$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a09d03-0388-382d-ab98-39b1377fba1b.roa File: 48a09d03-0388-382d-ab98-39b1377fba1b.roa (raw, json) Hash identifier: 1CioZYUGXMxLqNnj6oel8pwxkNMN2Irok3mLpgd4TJI= Subject key identifier: DD:8A:6F:35:B8:B0:22:7A:77:02:D2:8C:37:71:C0:D5:95:19:74:F2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB16326A74CD5C40E6F7000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a09d03-0388-382d-ab98-39b1377fba1b.roa Signing time: Thu 12 Jun 2025 12:42:08 +0000 ROA not before: Thu 12 Jun 2025 12:42:08 +0000 ROA not after: Wed 10 Sep 2025 12:42:08 +0000 asID: 27544 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:63:26:a7:4c:d5:c4:0e:6f:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:08 2025 GMT Not After : Sep 10 12:42:08 2025 GMT Subject: CN=c670c31f-c52f-4c0c-9a0d-5e530ee92f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:57:c9:5f:6e:0a:92:d8:44:81:e8:2f:4b:10: a1:8a:e4:21:ff:50:d1:5a:e8:eb:37:f4:48:e7:fa: 43:db:38:10:4f:6b:82:ce:13:95:98:2a:e1:4a:9e: 41:02:3d:d2:e0:15:70:ad:18:87:2b:54:33:98:57: 7d:4c:4c:76:63:1a:ca:e2:ee:8a:50:a2:e7:90:0d: 46:7a:0e:02:b4:95:a8:46:b1:b0:93:5d:af:7b:30: fd:5d:34:63:84:ac:e0:46:7b:d8:79:09:56:6c:82: 97:03:59:b4:0d:08:8f:3d:85:4b:0b:f4:69:14:27: 0e:b1:59:8a:f3:ef:38:35:3b:50:a9:96:42:43:f1: 13:78:28:3a:47:55:c8:d9:87:f8:4a:98:7f:5e:c7: 0a:78:fd:04:82:5f:11:0d:22:91:a0:95:ef:67:25: 33:ef:cb:64:da:94:57:5d:c5:ce:7f:1d:ba:a1:a7: 44:f1:5e:9b:c3:5d:cb:89:68:33:a2:15:78:cd:47: da:2a:82:a4:a5:6f:5f:e2:a0:f5:1f:d4:d6:0b:49: 1b:8d:ab:2e:aa:21:12:cb:d0:5f:60:92:a5:12:33: a2:85:7c:a9:d0:55:9e:ad:99:e0:dc:44:b9:f9:b2: f0:e5:58:99:53:5b:eb:cd:63:20:c7:3e:c0:2d:ec: bd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:6F:35:B8:B0:22:7A:77:02:D2:8C:37:71:C0:D5:95:19:74:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48a09d03-0388-382d-ab98-39b1377fba1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b0:8a:c8:30:20:97:a6:3f:de:dc:2e:ac:72:98:79:f7:8b: 4e:ef:82:35:c0:67:da:1d:33:11:90:b7:61:91:b7:5b:b3:98: 50:de:7e:30:5a:4d:43:34:15:11:74:2b:ca:3c:0a:b1:a8:99: 08:21:cf:c3:83:00:f2:28:1e:90:3f:5d:72:6e:fa:15:cc:72: a9:63:a5:45:e2:29:1b:3e:43:5e:f1:48:d1:a0:e0:9e:19:fe: 8a:d1:8d:c7:f1:14:ce:b7:ab:0a:21:66:d4:13:86:c5:f1:2b: ee:77:d2:bf:65:59:bc:8a:f4:d6:5b:a7:bf:00:dc:a9:f8:93: 0d:f6:95:94:67:0f:bb:cd:11:00:b0:e7:ec:b0:9d:0b:6e:e2: f3:12:ee:69:96:e3:c0:53:a2:69:af:41:fb:f9:93:36:92:53: 60:d4:de:41:39:68:87:b5:60:f6:4c:6c:4c:3c:5c:9d:24:99: d1:6f:93:67:7d:5f:b9:07:8d:03:36:c6:e8:6c:0b:85:ef:82: e0:1c:3d:f4:4f:02:92:fd:04:66:8f:47:80:56:b4:b5:33:ba: 30:3e:a7:75:38:47:76:a2:98:02:7e:be:74:fe:c3:8a:af:77: 3b:e8:5d:29:44:77:25:44:ff:19:b5:51:98:5f:64:c0:ed:85: ee:8d:0b:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWMmp0zVxA5vcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwOFoXDTI1MDkxMDEyNDIwOFowLzEtMCsGA1UEAxMk YzY3MGMzMWYtYzUyZi00YzBjLTlhMGQtNWU1MzBlZTkyZjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1fJX24KkthEgegvSxChiuQh/1DRWujrN/RI 5/pD2zgQT2uCzhOVmCrhSp5BAj3S4BVwrRiHK1QzmFd9TEx2YxrK4u6KUKLnkA1G eg4CtJWoRrGwk12vezD9XTRjhKzgRnvYeQlWbIKXA1m0DQiPPYVLC/RpFCcOsVmK 8+84NTtQqZZCQ/ETeCg6R1XI2Yf4Sph/XscKeP0Egl8RDSKRoJXvZyUz78tk2pRX XcXOfx26oadE8V6bw13LiWgzohV4zUfaKoKkpW9f4qD1H9TWC0kbjasuqiESy9Bf YJKlEjOihXyp0FWerZng3ES5+bLw5ViZU1vrzWMgxz7ALey9SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN2KbzW4sCJ6dwLSjDdxwNWVGXTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhhMDlkMDMtMDM4OC0z ODJkLWFiOTgtMzliMTM3N2ZiYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABewisgwIJemP97cLqxymHn3i07vgjXAZ9odMxGQt2GRt1uzmFDe fjBaTUM0FRF0K8o8CrGomQghz8ODAPIoHpA/XXJu+hXMcqljpUXiKRs+Q17xSNGg 4J4Z/orRjcfxFM63qwohZtQThsXxK+530r9lWbyK9NZbp78A3Kn4kw32lZRnD7vN EQCw5+ywnQtu4vMS7mmW48BTommvQfv5kzaSU2DU3kE5aIe1YPZMbEw8XJ0kmdFv k2d9X7kHjQM2xuhsC4XvguAcPfRPApL9BGaPR4BWtLUzujA+p3U4R3aimAJ+vnT+ w4qvdzvoXSlEdyVE/xm1UZhfZMDthe6NC8M= -----END CERTIFICATE-----Generated at Mon Jun 16 04:18:52 2025 by rpki-client