$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79976fb1-0a9d-31da-b184-3a5c009adb21.roa File: 79976fb1-0a9d-31da-b184-3a5c009adb21.roa (raw, json) Hash identifier: Fh1nBRJzGFfhnz4IMI8t7Ebk4w1VWIfO8nfIeb7jWTI= Subject key identifier: FA:59:F0:B0:76:E1:84:01:AE:22:42:1A:6C:8A:71:A8:20:8C:A8:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1F9050C3078B769B1A5FAF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79976fb1-0a9d-31da-b184-3a5c009adb21.roa Signing time: Sun 08 Jun 2025 13:01:01 +0000 ROA not before: Sun 08 Jun 2025 13:01:01 +0000 ROA not after: Sat 06 Sep 2025 13:01:01 +0000 asID: 396573 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1f:90:50:c3:07:8b:76:9b:1a:5f:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 8 13:01:01 2025 GMT Not After : Sep 6 13:01:01 2025 GMT Subject: CN=5a5c891c-641c-4438-8919-79ca77e07552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:ba:98:8b:1c:91:0e:0e:f2:73:17:9c:65: 69:7d:c4:55:06:70:d9:1f:6b:f6:f1:a2:c7:cc:4c: aa:d0:a7:66:71:3e:67:49:36:a1:63:99:7e:68:86: ae:26:77:2e:ac:4d:da:45:eb:d8:8e:ba:fc:37:86: 2b:53:26:c8:50:d3:6d:a6:00:d8:42:68:1a:53:21: f8:8c:8b:84:92:56:b3:1a:7c:29:9f:e5:b9:bd:8d: 0d:1c:50:6c:81:29:fb:a3:7e:d8:9d:66:ae:5f:7b: e9:61:13:b5:f5:d5:29:4d:8e:77:9c:90:bc:bf:23: 5e:60:11:bb:de:55:5b:4c:a4:4e:03:bb:cd:80:da: f5:93:f4:14:58:1c:24:a9:31:6a:92:71:7e:5b:27: 84:b0:cf:29:19:ea:f1:fd:b3:34:2d:36:ca:4b:ce: d1:a6:03:5d:66:14:89:77:ea:4e:20:f3:43:3a:21: 74:8b:ac:6e:9c:9a:5a:21:d6:6f:5b:ae:61:7a:42: d5:e6:e2:10:03:67:a4:c8:76:35:7b:7b:cf:17:53: 69:c1:6e:8a:d4:0c:30:3f:05:dc:98:35:02:bf:9e: 69:63:9c:9d:13:49:23:90:ab:d3:83:2d:35:66:3d: c4:36:b9:d8:a4:f0:63:c8:0b:89:fd:13:9a:f8:0a: 5a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:59:F0:B0:76:E1:84:01:AE:22:42:1A:6C:8A:71:A8:20:8C:A8:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/79976fb1-0a9d-31da-b184-3a5c009adb21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:29:a1:5b:18:30:f7:27:d2:f4:00:a1:38:90:f2:5f:e1:ab: d4:df:31:42:f9:f4:e4:61:9d:e1:c8:6c:11:f4:c7:fc:70:cb: 9e:68:bf:2f:78:c1:1e:53:10:ed:3e:1f:0d:d0:75:70:76:5c: 9b:14:58:72:84:c4:86:54:1a:4d:3f:b3:f9:bb:e0:a3:7e:30: d6:2c:77:e6:f1:b2:ad:c7:b3:99:bd:08:39:ad:89:34:05:4c: e6:74:51:b7:9d:37:3a:80:05:cb:14:cf:86:41:60:98:37:de: 3e:64:94:9e:a4:81:d2:d3:4f:df:b7:25:f3:eb:e6:3a:ed:69: f4:94:1a:89:89:df:09:14:2d:f1:d5:e8:36:3e:0c:c6:ef:81: 88:07:4d:50:8e:da:48:46:df:d5:7a:9c:27:78:18:0c:5b:f4: 54:f6:3b:1f:5d:ba:90:01:d1:ce:b5:77:1a:81:90:26:b9:ae: 75:a6:79:3e:ef:1c:4a:a0:88:3f:ad:ec:e9:06:12:84:2d:60: 5c:67:d2:21:1b:23:a3:87:c7:8b:fa:8f:0d:40:17:e4:cd:3c: 57:0e:31:8b:9d:2f:b5:1e:61:de:bf:de:1f:6a:29:61:cc:75: 8c:e8:8b:a1:5b:4b:53:30:42:99:ce:c5:ca:1d:23:a3:1d:ad: 15:e7:38:f7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEofkFDDB4t2mxpfr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk NWE1Yzg5MWMtNjQxYy00NDM4LTg5MTktNzljYTc3ZTA3NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWi6mIsckQ4O8nMXnGVpfcRVBnDZH2v28aLH zEyq0KdmcT5nSTahY5l+aIauJncurE3aRevYjrr8N4YrUybIUNNtpgDYQmgaUyH4 jIuEklazGnwpn+W5vY0NHFBsgSn7o37YnWauX3vpYRO19dUpTY53nJC8vyNeYBG7 3lVbTKROA7vNgNr1k/QUWBwkqTFqknF+WyeEsM8pGerx/bM0LTbKS87RpgNdZhSJ d+pOIPNDOiF0i6xunJpaIdZvW65hekLV5uIQA2ekyHY1e3vPF1NpwW6K1AwwPwXc mDUCv55pY5ydE0kjkKvTgy01Zj3ENrnYpPBjyAuJ/ROa+ApaFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPpZ8LB24YQBriJCGmyKcaggjKj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzk5NzZmYjEtMGE5ZC0z MWRhLWIxODQtM2E1YzAwOWFkYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBFKaFbGDD3J9L0AKE4kPJf4avU3zFC+fTkYZ3h yGwR9Mf8cMueaL8veMEeUxDtPh8N0HVwdlybFFhyhMSGVBpNP7P5u+CjfjDWLHfm 8bKtx7OZvQg5rYk0BUzmdFG3nTc6gAXLFM+GQWCYN94+ZJSepIHS00/ftyXz6+Y6 7Wn0lBqJid8JFC3x1eg2PgzG74GIB01QjtpIRt/VepwneBgMW/RU9jsfXbqQAdHO tXcagZAmua51pnk+7xxKoIg/rezpBhKELWBcZ9IhGyOjh8eL+o8NQBfkzTxXDjGL nS+1HmHev94failhzHWM6IuhW0tTMEKZzsXKHSOjHa0V5zj3 -----END CERTIFICATE-----Generated at Wed Jul 23 17:24:42 2025 by rpki-client