$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae56ecf8-21e3-3d43-90b2-60c04a478cd7.roa File: ae56ecf8-21e3-3d43-90b2-60c04a478cd7.roa (raw, json) Hash identifier: jf9Ytrk3cD8P33IIKzJq2CISWkiKRU4+p/Pzka4ClX4= Subject key identifier: 68:84:2C:CE:56:A4:9E:20:5F:35:3D:97:D0:A5:18:C1:D9:3A:62:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FDD6386C8107C3B991ED480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae56ecf8-21e3-3d43-90b2-60c04a478cd7.roa Signing time: Tue 01 Jul 2025 13:48:38 +0000 ROA not before: Tue 01 Jul 2025 13:48:38 +0000 ROA not after: Mon 29 Sep 2025 13:48:38 +0000 asID: 36628 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:dd:63:86:c8:10:7c:3b:99:1e:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 13:48:38 2025 GMT Not After : Sep 29 13:48:38 2025 GMT Subject: CN=2b7e2207-228d-4ce5-b4ff-135d2a4efa66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:34:b9:e3:e8:c0:5b:4f:57:8f:1a:33:bc: f8:42:a9:3e:f4:64:17:ca:d4:52:9e:84:9c:7a:63: 73:af:8d:fe:d4:97:4f:00:a5:2b:b9:0c:fc:12:d3: db:29:0f:57:78:e4:e2:d4:1b:af:b8:99:d4:87:e0: c6:8f:49:65:39:05:96:51:a7:56:98:0b:c9:10:93: ee:dc:6a:26:74:09:ec:88:01:27:51:ae:d1:81:db: d1:40:5a:91:0e:82:bb:b3:e4:7b:9f:06:b0:17:65: f1:58:8c:dd:0d:70:05:f1:d5:f5:53:1e:b1:b8:1c: 13:06:fc:35:06:49:0b:ca:10:cb:8e:8a:3e:0d:b0: 49:4b:c1:d8:18:7d:8f:3c:76:95:1b:b5:ed:58:65: 0f:9c:cb:7d:6c:35:3c:9d:cb:d7:7e:51:50:cc:61: bb:79:6f:2d:63:62:35:8e:82:93:7b:41:f2:52:71: 85:d8:a8:e2:3b:f0:3e:c7:ef:86:2e:8d:2a:f3:56: c5:6d:cc:5a:2e:a2:a1:1d:f3:c7:63:48:7a:81:6b: b0:e5:84:40:c8:b1:b7:5b:65:4a:6c:08:7b:4d:4b: 5b:56:7e:b8:37:99:61:d9:20:7d:48:84:f7:e4:29: 55:af:78:c0:6f:59:9f:79:39:aa:b9:58:20:09:91: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:84:2C:CE:56:A4:9E:20:5F:35:3D:97:D0:A5:18:C1:D9:3A:62:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae56ecf8-21e3-3d43-90b2-60c04a478cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9b:99:90:24:e6:83:25:6d:86:d2:1b:85:95:46:ff:c6:8d: 95:92:fb:59:7a:4a:bd:6f:34:ba:09:50:c3:5d:f5:94:14:7c: ef:5c:7a:f7:d6:6e:49:2c:39:b7:69:ea:88:41:26:57:41:c5: 56:c8:4a:4f:a8:ff:19:3e:4b:aa:ac:6e:d6:0a:54:fd:d4:f6: e6:33:52:28:69:28:dc:4f:86:0f:12:15:61:b9:d5:63:65:7d: ee:35:f4:3c:dd:53:b1:05:39:46:b8:14:5c:8c:42:d6:75:b7: 6b:3f:cc:ff:a3:8e:16:99:e1:c6:aa:07:51:ce:49:92:08:7f: f7:11:7a:60:34:da:47:46:ec:08:cd:4a:92:d0:92:13:7f:2f: 08:e7:dc:5c:39:f4:f4:a5:6d:c8:d8:5a:b7:66:1c:24:62:29: ed:39:0f:00:8b:16:ab:65:f9:dc:09:d9:1a:3b:ec:01:19:ad: 90:37:ad:96:04:72:5b:de:42:1a:d8:31:59:db:6d:79:62:1f: c4:63:3a:82:c0:5e:f8:a7:ec:0a:d3:1e:97:fa:b7:d5:ef:01: cb:91:95:a6:af:5d:af:f9:0b:75:19:9f:e6:c2:b4:42:5e:c0: 00:07:02:5d:aa:16:ea:bf:50:c4:9b:ee:db:b7:68:69:be:e8: 44:8a:d8:83 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpf3WOGyBB8O5ke1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTEzNDgzOFoXDTI1MDkyOTEzNDgzOFowLzEtMCsGA1UEAxMk MmI3ZTIyMDctMjI4ZC00Y2U1LWI0ZmYtMTM1ZDJhNGVmYTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTk0uePowFtPV48aM7z4Qqk+9GQXytRSnoSc emNzr43+1JdPAKUruQz8EtPbKQ9XeOTi1BuvuJnUh+DGj0llOQWWUadWmAvJEJPu 3GomdAnsiAEnUa7RgdvRQFqRDoK7s+R7nwawF2XxWIzdDXAF8dX1Ux6xuBwTBvw1 BkkLyhDLjoo+DbBJS8HYGH2PPHaVG7XtWGUPnMt9bDU8ncvXflFQzGG7eW8tY2I1 joKTe0HyUnGF2KjiO/A+x++GLo0q81bFbcxaLqKhHfPHY0h6gWuw5YRAyLG3W2VK bAh7TUtbVn64N5lh2SB9SIT35ClVr3jAb1mfeTmquVggCZFAKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGiELM5WpJ4gXzU9l9ClGMHZOmLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWU1NmVjZjgtMjFlMy0z ZDQzLTkwYjItNjBjMDRhNDc4Y2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQASm5mQJOaDJW2G0huFlUb/xo2VkvtZekq9bzS6 CVDDXfWUFHzvXHr31m5JLDm3aeqIQSZXQcVWyEpPqP8ZPkuqrG7WClT91PbmM1Io aSjcT4YPEhVhudVjZX3uNfQ83VOxBTlGuBRcjELWdbdrP8z/o44WmeHGqgdRzkmS CH/3EXpgNNpHRuwIzUqS0JITfy8I59xcOfT0pW3I2Fq3ZhwkYintOQ8AixarZfnc CdkaO+wBGa2QN62WBHJb3kIa2DFZ2215Yh/EYzqCwF74p+wK0x6X+rfV7wHLkZWm r12v+Qt1GZ/mwrRCXsAABwJdqhbqv1DEm+7bt2hpvuhEitiD -----END CERTIFICATE-----Generated at Thu Jul 10 11:35:36 2025 by rpki-client