$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce45641-76c7-3248-938e-aa63918c4eca.roa File: 7ce45641-76c7-3248-938e-aa63918c4eca.roa (raw, json) Hash identifier: H+QgdZTWGIkOyOSLpcFFXH4mqlv2Pog8LCdolbn0YGg= Subject key identifier: E9:3D:C0:06:BD:97:5A:E1:1F:24:F4:42:89:71:B5:02:6F:58:DB:54 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C570C39F661BE01AE9840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce45641-76c7-3248-938e-aa63918c4eca.roa Signing time: Tue 22 Jul 2025 12:41:18 +0000 ROA not before: Tue 22 Jul 2025 12:41:18 +0000 ROA not after: Mon 20 Oct 2025 12:41:18 +0000 asID: 36626 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:57:0c:39:f6:61:be:01:ae:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:18 2025 GMT Not After : Oct 20 12:41:18 2025 GMT Subject: CN=c7d5f7ec-d5de-4d83-bbc1-e35b83183747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:68:d3:0f:01:04:7f:b3:aa:f7:7b:ad:7c:2a: 1a:8a:4f:98:d6:78:66:90:df:75:b7:90:9e:3e:c6: ca:4b:cf:9e:a0:35:12:56:e7:08:e2:98:bb:ee:a8: 7a:01:15:9a:67:17:71:8f:30:c5:c0:7d:1a:dd:ea: 61:84:fc:48:1c:15:c8:ac:33:65:c4:6e:46:f2:d1: d0:ca:11:07:68:82:6d:0a:f9:05:0c:1e:42:51:36: 67:b4:aa:b9:ac:bf:a8:23:b5:21:a6:2f:4b:c4:62: 1b:61:96:c3:e0:c2:ef:81:b7:ca:35:28:4e:12:ed: 0f:d2:dd:11:f2:8d:d2:c1:ee:58:04:ca:ed:1b:b4: 31:1a:d8:51:25:ad:15:8e:53:c7:6a:e5:9e:34:65: 95:33:d9:45:01:a2:06:c2:24:b4:f5:17:7d:c4:fc: 7c:32:6a:40:94:ba:bd:f7:45:c1:0b:99:52:f8:46: 36:ef:8f:45:67:5a:95:f6:ca:06:19:1d:ff:37:55: 74:6d:59:3f:d0:9b:4a:76:09:fb:c4:10:4b:6c:33: f9:f6:7f:0c:92:74:56:9d:7d:dc:29:32:c2:82:c4: 4d:98:99:f1:27:83:e4:67:4b:1b:90:d7:c2:dd:c3: da:a2:05:ee:09:7b:46:4e:ec:60:e6:ac:fc:37:d6: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:C0:06:BD:97:5A:E1:1F:24:F4:42:89:71:B5:02:6F:58:DB:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ce45641-76c7-3248-938e-aa63918c4eca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:bb:e8:17:4a:b8:8c:f5:17:d7:f0:b0:bc:21:8b:6a:dc:dc: 20:13:3c:36:64:be:79:f8:bf:0f:06:3c:41:7d:52:5f:62:00: 33:af:3b:ce:f6:8e:c2:f2:74:1c:5d:48:0a:ee:ea:41:54:65: e1:47:ad:7a:9b:d6:87:36:af:0d:1f:ef:b3:5c:8d:64:2b:87: 16:2e:c1:f7:07:77:89:e4:6c:58:69:e1:0b:5d:aa:78:e1:a5: ac:0c:98:21:9b:21:dc:c9:31:48:49:3e:3b:7e:07:f9:22:47: 86:92:90:02:77:45:4d:08:a1:16:9c:45:2a:c6:88:1a:47:35: d9:8a:14:0a:b8:12:39:f5:66:1b:2a:33:42:53:61:d2:ec:29: aa:f8:64:ea:9a:bf:3e:69:74:e3:fe:d0:50:31:d3:4c:b2:4d: 9b:69:41:33:26:74:b7:56:74:65:0d:80:d9:7e:d3:18:6d:55: ba:a7:8c:58:22:2d:b9:99:f0:d3:96:25:96:99:a9:13:91:0f: b1:05:3e:32:e4:3b:91:32:45:cb:d6:19:42:e8:d2:1c:19:cf: 26:4f:43:cb:79:42:f4:52:a6:59:d7:3c:4e:b3:e2:f7:bb:33: c8:fa:ff:36:04:0d:c0:17:27:c1:0d:8e:55:90:ca:46:37:85: e5:01:2f:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFcMOfZhvgGumEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExOFoXDTI1MTAyMDEyNDExOFowLzEtMCsGA1UEAxMk YzdkNWY3ZWMtZDVkZS00ZDgzLWJiYzEtZTM1YjgzMTgzNzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2jTDwEEf7Oq93utfCoaik+Y1nhmkN91t5Ce PsbKS8+eoDUSVucI4pi77qh6ARWaZxdxjzDFwH0a3ephhPxIHBXIrDNlxG5G8tHQ yhEHaIJtCvkFDB5CUTZntKq5rL+oI7Uhpi9LxGIbYZbD4MLvgbfKNShOEu0P0t0R 8o3Swe5YBMrtG7QxGthRJa0VjlPHauWeNGWVM9lFAaIGwiS09Rd9xPx8MmpAlLq9 90XBC5lS+EY2749FZ1qV9soGGR3/N1V0bVk/0JtKdgn7xBBLbDP59n8MknRWnX3c KTLCgsRNmJnxJ4PkZ0sbkNfC3cPaogXuCXtGTuxg5qz8N9ahAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOk9wAa9l1rhHyT0QolxtQJvWNtUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2NlNDU2NDEtNzZjNy0z MjQ4LTkzOGUtYWE2MzkxOGM0ZWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF676BdKuIz1F9fwsLwhi2rc3CATPDZkvnn4vw8GPEF9Ul9iADOv O872jsLydBxdSAru6kFUZeFHrXqb1oc2rw0f77NcjWQrhxYuwfcHd4nkbFhp4Qtd qnjhpawMmCGbIdzJMUhJPjt+B/kiR4aSkAJ3RU0IoRacRSrGiBpHNdmKFAq4Ejn1 ZhsqM0JTYdLsKar4ZOqavz5pdOP+0FAx00yyTZtpQTMmdLdWdGUNgNl+0xhtVbqn jFgiLbmZ8NOWJZaZqRORD7EFPjLkO5EyRcvWGULo0hwZzyZPQ8t5QvRSplnXPE6z 4ve7M8j6/zYEDcAXJ8ENjlWQykY3heUBL7o= -----END CERTIFICATE-----Generated at Wed Jul 23 23:27:27 2025 by rpki-client