$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66984bbb-9419-373e-a0c2-a2d67ba81747.roa File: 66984bbb-9419-373e-a0c2-a2d67ba81747.roa (raw, json) Hash identifier: +0XNm24nfnELsoPAOei7Hj1ph1a+dgFG5FzOk5xR/To= Subject key identifier: 73:DB:9D:A8:DD:D6:78:73:9C:72:F8:5C:6F:31:C8:82:CD:71:D1:D0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB164326DDCEBDB1CDCF0C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66984bbb-9419-373e-a0c2-a2d67ba81747.roa Signing time: Thu 12 Jun 2025 12:42:08 +0000 ROA not before: Thu 12 Jun 2025 12:42:08 +0000 ROA not after: Wed 10 Sep 2025 12:42:08 +0000 asID: 396588 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:64:32:6d:dc:eb:db:1c:dc:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:08 2025 GMT Not After : Sep 10 12:42:08 2025 GMT Subject: CN=1e1b762d-bd7f-4b84-942f-85d71f51d34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:da:4e:37:0c:c0:df:ed:76:b8:36:a5:4b:d8: 98:b5:5d:4b:57:a7:34:f3:a9:a4:d5:a1:ec:ca:78: e7:6b:21:6a:7a:99:e2:38:79:2c:cb:c6:ef:43:2f: 44:6c:8e:06:e4:f0:08:88:14:59:f6:43:75:4a:40: 16:2e:6d:de:bd:0f:3e:9e:f6:77:a2:f0:77:65:94: 74:50:13:77:6a:28:d9:73:2a:e5:b1:e5:90:c6:1e: 56:11:10:b0:05:c6:f0:68:8d:f3:2b:ce:75:e6:df: f2:89:06:e3:61:38:18:3f:6b:8f:91:fb:cb:b7:cc: 70:5d:3e:ed:95:9c:3b:87:c9:01:fa:f4:cd:0c:6d: 1c:0e:84:37:73:d6:d9:d4:aa:3d:13:04:a7:42:24: d2:16:ce:a9:22:87:fc:ef:f8:72:4c:54:de:cf:c1: 43:a7:32:9f:72:f7:fc:6f:60:9e:4f:7e:e9:32:6e: d7:e8:4b:51:22:bb:4b:38:68:c0:3e:77:0c:f4:e0: 5c:eb:86:cf:eb:79:57:cb:c1:ee:3e:a9:0e:90:fc: 50:bb:cd:34:fc:29:cf:39:63:fe:7b:f2:4a:5e:23: 1a:ba:a2:66:d6:79:96:c4:a3:98:70:0f:3a:a5:9f: c3:17:57:4a:e9:63:5a:e0:a6:da:a5:6b:19:9a:75: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:9D:A8:DD:D6:78:73:9C:72:F8:5C:6F:31:C8:82:CD:71:D1:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66984bbb-9419-373e-a0c2-a2d67ba81747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6a:b9:8b:aa:2a:22:97:57:a4:8a:89:43:ee:7f:92:6b:7b: 4a:2d:a1:fe:cf:97:c7:d4:7c:97:3f:d9:d8:a4:21:cd:39:b7: a1:80:7b:aa:95:e2:b4:a7:ff:50:84:9c:56:e6:5f:91:e7:2f: 82:52:17:ec:7a:23:1a:08:08:19:3e:ae:08:96:df:c8:12:d7: ab:25:5d:80:31:77:2d:25:12:b4:a8:11:64:3c:d9:62:3c:46: 9b:36:9f:4e:93:3f:8e:c8:f5:04:53:0d:19:73:be:27:4e:d3: 83:67:c8:12:03:78:a8:52:87:59:29:23:3d:04:b2:35:8c:8a: 3d:3a:82:41:3d:1b:c5:e2:b1:59:6a:8e:5b:83:94:f8:37:58: 3c:63:77:7f:69:0c:4d:8c:f8:7f:e8:e8:3d:c7:b7:7f:98:ff: c1:85:26:97:77:3c:1e:58:28:fd:2c:99:9e:83:5b:89:b5:e9: d8:51:93:1e:ba:35:95:05:e2:78:28:b9:d4:3d:e9:5e:e5:62: a0:ae:f6:52:14:35:52:ac:02:87:92:04:68:ba:70:31:b4:1d: a3:2f:44:36:81:4b:18:37:17:c7:c1:4b:b7:28:e0:57:34:99: 28:4e:ca:4f:16:81:d5:53:95:b2:a1:5b:9e:ac:47:f0:c4:5a: 05:04:ea:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWQybdzr2xzc8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwOFoXDTI1MDkxMDEyNDIwOFowLzEtMCsGA1UEAxMk MWUxYjc2MmQtYmQ3Zi00Yjg0LTk0MmYtODVkNzFmNTFkMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9pONwzA3+12uDalS9iYtV1LV6c086mk1aHs ynjnayFqepniOHksy8bvQy9EbI4G5PAIiBRZ9kN1SkAWLm3evQ8+nvZ3ovB3ZZR0 UBN3aijZcyrlseWQxh5WERCwBcbwaI3zK8515t/yiQbjYTgYP2uPkfvLt8xwXT7t lZw7h8kB+vTNDG0cDoQ3c9bZ1Ko9EwSnQiTSFs6pIof87/hyTFTez8FDpzKfcvf8 b2CeT37pMm7X6EtRIrtLOGjAPncM9OBc64bP63lXy8HuPqkOkPxQu800/CnPOWP+ e/JKXiMauqJm1nmWxKOYcA86pZ/DF1dK6WNa4KbapWsZmnXsCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHPbnajd1nhznHL4XG8xyILNcdHQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjY5ODRiYmItOTQxOS0z NzNlLWEwYzItYTJkNjdiYTgxNzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHZquYuqKiKXV6SKiUPuf5Jre0otof7Pl8fUfJc/2dikIc05t6GA e6qV4rSn/1CEnFbmX5HnL4JSF+x6IxoICBk+rgiW38gS16slXYAxdy0lErSoEWQ8 2WI8Rps2n06TP47I9QRTDRlzvidO04NnyBIDeKhSh1kpIz0EsjWMij06gkE9G8Xi sVlqjluDlPg3WDxjd39pDE2M+H/o6D3Ht3+Y/8GFJpd3PB5YKP0smZ6DW4m16dhR kx66NZUF4ngoudQ96V7lYqCu9lIUNVKsAoeSBGi6cDG0HaMvRDaBSxg3F8fBS7co 4Fc0mShOyk8WgdVTlbKhW56sR/DEWgUE6k0= -----END CERTIFICATE-----Generated at Mon Jun 16 09:30:59 2025 by rpki-client