95: 6c:a2:c6:20:d4:7f:a2:54:17:83:95:3a:63:2f:d6:49:b1:20: 06:86:0b:84:aa:f2:4e:4b:76:38:b7:c6:30:79:e1:d1:f8:8a: b1:83:53:91:05:36:c1:17:48:ea:53:06:e6:24:b5:d8:ce:6b: cd:f9:25:27:98:9b:ad:94:71:e1:0d:42:da:0d:ad:67:6e:fd: 9e:f0:57:05:5a:0a:9c:61:54:25:6a:ae:ce:ed:97:c1:70:c6: 29:66:80:8b:c4:36:a0:50:40:a4:cd:1d:c0:dc:7e:a2:99:47: c2:66:39:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsVzlRxqZha6B0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwNVoXDTI1MDkxMDEyNDIwNVowLzEtMCsGA1UEAxMk NGY2NmIyZTctYjcyMS00M2U3LTg4ZWUtNDJjYWE4Y2VmM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb+QyPk6zcnHCUwNTSIsicCSnF+4QgsfDE/F siCiWQyFk8kLdscqPSE08b3ieQstCFCcqSKN8gYJZqzG1GbU744vX039girPTVVN YbIhOeiPUqaXDqHa/b09pRURqtImZmEjjpkk8b0Vzqo69lyffVN4yHqqJ10i1f2q PX5dy/PTdNdgp29n5RdjG0MsLYeHJ08hATRvr13rWPOBNtZ3KhWrurAmf+qgHpfb f3H+3VZdNnyV+8H8v/oNVUzlMPdSORAVFusviDxVRMKjya4FfwIgVgZSqgNLxNzG J0ODlPjqrbl7bDRJmaLcFWmag61GTedrk3xBVWXX79NexmRpZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM0vou2IZbRIHmc4pWxa54o927PuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Y4ODQxOGYtMGNiZi0z ZjhhLTgzYmMtMjk2NDMxMzliOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACx9DXdr8nAus4M9PkINGjkO2Vg8i5xclxJhKw06mWWnCz8KLby+ 9ayYR4jPwYkx4L0TjY1BJlyVpHV84CwSVK90sYncQno7DiNnPktInZfYzL5lcOVa LRy0ivcgKV5EnLgFTOf+SZNtcqefz1+Qzxmr2nFVw0vfOrBgjDdFWXaMONsiG00e yD4VBZpVr/dtlWyixiDUf6JUF4OVOmMv1kmxIAaGC4Sq8k5Ldji3xjB54dH4irGD U5EFNsEXSOpTBuYktdjOa835JSeYm62UceENQtoNrWdu/Z7wVwVaCpxhVCVqrs7t l8FwxilmgIvENqBQQKTNHcDcfqKZR8JmOZk= -----END CERTIFICATE-----Generated at Wed Jun 18 03:21:20 2025 by rpki-client