$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b565abc9-21ac-3598-b1c9-2b4616efdc35.roa File: b565abc9-21ac-3598-b1c9-2b4616efdc35.roa (raw, json) Hash identifier: t5Y/4GI5xLDmXGwBKMOagxVt36a4lI7uRyfbr7g/ZTs= Subject key identifier: A6:35:53:64:92:E5:66:8B:13:81:72:F6:C1:DA:78:E2:EC:CB:EC:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB15F83D56C63D5E9183B20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b565abc9-21ac-3598-b1c9-2b4616efdc35.roa Signing time: Thu 12 Jun 2025 12:42:06 +0000 ROA not before: Thu 12 Jun 2025 12:42:06 +0000 ROA not after: Wed 10 Sep 2025 12:42:06 +0000 asID: 396611 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:5f:83:d5:6c:63:d5:e9:18:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:06 2025 GMT Not After : Sep 10 12:42:06 2025 GMT Subject: CN=9de1a8df-cbbf-47e4-a48d-62b1d0829b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:27:b2:3c:b2:5d:de:35:94:88:20:48:ed: 0f:ac:72:d0:01:35:03:e7:bc:bf:90:7e:ce:56:c2: 8e:f2:b5:61:20:b5:b6:23:5a:a2:71:dd:c8:f4:43: cc:cd:64:2f:14:c1:43:75:e3:b9:78:a0:7d:2e:d9: 02:0c:85:1f:56:61:b1:28:cb:cb:24:22:b3:1d:5c: 02:87:76:1d:a1:1c:cc:64:93:6a:01:2e:b7:94:20: 85:3c:79:37:50:ed:f2:ef:27:13:67:6d:37:5d:84: 33:f1:ac:cb:1f:4c:a8:20:59:3c:42:f8:95:99:b9: 92:7c:d2:50:08:8d:9f:4e:3b:f3:2c:e1:a1:7d:a9: 56:92:79:64:ba:c4:8e:cc:b6:19:22:3c:f2:b0:5e: f1:65:a1:ca:16:1f:7f:5b:5d:35:8b:e0:f1:ad:41: 06:96:c9:6d:b6:fa:9f:6c:82:1b:3d:6b:25:93:55: c8:cf:95:22:67:dd:9c:2d:5d:a5:08:dd:23:36:68: 31:7a:80:76:58:c9:77:84:58:12:33:6a:99:1b:20: b7:9f:17:b2:53:71:2f:ea:86:25:d3:3d:08:9e:34: c2:99:22:fe:5c:01:67:04:02:8e:b9:54:e7:b9:ba: 2f:33:52:9f:b9:6d:03:c2:df:d4:bb:43:43:9a:cf: 11:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:35:53:64:92:E5:66:8B:13:81:72:F6:C1:DA:78:E2:EC:CB:EC:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b565abc9-21ac-3598-b1c9-2b4616efdc35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f9:00:27:ce:33:7f:d1:e6:d2:3b:ec:5e:c1:81:64:78:e4: 59:82:df:48:79:64:3e:b9:09:3c:5b:dc:13:34:86:17:47:25: 70:67:ce:28:5a:c7:a5:eb:2c:8e:d2:cb:65:49:f1:ce:59:d2: 04:c3:f7:33:d9:f1:58:33:3a:61:86:ae:b1:00:71:f2:3d:3c: 78:01:42:a8:70:3c:46:11:84:08:35:9b:4d:65:f6:b1:d4:b2: 84:48:d9:f0:ed:61:12:04:30:7c:a9:a7:58:7d:ca:9d:2d:6e: 9c:5d:7c:87:ec:c6:1a:70:4a:53:62:4c:ab:af:62:48:55:e6: 23:0e:c4:7f:25:47:40:7d:e1:ab:02:a6:67:27:cf:3a:93:5c: 8b:bc:8e:ef:0e:ca:0e:8e:4b:8b:5c:35:86:f9:d5:17:44:5d: b5:42:cd:c3:b8:ff:f9:05:e2:30:45:85:48:28:8f:27:d4:0d: ff:8c:52:ac:3f:04:28:45:d6:f2:85:ff:a1:90:5b:72:a2:16: f6:80:e2:53:35:a5:ce:01:29:9a:aa:99:26:f3:c3:ae:79:cc: b3:f7:42:b5:43:2b:e3:54:e0:3d:df:37:b9:69:3f:1c:09:9a: d4:31:de:6c:a6:10:9e:5d:b8:af:a6:26:6a:b5:fc:9a:6d:7b: 1c:47:78:03 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsV+D1Wxj1ekYOyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwNloXDTI1MDkxMDEyNDIwNlowLzEtMCsGA1UEAxMk OWRlMWE4ZGYtY2JiZi00N2U0LWE0OGQtNjJiMWQwODI5YjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4AnsjyyXd41lIggSO0PrHLQATUD57y/kH7O VsKO8rVhILW2I1qicd3I9EPMzWQvFMFDdeO5eKB9LtkCDIUfVmGxKMvLJCKzHVwC h3YdoRzMZJNqAS63lCCFPHk3UO3y7ycTZ203XYQz8azLH0yoIFk8QviVmbmSfNJQ CI2fTjvzLOGhfalWknlkusSOzLYZIjzysF7xZaHKFh9/W101i+DxrUEGlslttvqf bIIbPWslk1XIz5UiZ92cLV2lCN0jNmgxeoB2WMl3hFgSM2qZGyC3nxeyU3Ev6oYl 0z0InjTCmSL+XAFnBAKOuVTnubovM1KfuW0Dwt/Uu0NDms8RRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKY1U2SS5WaLE4Fy9sHaeOLsy+wPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjU2NWFiYzktMjFhYy0z NTk4LWIxYzktMmI0NjE2ZWZkYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAL5ACfOM3/R5tI77F7BgWR45FmC30h5ZD65CTxb3BM0hhdHJXBn zihax6XrLI7Sy2VJ8c5Z0gTD9zPZ8VgzOmGGrrEAcfI9PHgBQqhwPEYRhAg1m01l 9rHUsoRI2fDtYRIEMHypp1h9yp0tbpxdfIfsxhpwSlNiTKuvYkhV5iMOxH8lR0B9 4asCpmcnzzqTXIu8ju8Oyg6OS4tcNYb51RdEXbVCzcO4//kF4jBFhUgojyfUDf+M Uqw/BChF1vKF/6GQW3KiFvaA4lM1pc4BKZqqmSbzw655zLP3QrVDK+NU4D3fN7lp PxwJmtQx3mymEJ5duK+mJmq1/JptexxHeAM= -----END CERTIFICATE-----Generated at Tue Jun 17 17:04:04 2025 by rpki-client