$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa File: bbd38cda-7d43-361b-8ee3-dab3e0487112.roa (raw, json) Hash identifier: 2acvfVTLjrkNDkXpIvpP2ZMVtksIwH4T0ZuUJ5WLPaM= Subject key identifier: 2E:C6:BE:7C:EF:0B:D2:7B:1F:7F:35:F1:04:F8:D0:2B:F3:18:B9:F1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A119ABE722FCD2D6D74889740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 397196 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:be:72:2f:cd:2d:6d:74:88:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=b19f357b-58a6-48e1-9e32-bfbfd5c7c9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:88:8b:e1:f1:24:cd:59:43:76:59:f1:71:3e: ff:60:5d:f1:2b:a9:ff:dc:14:fd:27:35:78:17:5f: 43:d6:9c:75:ce:6e:ce:b5:15:66:0b:74:a6:7a:61: 56:09:7c:07:25:34:ee:02:12:ae:34:55:ab:f1:0d: 3a:c4:9e:06:f1:3f:12:e0:28:ab:87:4a:91:05:f4: 7a:4a:5f:ec:c2:2e:84:6e:95:db:11:a7:a7:4d:5a: ad:7a:5f:66:d3:71:41:c7:fd:f6:9d:95:0d:08:17: f5:d9:78:c8:2b:1f:bd:9c:c9:b7:5f:14:0c:29:f8: 87:88:88:70:99:36:cd:70:22:d8:69:ad:3b:04:72: ce:d2:51:37:5b:a3:3a:75:82:bd:89:da:77:ed:cf: 51:3f:06:58:a0:3a:f7:66:df:59:d3:8c:87:52:0d: ee:5a:5c:cc:1c:1f:37:ba:8a:83:a6:20:02:80:48: 59:5f:43:03:17:7e:a3:5f:c0:a2:ea:99:fb:8a:c3: 28:00:5f:ba:42:10:26:18:87:d0:32:c7:de:8f:d0: f7:d0:8d:72:b3:ba:fb:75:81:26:63:18:c0:4a:55: b5:20:f5:cb:63:e1:50:74:d4:71:6e:49:0e:ed:67: 47:a6:5b:44:e2:21:fa:66:8b:cf:8f:7b:44:81:18: 64:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C6:BE:7C:EF:0B:D2:7B:1F:7F:35:F1:04:F8:D0:2B:F3:18:B9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:04:dc:b5:f6:bc:49:32:0a:8c:f2:b2:70:24:7a:d5:17:d0: 05:be:82:38:85:b3:cc:c0:12:f2:2e:1a:fd:cb:c0:a5:e9:b3: c8:dc:d5:f5:0a:f8:0e:f9:8d:e5:15:df:15:87:cd:0a:21:0d: c4:5c:ad:85:42:bc:5e:3e:d4:de:90:81:8d:33:35:a4:99:92: 52:05:e1:c7:f5:91:1f:cd:ba:90:ac:0e:3f:f2:f2:c7:83:ec: 9d:76:54:0e:30:3b:b1:06:b8:4d:15:c1:63:f3:80:a2:55:e5: 02:08:de:96:10:c4:60:d5:95:c8:f2:2f:08:f8:c9:79:57:a9: d3:53:1b:cf:d0:8f:58:50:c9:58:f2:80:fb:90:02:8f:72:a4: fa:41:f4:01:d0:f0:3d:ef:1f:6f:b5:98:cc:ea:e5:4b:bf:b0: fd:14:98:ea:12:a6:ac:cb:b3:0a:4d:33:37:09:a5:14:cb:38: 1d:93:cf:c8:54:77:8a:1f:30:13:3a:e5:b6:7d:28:55:8e:50: 0b:a4:db:b4:03:05:1a:21:a5:d3:38:fc:24:59:4d:ce:db:47: 17:f6:d8:aa:57:43:64:41:9d:67:e2:e8:a7:b4:64:a9:f7:95: 7b:33:aa:59:2d:a4:6b:6f:e7:cd:dd:68:f5:06:1d:44:4f:99: 70:56:fe:a0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoRmr5yL80tbXSIl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk YjE5ZjM1N2ItNThhNi00OGUxLTllMzItYmZiZmQ1YzdjOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YiL4fEkzVlDdlnxcT7/YF3xK6n/3BT9JzV4 F19D1px1zm7OtRVmC3SmemFWCXwHJTTuAhKuNFWr8Q06xJ4G8T8S4Cirh0qRBfR6 Sl/swi6EbpXbEaenTVqtel9m03FBx/32nZUNCBf12XjIKx+9nMm3XxQMKfiHiIhw mTbNcCLYaa07BHLO0lE3W6M6dYK9idp37c9RPwZYoDr3Zt9Z04yHUg3uWlzMHB83 uoqDpiACgEhZX0MDF36jX8Ci6pn7isMoAF+6QhAmGIfQMsfej9D30I1ys7r7dYEm YxjASlW1IPXLY+FQdNRxbkkO7WdHpltE4iH6ZovPj3tEgRhkNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC7GvnzvC9J7H3818QT40CvzGLnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkMzhjZGEtN2Q0My0z NjFiLThlZTMtZGFiM2UwNDg3MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCjBNy19rxJMgqM8rJwJHrVF9AFvoI4hbPMwBLy Lhr9y8Cl6bPI3NX1CvgO+Y3lFd8Vh80KIQ3EXK2FQrxePtTekIGNMzWkmZJSBeHH 9ZEfzbqQrA4/8vLHg+yddlQOMDuxBrhNFcFj84CiVeUCCN6WEMRg1ZXI8i8I+Ml5 V6nTUxvP0I9YUMlY8oD7kAKPcqT6QfQB0PA97x9vtZjM6uVLv7D9FJjqEqasy7MK TTM3CaUUyzgdk8/IVHeKHzATOuW2fShVjlALpNu0AwUaIaXTOPwkWU3O20cX9tiq V0NkQZ1n4uintGSp95V7M6pZLaRrb+fN3Wj1Bh1ET5lwVv6g -----END CERTIFICATE-----Generated at Fri Jun 6 19:42:28 2025 by rpki-client