$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/855dc830-5f26-3afe-9842-f0980fcfa933.roa File: 855dc830-5f26-3afe-9842-f0980fcfa933.roa (raw, json) Hash identifier: vwQ2tYlRhmrL2FYrCJADeWWcZshOGhqHYjIRTZ9ngZw= Subject key identifier: AF:B1:A3:5B:CD:54:28:9F:B1:C0:F3:53:F5:8E:E5:A9:03:93:9B:51 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FDD5F874B7CDDAC6ECE6F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/855dc830-5f26-3afe-9842-f0980fcfa933.roa Signing time: Tue 01 Jul 2025 13:48:36 +0000 ROA not before: Tue 01 Jul 2025 13:48:36 +0000 ROA not after: Mon 29 Sep 2025 13:48:36 +0000 asID: 397197 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:dd:5f:87:4b:7c:dd:ac:6e:ce:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 13:48:36 2025 GMT Not After : Sep 29 13:48:36 2025 GMT Subject: CN=1b6b9c4b-f565-4741-a42c-b57028979ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e5:95:eb:62:77:ae:f1:d6:2c:7b:be:ff:89: 76:42:9b:ab:ee:c3:75:d2:49:b1:4e:2c:a3:95:5e: 8e:b1:b1:dd:ff:62:f8:fb:07:71:07:0c:46:6a:c2: 2c:c4:22:14:49:25:36:44:8e:75:37:3c:ca:9b:f0: 09:ee:3d:fe:a4:20:8f:2d:af:80:f0:17:d1:b9:b7: 08:ea:8c:83:f1:1a:c0:24:c5:ad:3f:d3:fa:00:d0: 0e:36:2b:34:de:75:3e:94:ba:b1:6e:15:8f:7f:5b: a2:b2:24:42:ba:34:0e:95:fd:ec:71:49:c2:6e:1a: d4:71:b3:60:ab:f0:fd:91:18:11:9f:8a:38:df:4d: 13:47:2e:71:39:08:46:c1:d0:4d:bd:dc:f8:16:6c: 8e:45:88:28:07:b4:42:95:42:e4:b2:54:9a:c0:f4: 19:c4:13:30:09:4f:17:1c:4c:7d:27:72:84:46:64: 92:92:ab:21:2e:7f:d9:2f:29:6a:a5:8a:31:8a:64: 56:da:2a:40:a6:1b:cd:7f:e3:0d:b3:f7:01:d5:89: 4b:fc:b9:59:03:0b:d7:16:f6:2b:6d:6b:7f:7e:25: a8:83:98:3f:36:b5:a8:f2:87:86:e8:74:f2:d1:ef: 44:86:bb:d7:e3:13:10:8a:06:40:f0:98:42:20:1a: a2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B1:A3:5B:CD:54:28:9F:B1:C0:F3:53:F5:8E:E5:A9:03:93:9B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/855dc830-5f26-3afe-9842-f0980fcfa933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9b:03:88:8d:5b:ac:4d:f9:ea:45:04:67:ac:a5:99:40:bb: bb:c1:07:bf:74:c0:eb:8b:f5:2c:63:ad:33:bc:eb:49:e6:c6: 84:fa:69:cd:4c:db:f6:37:94:3f:59:29:3e:7f:dd:2a:ac:3b: 7e:dc:1e:28:ac:29:4b:ca:ac:43:97:81:be:7e:d4:51:76:60: 37:47:4e:c8:d6:18:6a:d7:22:88:e1:62:9b:a5:82:14:cf:2b: 89:d3:63:9d:10:95:53:b8:07:57:c5:6c:ab:f8:b7:62:60:2b: 1c:00:f6:67:95:b7:dc:9f:58:47:b5:0c:44:d4:55:32:06:9d: ca:b6:4e:9a:7f:b2:93:e1:63:94:89:0f:51:74:2f:d7:9a:20: e7:f3:d5:ec:53:c0:9d:d8:7c:72:ac:a3:09:23:28:66:de:b8: 22:39:fe:9b:05:f1:7c:0d:5b:1d:57:51:5b:56:2d:19:d4:d6: d0:d1:85:91:3d:c2:d6:d0:4b:e3:f0:f5:49:f4:30:e2:f5:23: fc:55:fd:31:77:1e:3f:ea:dd:70:39:90:56:ad:37:3b:0b:17: c4:d7:86:6d:64:19:2e:f0:5f:53:73:d3:a1:fb:79:59:58:4f: ab:ca:ba:62:cc:16:d9:c3:20:f4:8b:18:50:92:74:f9:9d:7a: 27:44:94:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpf3V+HS3zdrG7Ob4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTEzNDgzNloXDTI1MDkyOTEzNDgzNlowLzEtMCsGA1UEAxMk MWI2YjljNGItZjU2NS00NzQxLWE0MmMtYjU3MDI4OTc5ZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOWV62J3rvHWLHu+/4l2Qpur7sN10kmxTiyj lV6OsbHd/2L4+wdxBwxGasIsxCIUSSU2RI51NzzKm/AJ7j3+pCCPLa+A8BfRubcI 6oyD8RrAJMWtP9P6ANAONis03nU+lLqxbhWPf1uisiRCujQOlf3scUnCbhrUcbNg q/D9kRgRn4o4300TRy5xOQhGwdBNvdz4FmyORYgoB7RClULkslSawPQZxBMwCU8X HEx9J3KERmSSkqshLn/ZLylqpYoximRW2ipAphvNf+MNs/cB1YlL/LlZAwvXFvYr bWt/fiWog5g/NrWo8oeG6HTy0e9EhrvX4xMQigZA8JhCIBqiawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK+xo1vNVCifscDzU/WO5akDk5tRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU1ZGM4MzAtNWYyNi0z YWZlLTk4NDItZjA5ODBmY2ZhOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3mwOIjVusTfnqRQRnrKWZQLu7wQe/dMDri/Us Y60zvOtJ5saE+mnNTNv2N5Q/WSk+f90qrDt+3B4orClLyqxDl4G+ftRRdmA3R07I 1hhq1yKI4WKbpYIUzyuJ02OdEJVTuAdXxWyr+LdiYCscAPZnlbfcn1hHtQxE1FUy Bp3Ktk6af7KT4WOUiQ9RdC/XmiDn89XsU8Cd2HxyrKMJIyhm3rgiOf6bBfF8DVsd V1FbVi0Z1NbQ0YWRPcLW0Evj8PVJ9DDi9SP8Vf0xdx4/6t1wOZBWrTc7CxfE14Zt ZBku8F9Tc9Oh+3lZWE+ryrpizBbZwyD0ixhQknT5nXonRJRW -----END CERTIFICATE-----Generated at Thu Jul 10 13:30:31 2025 by rpki-client