$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d417eb-e661-3321-8974-4ed3fd3f3960.roa File: 08d417eb-e661-3321-8974-4ed3fd3f3960.roa (raw, json) Hash identifier: hkqWyWVDvD6mPyiDxXBP5os6HQvLRwmhFFq9PU9OJxw= Subject key identifier: 0D:1D:85:5C:DF:2D:DA:FC:C1:A2:84:50:2F:3E:84:BE:F7:6E:BF:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C4FF3AE077802BA2E9680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d417eb-e661-3321-8974-4ed3fd3f3960.roa Signing time: Tue 22 Jul 2025 12:41:15 +0000 ROA not before: Tue 22 Jul 2025 12:41:15 +0000 ROA not after: Mon 20 Oct 2025 12:41:15 +0000 asID: 36627 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:4f:f3:ae:07:78:02:ba:2e:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:15 2025 GMT Not After : Oct 20 12:41:15 2025 GMT Subject: CN=f6d3b6bc-9d44-4064-a004-8f8e955dca41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:00:ec:b9:5a:c1:5a:2e:80:0f:10:2b:70:2c: e3:ef:0f:ab:e4:fe:82:78:ff:29:c1:7e:f7:1e:1f: f3:f0:07:22:bd:a0:34:dc:5d:76:74:d2:4b:f7:35: 40:67:a9:22:f6:a3:ec:56:28:b0:0b:ff:0e:af:dc: 26:8e:42:f6:15:e0:47:45:92:a7:03:6f:a3:a5:cf: e3:f4:59:3f:86:d9:06:6c:c1:96:c2:f9:ab:50:7e: eb:c2:cc:80:66:86:89:bd:9e:33:2b:d7:20:1b:82: a6:3b:ee:b7:d3:9e:4d:b9:0d:1f:4e:f3:52:68:79: 5b:d3:b2:31:b7:d6:9c:07:80:a4:09:56:f3:f0:84: 3a:7c:2c:70:1d:b9:e1:77:cc:7a:5c:d4:4e:ee:4f: a6:fd:c8:b5:59:91:7c:fb:a9:8b:1a:b7:98:62:7c: 9b:93:25:7d:13:70:b0:d7:1f:fb:56:bf:a5:17:ff: 68:0a:87:88:c0:49:4f:73:94:8e:8e:70:59:74:b2: f6:06:33:20:d6:05:3c:97:68:e0:d4:ca:9f:f9:5c: 12:c7:04:b2:e4:d2:33:e0:36:54:5b:71:e4:02:7e: c7:dd:54:05:7e:3a:af:d8:fe:a0:b6:5b:92:3d:70: 00:6c:9c:d4:61:80:42:d5:1a:31:3a:55:2f:23:c6: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:1D:85:5C:DF:2D:DA:FC:C1:A2:84:50:2F:3E:84:BE:F7:6E:BF:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d417eb-e661-3321-8974-4ed3fd3f3960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:03:18:9e:95:1c:96:8e:cb:09:18:94:df:02:1d:91:68:22: 54:6f:2c:ba:1e:17:92:d2:3d:e0:d2:cd:88:46:5f:8c:a3:77: 03:84:bf:d1:ca:db:bc:d3:51:24:ab:ac:aa:ef:40:a7:8e:2b: 78:bf:05:26:9d:e8:d1:5f:ee:4a:e9:7a:cb:02:c7:aa:19:ed: c0:9e:18:a0:82:37:c7:d3:93:8b:2a:2e:3a:26:dd:c2:b4:14: 46:09:b0:e3:8f:4c:34:f3:fe:ab:e2:4c:40:96:57:fb:72:e7: 9c:00:ca:c3:bb:49:e2:54:29:79:a8:d0:c4:b3:58:54:1f:36: 2e:69:11:17:3a:da:52:b1:9f:8a:8e:73:53:04:49:71:0a:ef: f1:b7:cd:ee:f2:cb:9b:f9:0a:0f:55:ba:68:16:de:ab:fd:53: 14:a8:73:b5:4a:e8:4c:bf:86:47:77:e0:ab:bd:45:8c:1d:95: 09:e5:b0:45:d3:09:42:1d:1a:0b:77:77:bd:7b:69:f2:5c:47: 4c:c0:32:a6:ea:d9:b9:47:2b:3c:ec:59:56:ee:75:b8:67:31: f8:e7:fe:57:6e:22:b4:f3:2b:98:06:11:20:6f:a3:8a:48:ca: 2b:52:05:76:cb:02:9c:e0:99:22:0d:49:e0:3e:cc:a6:8e:b0: 7b:dd:8c:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXE/zrgd4ArouloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExNVoXDTI1MTAyMDEyNDExNVowLzEtMCsGA1UEAxMk ZjZkM2I2YmMtOWQ0NC00MDY0LWEwMDQtOGY4ZTk1NWRjYTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ADsuVrBWi6ADxArcCzj7w+r5P6CeP8pwX73 Hh/z8AcivaA03F12dNJL9zVAZ6ki9qPsViiwC/8Or9wmjkL2FeBHRZKnA2+jpc/j 9Fk/htkGbMGWwvmrUH7rwsyAZoaJvZ4zK9cgG4KmO+63055NuQ0fTvNSaHlb07Ix t9acB4CkCVbz8IQ6fCxwHbnhd8x6XNRO7k+m/ci1WZF8+6mLGreYYnybkyV9E3Cw 1x/7Vr+lF/9oCoeIwElPc5SOjnBZdLL2BjMg1gU8l2jg1Mqf+VwSxwSy5NIz4DZU W3HkAn7H3VQFfjqv2P6gtluSPXAAbJzUYYBC1RoxOlUvI8bfZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA0dhVzfLdr8waKEUC8+hL73br9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDhkNDE3ZWItZTY2MS0z MzIxLTg5NzQtNGVkM2ZkM2YzOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHgDGJ6VHJaOywkYlN8CHZFoIlRvLLoeF5LSPeDSzYhGX4yjdwOE v9HK27zTUSSrrKrvQKeOK3i/BSad6NFf7krpessCx6oZ7cCeGKCCN8fTk4sqLjom 3cK0FEYJsOOPTDTz/qviTECWV/ty55wAysO7SeJUKXmo0MSzWFQfNi5pERc62lKx n4qOc1MESXEK7/G3ze7yy5v5Cg9VumgW3qv9UxSoc7VK6Ey/hkd34Ku9RYwdlQnl sEXTCUIdGgt3d717afJcR0zAMqbq2blHKzzsWVbudbhnMfjn/lduIrTzK5gGESBv o4pIyitSBXbLApzgmSINSeA+zKaOsHvdjCo= -----END CERTIFICATE-----Generated at Fri Jul 25 01:00:51 2025 by rpki-client