$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f058f45-09f0-389a-a405-3a82fe511131.roa File: 2f058f45-09f0-389a-a405-3a82fe511131.roa (raw, json) Hash identifier: ekQilWb7dqczwxUJNtJyq9M663r+ugZ+2JJ/3/q5W5w= Subject key identifier: B4:92:DA:06:69:72:BB:CD:20:C4:9F:8C:88:6C:07:19:A2:7F:6F:8A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C504FD0C9FC9695CF63C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f058f45-09f0-389a-a405-3a82fe511131.roa Signing time: Tue 22 Jul 2025 12:41:15 +0000 ROA not before: Tue 22 Jul 2025 12:41:15 +0000 ROA not after: Mon 20 Oct 2025 12:41:15 +0000 asID: 396675 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:50:4f:d0:c9:fc:96:95:cf:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:15 2025 GMT Not After : Oct 20 12:41:15 2025 GMT Subject: CN=715daa0c-658e-4c6c-abf4-a1d39d3bc264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:8d:20:a7:13:b9:47:c9:e1:a4:a5:d1:18: 1c:5c:34:d0:7c:38:bd:f1:a6:79:6f:32:d9:be:06: 4c:05:0e:ab:3b:22:09:d0:b3:20:de:71:42:b9:50: 09:78:72:18:0c:2a:05:46:4b:76:52:11:7d:36:ed: b1:42:94:b5:aa:a6:7f:5f:b6:bc:f1:cd:b5:9c:c4: ac:ba:21:b9:e7:7c:bd:d9:23:80:0e:ee:9d:90:3f: 12:dd:fe:c6:a6:ab:ff:33:54:0f:03:1b:e7:e6:70: 63:95:71:1f:78:93:50:f5:91:cd:0d:4b:af:70:64: 02:f4:30:b6:03:15:45:d4:4b:f1:2a:c3:4a:f5:8e: 55:8b:84:63:d7:f6:7a:38:23:f2:26:26:15:5b:58: 0d:8c:b4:c9:e4:90:a9:b4:b0:ab:23:61:e1:85:a9: 1e:c1:42:f2:cb:bd:40:7c:23:a7:06:76:27:b9:6b: 8f:14:82:d5:c7:cd:e2:ad:7b:8f:2a:62:ff:60:ba: 40:8b:82:ac:60:83:49:0d:0a:a3:33:d3:51:f3:38: 04:d0:ba:81:f9:1c:5d:8e:ae:ed:36:7c:2d:cc:21: c2:19:3e:12:48:44:85:f0:09:9b:db:ed:95:cc:22: f8:cf:d7:a1:39:07:f8:aa:7a:43:94:2d:ef:8b:ae: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:92:DA:06:69:72:BB:CD:20:C4:9F:8C:88:6C:07:19:A2:7F:6F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f058f45-09f0-389a-a405-3a82fe511131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:f0:09:d7:58:9f:3f:cb:4b:6d:3c:b6:a1:7a:1f:ca:68:13: 7d:71:f1:2d:88:08:7b:5e:72:2e:5d:17:26:3c:a6:ec:91:51: 38:5e:e5:0a:e6:e9:30:e6:65:f2:28:ce:fd:a2:d8:5d:ce:3e: dc:cc:c1:eb:b0:b3:db:fd:f1:7f:ff:3f:57:41:85:c2:30:b2: 1f:e5:d5:dd:ea:08:8d:c6:fe:26:8e:a2:32:c9:59:73:b0:a1: ea:ad:de:96:dd:05:75:95:40:cc:74:7a:cb:f0:be:89:b5:93: 79:15:32:9c:a9:20:0d:65:0b:0a:35:61:24:05:94:f3:3b:2c: fa:75:a6:c9:f4:29:f1:15:4d:37:8d:34:ff:cb:fd:30:3d:8e: d1:66:85:d9:5c:4f:c8:ed:2d:d1:7a:38:17:15:af:05:da:37: b2:39:74:77:13:41:bb:2e:6e:ab:62:02:5e:34:71:df:b2:a8: 8c:77:d8:85:80:bd:26:31:ea:fd:15:0a:9e:d6:de:a5:4f:0a: 93:cb:fb:0f:c9:f7:68:d9:b0:dd:fa:d4:18:f3:14:07:4f:3b: 29:31:a4:5c:24:c7:ce:71:2e:f5:a1:3c:72:40:93:61:a0:a5: d6:38:bc:34:e0:4b:e9:e1:96:90:89:6b:98:40:95:c3:31:cc: 57:fc:bb:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFBP0Mn8lpXPY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExNVoXDTI1MTAyMDEyNDExNVowLzEtMCsGA1UEAxMk NzE1ZGFhMGMtNjU4ZS00YzZjLWFiZjQtYTFkMzlkM2JjMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLeNIKcTuUfJ4aSl0RgcXDTQfDi98aZ5bzLZ vgZMBQ6rOyIJ0LMg3nFCuVAJeHIYDCoFRkt2UhF9Nu2xQpS1qqZ/X7a88c21nMSs uiG553y92SOADu6dkD8S3f7Gpqv/M1QPAxvn5nBjlXEfeJNQ9ZHNDUuvcGQC9DC2 AxVF1EvxKsNK9Y5Vi4Rj1/Z6OCPyJiYVW1gNjLTJ5JCptLCrI2HhhakewULyy71A fCOnBnYnuWuPFILVx83irXuPKmL/YLpAi4KsYINJDQqjM9NR8zgE0LqB+Rxdjq7t NnwtzCHCGT4SSESF8Amb2+2VzCL4z9ehOQf4qnpDlC3vi64I2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSS2gZpcrvNIMSfjIhsBxmif2+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmYwNThmNDUtMDlmMC0z ODlhLWE0MDUtM2E4MmZlNTExMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADjwCddYnz/LS208tqF6H8poE31x8S2ICHteci5dFyY8puyRUThe 5Qrm6TDmZfIozv2i2F3OPtzMweuws9v98X//P1dBhcIwsh/l1d3qCI3G/iaOojLJ WXOwoeqt3pbdBXWVQMx0esvwvom1k3kVMpypIA1lCwo1YSQFlPM7LPp1psn0KfEV TTeNNP/L/TA9jtFmhdlcT8jtLdF6OBcVrwXaN7I5dHcTQbsubqtiAl40cd+yqIx3 2IWAvSYx6v0VCp7W3qVPCpPL+w/J92jZsN361BjzFAdPOykxpFwkx85xLvWhPHJA k2GgpdY4vDTgS+nhlpCJa5hAlcMxzFf8u9c= -----END CERTIFICATE-----Generated at Wed Jul 23 17:18:02 2025 by rpki-client