$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2403cd3c-2159-32f3-8def-325a374751c9.roa File: 2403cd3c-2159-32f3-8def-325a374751c9.roa (raw, json) Hash identifier: nBJZs+OJVZvESEOtHvyR0Lfez9+gIREOy5RYcCmfWyc= Subject key identifier: C5:C9:0A:D0:8F:25:40:5D:A8:55:98:A6:B4:DB:1E:5C:B7:80:48:B4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A84124CA4320ED582D13E1B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2403cd3c-2159-32f3-8def-325a374751c9.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 396588 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4c:a4:32:0e:d5:82:d1:3e:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b6991c63-ad1b-44d3-9665-677a2e0ee970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:41:6d:3c:16:a7:9c:42:d2:62:f4:8c:a9: 86:f8:f2:bc:82:df:5d:44:a1:9e:8f:1b:44:52:d4: 3c:23:a1:a6:68:e6:84:dd:77:9c:19:fd:97:bb:d2: dc:9c:80:85:95:25:cb:20:7e:d2:13:2d:9c:10:05: 7d:c1:91:ea:e3:7f:d1:e5:5c:51:24:31:31:4b:44: 95:44:07:55:95:06:71:63:36:a7:79:f2:70:79:06: fc:ee:1c:f7:b7:e7:76:2f:0a:13:51:fa:96:7a:eb: dc:35:47:53:5c:90:be:14:f5:56:11:ec:52:82:86: c2:a2:34:ab:a9:4b:6a:15:80:37:f4:57:df:a5:f4: 95:20:96:d9:60:98:91:df:0b:5c:32:6f:df:62:15: 84:b5:e9:09:a9:11:99:95:9e:48:5e:7f:d2:eb:5e: eb:98:dc:34:83:3a:6b:af:35:ae:c0:35:9e:96:9f: a7:02:2d:08:d5:5f:2e:0a:40:2c:9d:7d:da:49:15: 1f:0f:06:ad:e2:42:79:5a:a5:7f:19:47:06:98:5d: 48:1b:dc:00:9c:f8:02:bc:51:21:66:d8:e4:6f:e3: 2a:a6:a2:bb:e2:81:a0:c2:24:f8:1c:7d:4f:3c:4b: 53:9e:c4:96:20:aa:5f:a2:38:55:86:23:a8:ea:9a: 7a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C9:0A:D0:8F:25:40:5D:A8:55:98:A6:B4:DB:1E:5C:B7:80:48:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2403cd3c-2159-32f3-8def-325a374751c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:be:cd:ba:c7:2c:c0:5e:21:b1:53:1b:d6:f1:18:ba:05:91: 67:f4:35:0d:e0:a5:f0:5d:ff:47:93:0c:87:a5:c0:ea:d4:8b: 28:d9:fb:42:07:d4:7e:14:0a:96:18:b5:59:65:a2:6c:cd:21: 8c:b2:02:22:42:1b:10:07:20:68:f1:4b:83:e9:2e:15:fa:89: 8f:f3:55:19:ea:97:0c:92:ce:3c:8c:0c:d4:ad:c3:72:62:d9: 40:f2:a4:7c:71:69:37:68:44:c7:ff:e9:58:97:73:7f:67:37: 5e:fc:66:d5:94:99:39:0f:7c:f1:2e:7a:13:64:d0:cb:8e:bc: 55:a4:ac:02:3a:86:74:3c:ce:85:76:b5:7d:1b:b5:95:ae:7d: 33:a7:80:79:a8:a5:f1:32:49:47:21:57:b6:69:2e:87:ed:d7: f5:f2:bf:eb:f9:7c:70:7e:25:4d:22:78:49:f1:13:71:ec:d1: 8c:51:a4:f9:ce:c1:d7:65:3c:be:45:f8:26:7a:33:b2:25:51: 5c:27:d7:12:86:66:0f:ae:8d:59:d9:82:38:ae:79:07:71:ef: 51:1c:2f:eb:24:4f:b9:82:ef:e9:9e:f1:39:62:3c:4b:0a:eb: 7b:1f:4d:10:6f:a0:4c:04:5b:d5:3f:40:7d:c9:44:f7:1c:f5: 46:25:cf:e3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqEEkykMg7VgtE+G4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjY5OTFjNjMtYWQxYi00NGQzLTk2NjUtNjc3YTJlMGVlOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhZBbTwWp5xC0mL0jKmG+PK8gt9dRKGejxtE UtQ8I6GmaOaE3XecGf2Xu9LcnICFlSXLIH7SEy2cEAV9wZHq43/R5VxRJDExS0SV RAdVlQZxYzanefJweQb87hz3t+d2LwoTUfqWeuvcNUdTXJC+FPVWEexSgobCojSr qUtqFYA39FffpfSVIJbZYJiR3wtcMm/fYhWEtekJqRGZlZ5IXn/S617rmNw0gzpr rzWuwDWelp+nAi0I1V8uCkAsnX3aSRUfDwat4kJ5WqV/GUcGmF1IG9wAnPgCvFEh Ztjkb+MqpqK74oGgwiT4HH1PPEtTnsSWIKpfojhVhiOo6pp6VQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMXJCtCPJUBdqFWYprTbHly3gEi0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQwM2NkM2MtMjE1OS0z MmYzLThkZWYtMzI1YTM3NDc1MWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCwvs26xyzAXiGxUxvW8Ri6BZFn9DUN4KXwXf9H kwyHpcDq1Iso2ftCB9R+FAqWGLVZZaJszSGMsgIiQhsQByBo8UuD6S4V+omP81UZ 6pcMks48jAzUrcNyYtlA8qR8cWk3aETH/+lYl3N/Zzde/GbVlJk5D3zxLnoTZNDL jrxVpKwCOoZ0PM6FdrV9G7WVrn0zp4B5qKXxMklHIVe2aS6H7df18r/r+XxwfiVN InhJ8RNx7NGMUaT5zsHXZTy+RfgmejOyJVFcJ9cShmYPro1Z2YI4rnkHce9RHC/r JE+5gu/pnvE5YjxLCut7H00Qb6BMBFvVP0B9yUT3HPVGJc/j -----END CERTIFICATE-----Generated at Wed Jul 23 23:54:42 2025 by rpki-client