$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa File: b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa (raw, json) Hash identifier: 00VV7lIL6oIntZH+zFvFKp8Ga868YYlojn5MZYuU/3A= Subject key identifier: 96:E9:A0:19:55:62:67:DA:F6:92:73:31:F8:5D:29:06:60:3A:D7:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C6093226BDA01C090F840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa Signing time: Tue 22 Jul 2025 12:41:23 +0000 ROA not before: Tue 22 Jul 2025 12:41:23 +0000 ROA not after: Mon 20 Oct 2025 12:41:23 +0000 asID: 396661 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:60:93:22:6b:da:01:c0:90:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:23 2025 GMT Not After : Oct 20 12:41:23 2025 GMT Subject: CN=1301759c-3f26-4a9f-a6e8-8efaaaee4572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:3b:05:36:7b:6d:33:04:3c:56:bf:6e:1a: f0:64:8a:2e:a2:41:7a:7f:a2:fa:33:14:95:39:c8: de:72:c3:39:85:c3:ec:81:8d:8a:34:82:3c:20:4d: b4:07:7a:d7:14:0f:42:50:79:37:db:85:a6:0a:13: 2c:5f:6e:9a:45:9e:e6:a6:6e:d4:1d:ac:dc:76:c0: 57:43:2e:be:a7:2e:2d:5d:f0:b6:b2:dc:f6:eb:f1: bf:40:0e:c3:63:17:73:32:af:35:74:f4:83:79:c6: fe:82:b4:2d:85:35:03:c5:6f:56:2e:28:bb:89:7b: 79:98:23:fb:1c:94:19:02:3b:0a:30:0d:9a:26:6a: bd:75:0b:c2:28:eb:2c:a1:ac:e1:d1:e4:b4:f5:f8: 37:13:c0:be:13:77:ac:ef:18:55:4c:eb:4b:54:45: 98:77:ef:ac:fa:a9:89:b6:a1:38:5e:1e:5b:b9:eb: ea:74:82:c7:04:61:bd:2c:57:83:39:e3:1d:54:94: 9a:5f:2f:9f:06:da:cf:26:43:cd:f8:4f:0f:ac:81: 77:13:af:e2:82:92:ba:a0:28:4e:7d:28:1c:74:c9: 45:46:b0:1d:d7:a3:7d:75:78:62:59:6e:39:bb:65: 33:34:d9:c3:1b:ec:eb:02:07:eb:da:27:79:67:65: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E9:A0:19:55:62:67:DA:F6:92:73:31:F8:5D:29:06:60:3A:D7:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b21e70dc-58a0-3eea-b9f3-be6d8a4e1e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:97:a6:18:f6:8f:88:1d:8e:d2:be:20:0c:c4:f8:23:c6:41: ed:b7:1e:ce:e7:e8:b4:e7:84:ca:87:d3:f7:39:a8:65:79:0b: 76:8e:d0:49:1b:59:29:5c:c7:6a:3b:81:bc:40:6b:ac:13:23: 59:19:26:b8:18:c4:6a:4d:f3:68:27:f9:d1:a2:f8:91:ec:0e: 3f:68:e5:c2:0c:28:40:66:22:c0:e7:5c:e5:53:4b:08:39:78: 83:40:34:38:a7:e4:21:04:e8:35:ae:9f:cc:52:3f:92:9d:6d: 5b:dd:a5:d4:8f:a4:24:9d:6d:2f:f6:98:2e:dc:dd:11:0d:94: 64:a0:4e:61:16:c4:4d:d2:f5:39:09:de:20:3e:1c:02:96:d0: f7:50:ac:dc:83:ab:fd:93:ea:d6:07:b6:ff:87:d9:52:68:dc: d5:c6:b6:16:b2:39:23:2c:24:4f:d5:b9:23:8c:14:00:d4:b4: 14:7a:ed:ec:ed:a5:26:55:25:88:1c:aa:0b:df:99:0c:fa:b7: a9:8f:73:de:0a:14:c9:84:2b:a5:55:63:b2:8a:be:67:e9:38: 03:d3:b4:98:28:d3:3b:75:4f:80:c6:6a:67:a4:6a:c5:98:72: c1:80:72:a4:57:97:d6:19:e2:64:27:f8:db:28:b6:7b:5e:ec: c7:20:de:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXGCTImvaAcCQ+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDEyM1oXDTI1MTAyMDEyNDEyM1owLzEtMCsGA1UEAxMk MTMwMTc1OWMtM2YyNi00YTlmLWE2ZTgtOGVmYWFhZWU0NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYs7BTZ7bTMEPFa/bhrwZIouokF6f6L6MxSV OcjecsM5hcPsgY2KNII8IE20B3rXFA9CUHk324WmChMsX26aRZ7mpm7UHazcdsBX Qy6+py4tXfC2stz26/G/QA7DYxdzMq81dPSDecb+grQthTUDxW9WLii7iXt5mCP7 HJQZAjsKMA2aJmq9dQvCKOssoazh0eS09fg3E8C+E3es7xhVTOtLVEWYd++s+qmJ tqE4Xh5buevqdILHBGG9LFeDOeMdVJSaXy+fBtrPJkPN+E8PrIF3E6/igpK6oChO fSgcdMlFRrAd16N9dXhiWW45u2UzNNnDG+zrAgfr2id5Z2XkSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJbpoBlVYmfa9pJzMfhdKQZgOtdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIxZTcwZGMtNThhMC0z ZWVhLWI5ZjMtYmU2ZDhhNGUxZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJmXphj2j4gdjtK+IAzE+CPGQe23Hs7n6LTnhMqH0/c5qGV5C3aO 0EkbWSlcx2o7gbxAa6wTI1kZJrgYxGpN82gn+dGi+JHsDj9o5cIMKEBmIsDnXOVT Swg5eINANDin5CEE6DWun8xSP5KdbVvdpdSPpCSdbS/2mC7c3RENlGSgTmEWxE3S 9TkJ3iA+HAKW0PdQrNyDq/2T6tYHtv+H2VJo3NXGthayOSMsJE/VuSOMFADUtBR6 7eztpSZVJYgcqgvfmQz6t6mPc94KFMmEK6VVY7KKvmfpOAPTtJgo0zt1T4DGamek asWYcsGAcqRXl9YZ4mQn+Nsotnte7Mcg3lQ= -----END CERTIFICATE-----Generated at Wed Jul 23 17:13:50 2025 by rpki-client