$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940e3e73-ba39-3596-a3ad-a441139087c4.roa File: 940e3e73-ba39-3596-a3ad-a441139087c4.roa (raw, json) Hash identifier: OIua9yAz13UsCLiQAly66jd63BM1kdCAIusY7/wFMgM= Subject key identifier: B3:43:7F:39:71:8C:56:13:1F:59:40:32:FD:8A:65:B7:5F:68:72:7B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A2AB166B4D7739CBD6D358280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940e3e73-ba39-3596-a3ad-a441139087c4.roa Signing time: Thu 12 Jun 2025 12:42:09 +0000 ROA not before: Thu 12 Jun 2025 12:42:09 +0000 ROA not after: Wed 10 Sep 2025 12:42:09 +0000 asID: 36622 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:b1:66:b4:d7:73:9c:bd:6d:35:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 12 12:42:09 2025 GMT Not After : Sep 10 12:42:09 2025 GMT Subject: CN=06ea4709-b029-41be-9416-9f1dfb9edbd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c6:42:55:91:13:f0:58:4e:59:fc:da:60:88: d1:d2:d0:7c:4e:c5:51:87:1c:f6:b8:6d:aa:2d:9e: b6:2f:ec:55:0b:03:b1:12:bc:51:21:0e:3e:7a:53: 7b:eb:c3:37:af:43:c7:4b:94:65:1c:b9:9e:54:91: 7b:e5:02:60:56:9e:3d:3b:f8:cd:cd:76:3a:0e:91: 5d:ae:54:80:eb:1b:b7:2e:c3:87:ac:13:88:70:27: f8:9e:d7:41:24:60:e6:45:e5:57:28:bd:ce:5c:24: 9c:f6:a5:59:15:8a:08:a0:28:17:c8:86:18:38:f6: 03:9a:86:35:b2:c0:d5:28:66:47:e9:f2:1c:7c:0e: 19:4a:9c:a4:e8:57:12:16:52:07:c5:37:7d:c1:fd: 9f:2a:eb:b8:4b:68:e1:78:a8:99:4e:fa:a2:2b:db: f0:29:f3:b6:d2:d7:1f:ee:4d:3b:26:09:07:a0:8f: 00:7a:bb:a1:ee:f1:58:68:4a:4b:bc:56:54:92:a3: d6:17:bc:be:bc:05:b8:2d:43:76:57:a5:c2:fb:92: e1:e4:5e:5b:85:8c:d5:1d:da:45:fe:f1:f3:dc:5d: b7:03:a0:8a:b4:d4:b9:e7:3c:75:e9:b5:56:fe:ed: 91:02:3f:72:53:14:ec:72:2f:00:4c:5b:6e:0a:c0: 9f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:43:7F:39:71:8C:56:13:1F:59:40:32:FD:8A:65:B7:5F:68:72:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940e3e73-ba39-3596-a3ad-a441139087c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fc:57:e6:7c:c0:e8:7a:e3:83:fe:e5:d3:90:44:43:83:f5: c1:3c:e1:b4:f2:a3:37:07:f9:1d:3f:ec:2b:fd:1a:21:5a:b0: 90:99:4e:7d:22:d8:84:03:25:f2:c7:27:04:f2:60:09:19:f1: 99:a9:e6:bd:3b:9f:89:55:84:6c:72:dc:49:68:77:66:c3:78: 59:09:cc:50:7f:bb:36:ef:fc:be:a3:6d:71:0b:96:76:84:f0: ba:d8:bd:7a:bc:ee:4c:e7:24:e2:25:6c:18:f0:fa:13:99:1a: d1:c0:4d:90:92:96:3d:6f:e9:a6:c9:f9:a0:7d:0a:44:72:29: d8:dc:65:88:70:1a:14:5a:55:95:02:55:59:de:a9:01:65:19: 4b:02:7a:26:be:77:ed:99:55:b1:7f:6e:5d:06:9d:9c:34:57: 7c:86:91:08:1e:2a:4b:ba:fc:ab:b4:86:28:bf:59:6b:5d:15: 7a:91:43:c9:ac:3b:fc:ab:76:b4:b3:e1:11:2e:50:7d:19:cb: 06:62:6e:99:07:37:e6:cd:ea:7d:8f:d3:18:e3:c2:8f:bb:74: 3f:40:8a:8d:0f:68:ec:c1:7c:b7:76:83:30:55:09:55:6a:a8: 53:88:43:d2:80:77:7d:8a:1c:fe:ba:69:a3:37:39:39:98:e5: 98:12:8e:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoqsWa013OcvW01goAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxMjEyNDIwOVoXDTI1MDkxMDEyNDIwOVowLzEtMCsGA1UEAxMk MDZlYTQ3MDktYjAyOS00MWJlLTk0MTYtOWYxZGZiOWVkYmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8ZCVZET8FhOWfzaYIjR0tB8TsVRhxz2uG2q LZ62L+xVCwOxErxRIQ4+elN768M3r0PHS5RlHLmeVJF75QJgVp49O/jNzXY6DpFd rlSA6xu3LsOHrBOIcCf4ntdBJGDmReVXKL3OXCSc9qVZFYoIoCgXyIYYOPYDmoY1 ssDVKGZH6fIcfA4ZSpyk6FcSFlIHxTd9wf2fKuu4S2jheKiZTvqiK9vwKfO20tcf 7k07JgkHoI8Aeruh7vFYaEpLvFZUkqPWF7y+vAW4LUN2V6XC+5Lh5F5bhYzVHdpF /vHz3F23A6CKtNS55zx16bVW/u2RAj9yUxTsci8ATFtuCsCftwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLNDfzlxjFYTH1lAMv2KZbdfaHJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTQwZTNlNzMtYmEzOS0z NTk2LWEzYWQtYTQ0MTEzOTA4N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAX8V+Z8wOh644P+5dOQREOD9cE84bTyozcH+R0/7Cv9GiFasJCZ Tn0i2IQDJfLHJwTyYAkZ8Zmp5r07n4lVhGxy3Elod2bDeFkJzFB/uzbv/L6jbXEL lnaE8LrYvXq87kznJOIlbBjw+hOZGtHATZCSlj1v6abJ+aB9CkRyKdjcZYhwGhRa VZUCVVneqQFlGUsCeia+d+2ZVbF/bl0GnZw0V3yGkQgeKku6/Ku0hii/WWtdFXqR Q8msO/yrdrSz4REuUH0ZywZibpkHN+bN6n2P0xjjwo+7dD9Aio0PaOzBfLd2gzBV CVVqqFOIQ9KAd32KHP66aaM3OTmY5ZgSjv4= -----END CERTIFICATE-----Generated at Thu Jul 10 07:51:31 2025 by rpki-client