$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2c0662-91f6-3dfe-a6ae-33c800f79971.roa File: cf2c0662-91f6-3dfe-a6ae-33c800f79971.roa (raw, json) Hash identifier: blRS3Su5zeW7zZ043zUwHlxuKTrHxehJ+9lThIrb1nw= Subject key identifier: E2:DB:11:7D:DB:25:DB:CA:97:EE:C0:97:CA:00:21:0E:90:B6:48:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FDD5E7AF61DF8D818043C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2c0662-91f6-3dfe-a6ae-33c800f79971.roa Signing time: Tue 01 Jul 2025 13:48:35 +0000 ROA not before: Tue 01 Jul 2025 13:48:35 +0000 ROA not after: Mon 29 Sep 2025 13:48:35 +0000 asID: 36627 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:dd:5e:7a:f6:1d:f8:d8:18:04:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 13:48:35 2025 GMT Not After : Sep 29 13:48:35 2025 GMT Subject: CN=86cb996d-3cc7-4df7-b01a-81fb6d82acfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:cf:15:5a:37:8f:f9:f8:37:89:ad:31:d3: e3:08:9e:57:27:7f:a0:87:a4:23:6d:26:1a:37:42: 9f:8a:e4:75:fb:44:b5:e8:31:5e:be:e4:05:f4:45: fb:d2:cf:ad:1b:c3:3e:b1:00:a0:97:ce:a1:d9:66: 94:ae:8c:ad:b7:ae:ac:d9:b7:87:5e:37:dd:ba:aa: cf:a0:d8:cd:89:a4:9d:c1:4e:d7:77:e8:7c:bc:9e: 76:a3:4d:f0:81:45:83:d7:ea:c2:6d:d6:fb:20:38: 75:86:0f:56:6b:f2:36:6f:4f:02:40:87:91:0b:39: 2c:83:24:a8:b3:0f:5b:09:7d:8f:87:b7:54:d2:82: 23:44:7b:77:63:96:39:7a:92:e1:b5:ba:d7:08:3f: f1:11:ba:3a:62:1d:98:40:44:c0:9c:78:ba:cd:14: e6:d4:c2:b4:ff:cd:6c:9b:1a:6d:4a:27:fe:ae:3c: b4:3c:74:c4:f1:a8:57:ea:4f:11:ee:03:6e:8f:07: de:c2:f2:64:04:30:e3:68:07:ad:4a:87:07:e1:a6: 47:79:45:17:e7:b8:77:b8:ed:ca:8c:53:40:32:08: 68:b6:c1:3e:6c:d7:44:23:4b:f4:ed:cb:ac:c5:08: 7a:8e:3a:b4:7c:db:d2:33:b3:94:5f:0e:fb:b1:c3: af:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DB:11:7D:DB:25:DB:CA:97:EE:C0:97:CA:00:21:0E:90:B6:48:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf2c0662-91f6-3dfe-a6ae-33c800f79971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:85:2f:06:03:97:b4:b0:4a:f4:32:48:b3:eb:d5:38:6c:1b: 16:a1:ac:0c:a9:15:26:4e:74:d7:65:46:1b:64:07:0a:82:e1: ad:e4:c1:d5:7e:f8:f1:ea:0e:82:b9:df:01:d6:e0:fc:b5:05: 50:bc:35:09:5f:a9:b3:c6:3a:01:16:ab:5f:bc:8f:44:bc:1f: 48:d5:ff:20:9e:eb:e9:7a:62:31:3b:ca:0a:ba:a5:76:c3:cb: da:aa:0c:3a:a6:96:fe:02:d1:53:de:01:12:6f:27:f2:f7:73: be:bf:06:7e:41:51:7d:65:b7:2d:6f:bf:3e:6a:3d:12:86:97: 90:00:f9:94:81:26:fa:02:c9:2f:d4:ac:45:d9:2a:b5:18:5a: 34:9f:f0:01:31:c8:8c:6c:4f:d1:5a:1b:0f:1c:96:22:ea:2d: 1c:07:4b:d4:29:e6:10:a1:85:40:b3:07:24:2d:84:1c:fb:8f: 41:d0:5c:19:1e:5c:0a:3f:af:0c:e8:00:25:51:7a:ad:79:2b: c8:10:11:f0:1a:1b:38:d2:7f:fe:1a:1a:84:a3:a9:99:49:ca: d6:82:98:3b:0f:29:fb:ad:08:1b:13:73:a7:84:4b:f9:36:d3: 78:cc:f6:d8:5a:a8:b0:8d:50:cd:13:a5:87:bf:31:b4:b6:be: 11:e1:ef:78 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpf3V569h342BgEPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTEzNDgzNVoXDTI1MDkyOTEzNDgzNVowLzEtMCsGA1UEAxMk ODZjYjk5NmQtM2NjNy00ZGY3LWIwMWEtODFmYjZkODJhY2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxfPFVo3j/n4N4mtMdPjCJ5XJ3+gh6QjbSYa N0KfiuR1+0S16DFevuQF9EX70s+tG8M+sQCgl86h2WaUroytt66s2beHXjfduqrP oNjNiaSdwU7Xd+h8vJ52o03wgUWD1+rCbdb7IDh1hg9Wa/I2b08CQIeRCzksgySo sw9bCX2Ph7dU0oIjRHt3Y5Y5epLhtbrXCD/xEbo6Yh2YQETAnHi6zRTm1MK0/81s mxptSif+rjy0PHTE8ahX6k8R7gNujwfewvJkBDDjaAetSocH4aZHeUUX57h3uO3K jFNAMghotsE+bNdEI0v07cusxQh6jjq0fNvSM7OUXw77scOvMwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOLbEX3bJdvKl+7Al8oAIQ6QtkhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YyYzA2NjItOTFmNi0z ZGZlLWE2YWUtMzNjODAwZjc5OTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKhS8GA5e0sEr0Mkiz69U4bBsWoawMqRUmTnTX ZUYbZAcKguGt5MHVfvjx6g6Cud8B1uD8tQVQvDUJX6mzxjoBFqtfvI9EvB9I1f8g nuvpemIxO8oKuqV2w8vaqgw6ppb+AtFT3gESbyfy93O+vwZ+QVF9Zbctb78+aj0S hpeQAPmUgSb6Askv1KxF2Sq1GFo0n/ABMciMbE/RWhsPHJYi6i0cB0vUKeYQoYVA swckLYQc+49B0FwZHlwKP68M6AAlUXqteSvIEBHwGhs40n/+GhqEo6mZScrWgpg7 Dyn7rQgbE3OnhEv5NtN4zPbYWqiwjVDNE6WHvzG0tr4R4e94 -----END CERTIFICATE-----Generated at Thu Jul 10 05:11:50 2025 by rpki-client