$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dc4f5de-6f89-33fc-95d7-2d1df1bd6106.roa File: 2dc4f5de-6f89-33fc-95d7-2d1df1bd6106.roa (raw, json) Hash identifier: 302JNntyJUje99FVqD8CIE82+OI6ginvBaCMYZM1GlA= Subject key identifier: 43:08:34:B8:D9:CE:A5:91:94:AA:F9:0B:00:BB:A4:BB:D0:2E:57:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FDD6220782B89E0B07A9F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dc4f5de-6f89-33fc-95d7-2d1df1bd6106.roa Signing time: Tue 01 Jul 2025 13:48:37 +0000 ROA not before: Tue 01 Jul 2025 13:48:37 +0000 ROA not after: Mon 29 Sep 2025 13:48:37 +0000 asID: 397193 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:dd:62:20:78:2b:89:e0:b0:7a:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 13:48:37 2025 GMT Not After : Sep 29 13:48:37 2025 GMT Subject: CN=fe2d8bc3-2851-4d20-a695-ef512a3d4a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:ad:f7:47:27:ea:f6:37:1c:ef:49:d2:88: 32:36:f3:ec:1e:4e:70:25:1a:7e:a3:4e:6c:49:e0: d7:aa:c0:3d:b7:55:9d:e9:5d:62:d1:44:07:d0:f5: ea:6f:0c:61:21:5b:35:58:67:49:e3:0c:65:46:10: 5d:e0:80:fb:71:22:47:41:38:b0:0b:b9:4f:5c:fd: 74:db:ed:d0:eb:05:3f:a5:f1:ce:0a:da:68:84:33: 11:48:4c:79:40:09:14:6b:72:37:48:39:f4:34:ec: fc:1f:c5:2a:8f:3b:0a:e4:73:d3:1d:61:f3:a9:a7: 06:81:e1:42:80:4a:f4:36:df:51:53:c9:6f:f6:fb: 0a:21:b5:e4:14:1c:35:4d:5f:e2:40:3b:93:c9:0d: 23:10:1f:22:a5:de:da:1a:8f:f4:41:2d:a9:ad:b6: a1:f8:42:28:34:48:99:17:27:ab:ae:b9:4b:cd:de: 15:36:c8:07:73:14:3e:da:25:12:e5:21:38:83:08: b4:f9:d2:ab:0e:52:87:88:59:76:3e:9d:eb:9e:58: 8a:b0:ae:c8:c1:7f:5a:c1:d3:71:e0:e9:ac:34:4d: b3:7f:1c:69:7e:41:29:6d:98:4b:2f:2b:a4:54:85: cd:1a:53:7b:80:12:75:7f:a5:6f:e6:ff:ad:a8:b0: 55:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:34:B8:D9:CE:A5:91:94:AA:F9:0B:00:BB:A4:BB:D0:2E:57:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dc4f5de-6f89-33fc-95d7-2d1df1bd6106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:22:b2:37:e8:d0:03:3d:21:8e:cf:ad:24:7d:9d:fc:ea:23: 1b:ef:72:11:af:d1:03:39:f3:ab:37:d5:db:c9:a3:e4:95:66: fa:14:a7:d2:b1:6c:d4:88:1d:ae:05:99:30:bc:ad:f0:0e:58: 36:9f:5a:5f:ed:91:29:7e:73:da:f2:09:69:d5:c4:76:64:74: d6:f3:d0:e5:c7:40:bc:68:18:73:0d:70:52:45:ba:e2:17:f6: 64:38:40:23:27:76:c2:dc:e8:cf:ef:77:50:2f:92:b9:be:c9: 47:9b:ca:ed:ed:2a:73:02:84:f4:b0:73:c5:6d:45:c8:8e:ff: 60:f5:1e:4c:9c:21:b4:b0:2e:bd:e2:f7:bb:dc:e0:e5:cb:eb: d3:25:45:b5:47:b7:df:76:88:6c:7b:72:56:3b:71:21:1f:df: 46:9a:b7:f7:14:5d:a3:75:91:87:09:6f:03:96:f0:cc:db:85: 7c:5f:1d:b3:5a:8a:df:96:89:54:e4:e4:5f:7a:ec:3e:64:32: b0:45:e2:c1:84:41:45:cd:65:f3:02:3a:16:64:ad:2a:6b:89: 89:05:36:e6:09:e9:c2:de:35:5e:35:72:15:d9:bf:17:4a:98: 46:75:04:fd:63:e1:b6:de:2a:6c:b8:e9:11:ef:db:d6:fb:fb: d7:c8:a4:20 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpf3WIgeCuJ4LB6n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTEzNDgzN1oXDTI1MDkyOTEzNDgzN1owLzEtMCsGA1UEAxMk ZmUyZDhiYzMtMjg1MS00ZDIwLWE2OTUtZWY1MTJhM2Q0YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla6t90cn6vY3HO9J0ogyNvPsHk5wJRp+o05s SeDXqsA9t1Wd6V1i0UQH0PXqbwxhIVs1WGdJ4wxlRhBd4ID7cSJHQTiwC7lPXP10 2+3Q6wU/pfHOCtpohDMRSEx5QAkUa3I3SDn0NOz8H8UqjzsK5HPTHWHzqacGgeFC gEr0Nt9RU8lv9vsKIbXkFBw1TV/iQDuTyQ0jEB8ipd7aGo/0QS2prbah+EIoNEiZ FyerrrlLzd4VNsgHcxQ+2iUS5SE4gwi0+dKrDlKHiFl2Pp3rnliKsK7IwX9awdNx 4OmsNE2zfxxpfkEpbZhLLyukVIXNGlN7gBJ1f6Vv5v+tqLBVBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEMINLjZzqWRlKr5CwC7pLvQLleHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmRjNGY1ZGUtNmY4OS0z M2ZjLTk1ZDctMmQxZGYxYmQ2MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBnIrI36NADPSGOz60kfZ386iMb73IRr9EDOfOr N9XbyaPklWb6FKfSsWzUiB2uBZkwvK3wDlg2n1pf7ZEpfnPa8glp1cR2ZHTW89Dl x0C8aBhzDXBSRbriF/ZkOEAjJ3bC3OjP73dQL5K5vslHm8rt7SpzAoT0sHPFbUXI jv9g9R5MnCG0sC694ve73ODly+vTJUW1R7ffdohse3JWO3EhH99Gmrf3FF2jdZGH CW8DlvDM24V8Xx2zWorflolU5ORfeuw+ZDKwReLBhEFFzWXzAjoWZK0qa4mJBTbm CenC3jVeNXIV2b8XSphGdQT9Y+G23ipsuOkR79vW+/vXyKQg -----END CERTIFICATE-----Generated at Thu Jul 10 12:41:01 2025 by rpki-client