$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6f1d95-52cf-3c88-a005-ca5cc928f193.roa File: ae6f1d95-52cf-3c88-a005-ca5cc928f193.roa (raw, json) Hash identifier: GqcxWLARfMWjCjFs5FuBFgZcy/5gOr1G8MdQ59ctifg= Subject key identifier: 78:42:40:41:B2:2A:A4:A8:92:F2:30:6A:1F:A1:FC:E0:06:6F:0B:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C57ACB5A7373598ABEA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6f1d95-52cf-3c88-a005-ca5cc928f193.roa Signing time: Tue 22 Jul 2025 12:41:18 +0000 ROA not before: Tue 22 Jul 2025 12:41:18 +0000 ROA not after: Mon 20 Oct 2025 12:41:18 +0000 asID: 396554 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:57:ac:b5:a7:37:35:98:ab:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:18 2025 GMT Not After : Oct 20 12:41:18 2025 GMT Subject: CN=2d9d6c4b-2520-4c44-8fc7-4e873f8ce74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:70:d7:b4:a3:63:d9:64:b0:9f:0b:cb:dd: f4:87:de:78:31:bd:34:d5:3c:45:a0:94:dd:41:91: b2:9f:b2:a3:f0:33:99:3b:42:40:09:75:5c:7c:ba: 54:1e:6a:b5:6b:5d:e5:8e:35:d6:b0:34:50:93:3f: bd:92:92:56:9c:be:9d:e6:21:4f:d1:57:67:b6:20: 1d:03:fd:4f:fe:5c:92:1c:31:f1:40:19:5d:1f:31: 31:39:81:09:37:e9:ab:ff:3d:33:d3:23:e5:13:56: 57:68:24:45:74:0c:11:4c:31:a5:bd:a7:78:cc:35: 09:69:7c:2a:2f:59:16:89:65:8c:30:68:16:6a:aa: 53:13:ca:b9:27:bb:4e:84:cb:64:c9:a5:59:be:0f: ae:b9:59:97:0b:30:4c:f7:7f:58:21:41:83:02:ba: d5:61:fe:c1:a7:ba:d2:be:62:16:dd:8c:a1:d7:f4: 74:1e:9b:68:0e:48:be:f3:3b:ca:ee:12:a3:e5:49: b9:46:47:6b:bc:28:b3:6b:53:25:7f:ef:3f:a1:e6: 74:31:be:31:da:ed:b6:91:8a:c9:ec:6c:89:3b:2d: f9:19:67:f9:6c:71:24:9e:54:d6:42:f3:f1:b5:ce: 36:ad:4a:d9:28:53:7a:3f:32:e0:cb:56:4c:cc:03: 66:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:42:40:41:B2:2A:A4:A8:92:F2:30:6A:1F:A1:FC:E0:06:6F:0B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae6f1d95-52cf-3c88-a005-ca5cc928f193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:e8:11:64:f7:e8:a1:6b:6d:05:bd:2c:52:a3:4c:54:d5:a0: af:ec:0c:2b:62:db:a9:0f:54:40:dc:6b:f0:e9:08:fd:d8:02: 45:2f:5b:b8:80:8b:47:49:c3:26:59:a6:95:f3:13:59:dd:8f: 50:cd:76:7f:95:bf:79:e1:03:6d:4a:d9:9b:91:3d:4d:c3:0d: 2b:8d:45:12:f0:d6:da:d2:7a:36:18:da:b5:97:cc:c8:a5:f4: 78:b0:d2:24:cc:0d:1a:4d:52:35:19:6c:37:a5:f6:98:12:4a: 83:f6:ec:2a:58:81:4d:46:a7:e0:77:5f:02:00:a8:26:5a:a4: 07:81:59:e1:cf:82:9b:94:63:55:a6:37:aa:a3:a9:c3:ce:4a: 50:c9:b3:e5:76:a0:66:4b:12:7b:f9:70:24:90:c5:5a:dd:f9: 29:99:f1:82:04:51:94:2c:48:07:39:35:a5:f1:c0:19:7d:1d: 5b:a8:c4:d5:db:d8:07:5d:33:b6:1d:ab:d9:e2:4c:ba:21:8c: bd:38:a7:e5:c6:51:fe:26:77:cf:e6:a4:ae:1f:8f:f1:b3:bd: 1a:26:4e:6a:c9:18:34:a8:c9:55:00:b5:7a:63:f4:5b:c5:03: a0:1e:81:38:d9:b9:7e:52:1e:b4:af:d1:9b:f0:1c:f2:a1:60: b7:a7:ed:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFestac3NZir6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExOFoXDTI1MTAyMDEyNDExOFowLzEtMCsGA1UEAxMk MmQ5ZDZjNGItMjUyMC00YzQ0LThmYzctNGU4NzNmOGNlNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VFw17SjY9lksJ8Ly930h954Mb001TxFoJTd QZGyn7Kj8DOZO0JACXVcfLpUHmq1a13ljjXWsDRQkz+9kpJWnL6d5iFP0VdntiAd A/1P/lySHDHxQBldHzExOYEJN+mr/z0z0yPlE1ZXaCRFdAwRTDGlvad4zDUJaXwq L1kWiWWMMGgWaqpTE8q5J7tOhMtkyaVZvg+uuVmXCzBM939YIUGDArrVYf7Bp7rS vmIW3Yyh1/R0HptoDki+8zvK7hKj5Um5RkdrvCiza1Mlf+8/oeZ0Mb4x2u22kYrJ 7GyJOy35GWf5bHEknlTWQvPxtc42rUrZKFN6PzLgy1ZMzANm7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHhCQEGyKqSokvIwah+h/OAGbwuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWU2ZjFkOTUtNTJjZi0z Yzg4LWEwMDUtY2E1Y2M5MjhmMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAInoEWT36KFrbQW9LFKjTFTVoK/sDCti26kPVEDca/DpCP3YAkUv W7iAi0dJwyZZppXzE1ndj1DNdn+Vv3nhA21K2ZuRPU3DDSuNRRLw1trSejYY2rWX zMil9Hiw0iTMDRpNUjUZbDel9pgSSoP27CpYgU1Gp+B3XwIAqCZapAeBWeHPgpuU Y1WmN6qjqcPOSlDJs+V2oGZLEnv5cCSQxVrd+SmZ8YIEUZQsSAc5NaXxwBl9HVuo xNXb2AddM7Ydq9niTLohjL04p+XGUf4md8/mpK4fj/GzvRomTmrJGDSoyVUAtXpj 9FvFA6AegTjZuX5SHrSv0ZvwHPKhYLen7bs= -----END CERTIFICATE-----Generated at Wed Jul 23 17:18:37 2025 by rpki-client