$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8a3a87f-081d-3595-899d-a06e96659714.roa File: a8a3a87f-081d-3595-899d-a06e96659714.roa (raw, json) Hash identifier: GzkAS6fZn8RhDOLWcQWCmTOGnGxWSmQwKrRf1i9wAlc= Subject key identifier: 3A:27:1D:0B:10:6C:17:6D:C1:76:89:4D:9F:2F:CC:8A:65:CE:23:45 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C578A90B08D46EDF78900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8a3a87f-081d-3595-899d-a06e96659714.roa Signing time: Tue 22 Jul 2025 12:41:18 +0000 ROA not before: Tue 22 Jul 2025 12:41:18 +0000 ROA not after: Mon 20 Oct 2025 12:41:18 +0000 asID: 396692 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:57:8a:90:b0:8d:46:ed:f7:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:18 2025 GMT Not After : Oct 20 12:41:18 2025 GMT Subject: CN=7a6b3532-d2e8-4911-88ab-715c7d0aa72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:df:af:06:a2:98:1d:08:4b:4a:42:af:bb:fc: a3:00:9a:95:8c:04:6b:96:54:7c:89:d5:a4:9a:91: a0:a0:11:51:40:39:16:fc:b4:3e:7a:00:88:24:c8: b0:99:98:80:41:b5:2e:e1:34:2b:48:00:5e:87:7f: c1:9a:3b:4f:52:33:c1:e8:82:3c:f0:3d:94:05:61: 9a:0d:1b:1d:da:ba:4d:64:2b:8e:37:1e:15:06:67: ed:c3:a9:8f:2d:38:dd:61:63:8f:b3:ff:7a:4a:17: 33:03:74:65:ba:7a:b5:32:86:59:c6:4e:b3:d5:ae: 28:50:62:8d:e1:cc:96:b8:95:bb:a5:60:05:7b:e6: 34:d0:b8:9a:25:03:90:27:55:11:72:55:7d:50:29: fc:58:60:6c:4c:3f:54:e9:0b:9f:54:b3:e9:28:82: df:2f:e5:87:d3:1d:27:62:51:9e:e0:bb:74:91:d2: 4e:73:f3:f9:3e:25:7f:9b:db:64:5b:4e:f8:bc:81: 28:c9:35:b5:e8:63:27:03:f6:7e:ea:3d:0d:f6:0d: 9a:3c:84:be:3d:9f:7c:f8:04:53:e0:e6:26:38:73: 64:31:54:0c:91:56:b9:94:b0:84:46:41:61:fb:73: 89:03:79:d4:42:29:be:30:8e:3b:f1:7f:4c:27:93: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:27:1D:0B:10:6C:17:6D:C1:76:89:4D:9F:2F:CC:8A:65:CE:23:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8a3a87f-081d-3595-899d-a06e96659714.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:85:43:9a:31:4b:44:b0:22:6c:77:52:7a:60:d8:a4:da:67: 20:d4:34:ca:4e:21:82:ea:d9:77:14:92:40:e1:bb:cb:8f:f9: 3a:68:64:6b:cd:3d:0d:51:70:9c:c8:cd:83:d2:2f:32:e7:ac: c6:e4:05:18:a7:98:26:a8:ca:3a:35:20:d3:5f:dd:49:9d:19: b6:1f:ab:22:98:bc:8e:65:7b:b2:3d:18:de:91:29:3b:02:90: 90:20:3c:73:30:f7:03:d1:3c:39:db:ef:4f:89:c3:48:e6:12: 49:c1:47:35:d4:d5:1d:7e:47:b9:f4:4a:45:ac:36:e6:40:6a: 04:8e:04:72:cb:54:40:de:f5:c4:97:4d:7c:c3:12:79:d2:68: 93:73:e0:2c:12:8e:63:66:20:93:50:fd:af:10:32:37:84:7d: fe:e7:7f:94:4e:e2:48:3c:d8:67:a6:4b:1b:e7:38:98:72:59: 02:fb:54:11:b3:0e:5e:b3:6c:71:e6:e9:cc:7f:72:3c:e9:39: 35:d1:59:b6:ee:0f:03:e8:01:37:38:52:59:60:68:33:2e:19: b8:e6:83:64:53:0d:c3:7c:82:25:76:01:0c:3a:43:c0:c0:f1: 2a:e7:ee:97:8c:e8:58:9f:4a:ae:04:c6:03:82:3a:0f:44:c9: a0:d6:b6:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFeKkLCNRu33iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExOFoXDTI1MTAyMDEyNDExOFowLzEtMCsGA1UEAxMk N2E2YjM1MzItZDJlOC00OTExLTg4YWItNzE1YzdkMGFhNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9+vBqKYHQhLSkKvu/yjAJqVjARrllR8idWk mpGgoBFRQDkW/LQ+egCIJMiwmZiAQbUu4TQrSABeh3/BmjtPUjPB6II88D2UBWGa DRsd2rpNZCuONx4VBmftw6mPLTjdYWOPs/96ShczA3Rlunq1MoZZxk6z1a4oUGKN 4cyWuJW7pWAFe+Y00LiaJQOQJ1URclV9UCn8WGBsTD9U6QufVLPpKILfL+WH0x0n YlGe4Lt0kdJOc/P5PiV/m9tkW074vIEoyTW16GMnA/Z+6j0N9g2aPIS+PZ98+ART 4OYmOHNkMVQMkVa5lLCERkFh+3OJA3nUQim+MI478X9MJ5MV/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDonHQsQbBdtwXaJTZ8vzIplziNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThhM2E4N2YtMDgxZC0z NTk1LTg5OWQtYTA2ZTk2NjU5NzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ+FQ5oxS0SwImx3Unpg2KTaZyDUNMpOIYLq2XcUkkDhu8uP+Tpo ZGvNPQ1RcJzIzYPSLzLnrMbkBRinmCaoyjo1INNf3UmdGbYfqyKYvI5le7I9GN6R KTsCkJAgPHMw9wPRPDnb70+Jw0jmEknBRzXU1R1+R7n0SkWsNuZAagSOBHLLVEDe 9cSXTXzDEnnSaJNz4CwSjmNmIJNQ/a8QMjeEff7nf5RO4kg82GemSxvnOJhyWQL7 VBGzDl6zbHHm6cx/cjzpOTXRWbbuDwPoATc4UllgaDMuGbjmg2RTDcN8giV2AQw6 Q8DA8Srn7peM6FifSq4ExgOCOg9EyaDWtu8= -----END CERTIFICATE-----Generated at Wed Jul 23 17:18:39 2025 by rpki-client