$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8cad12d-fc63-311a-840b-f76cb3b26807.roa File: b8cad12d-fc63-311a-840b-f76cb3b26807.roa (raw, json) Hash identifier: K35Wz7CsA0sYn62JottKDKQ7E/xIpu4lrzw3fKug1S8= Subject key identifier: 60:C4:6D:73:F8:FA:F5:20:E4:09:D3:9B:0B:5D:9E:91:38:AE:84:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C5AACE1552D916A999100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8cad12d-fc63-311a-840b-f76cb3b26807.roa Signing time: Tue 22 Jul 2025 12:41:20 +0000 ROA not before: Tue 22 Jul 2025 12:41:20 +0000 ROA not after: Mon 20 Oct 2025 12:41:20 +0000 asID: 32651 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:5a:ac:e1:55:2d:91:6a:99:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:20 2025 GMT Not After : Oct 20 12:41:20 2025 GMT Subject: CN=faf462e1-d1c2-4463-8f7a-d85f1764a570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cf:9a:f4:fa:db:80:96:21:e0:33:71:30:ef: df:7f:16:99:47:23:43:1e:65:96:bc:9c:4f:93:c8: a9:04:02:05:7f:e4:54:6e:2c:da:38:82:5e:89:93: d4:a2:87:6a:96:81:6d:81:3d:50:02:db:31:04:b0: f9:98:cc:ae:fa:8b:a1:ae:9c:b7:b5:13:ca:dd:df: 87:bd:a3:88:e8:4d:0a:4d:a4:cc:df:4e:4f:89:23: f3:0e:54:52:66:9f:9b:1b:a4:e2:bd:cf:ed:45:05: 36:13:f6:eb:6f:ca:d9:35:6d:b8:75:3c:ab:28:71: 91:22:eb:6c:2b:03:ee:ad:1a:2a:45:55:d7:3f:ce: 13:20:2f:08:97:54:a2:f3:1c:9b:66:4f:d5:8e:26: 66:b0:91:0c:6a:cf:e9:5e:0f:85:8c:08:8d:40:49: 97:f6:b9:6d:82:a7:c4:25:ed:9b:86:8e:c6:61:19: 0a:d4:8e:2f:c6:1e:c6:61:fc:e0:d1:4c:65:70:25: 04:2e:56:27:65:d5:e8:32:ce:69:2b:ac:d0:43:1c: bc:04:b1:59:22:b7:59:66:d3:71:59:31:23:61:47: 3a:ca:42:0f:2f:f2:7e:ae:03:4a:4f:db:ea:84:dd: 36:e7:2f:e8:d4:e3:e3:6f:20:05:b0:76:5f:df:db: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C4:6D:73:F8:FA:F5:20:E4:09:D3:9B:0B:5D:9E:91:38:AE:84:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8cad12d-fc63-311a-840b-f76cb3b26807.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:42:8a:1a:dc:2d:ea:f3:30:c7:1b:c4:1c:60:4e:b0:75:64: c0:5c:1a:67:94:34:4e:63:25:a8:74:7b:28:d9:98:f8:99:93: a2:df:e1:e3:ff:ef:b3:a1:a7:00:99:19:3f:77:21:14:ed:4a: d2:39:bd:48:61:77:27:93:7d:df:31:84:b1:47:5c:9c:a7:d5: bf:53:b8:77:5c:e6:d4:70:7b:e8:86:a3:b2:33:08:4c:6f:27: 84:54:10:cb:98:b3:59:28:3c:b5:24:fd:6c:3a:b9:dc:dc:04: 42:1d:fb:7d:2e:34:63:f4:71:4f:95:dc:f9:c2:50:ae:53:7c: a6:96:2a:7c:b4:12:71:35:50:39:28:ee:e2:c6:d2:18:e1:0c: 9f:bd:84:f8:a2:e3:ed:f7:6c:11:ba:62:95:f5:d1:dd:79:f2: 24:50:9b:f9:b7:e4:25:dc:0f:20:98:49:31:49:d9:32:3a:21: c8:fa:dd:42:f2:c4:f2:d0:15:d1:3f:12:06:ec:2a:8e:a8:c9: 3d:77:00:fe:bc:42:44:2c:fb:e9:00:eb:b5:7a:93:e4:4a:9c: 11:0f:2b:06:95:96:94:b9:1b:8d:67:8c:eb:ae:77:b9:a3:40: ca:45:fc:ac:ec:a3:aa:9a:c6:f7:ba:37:22:f9:f6:e9:a6:59: 06:d1:92:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFqs4VUtkWqZkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDEyMFoXDTI1MTAyMDEyNDEyMFowLzEtMCsGA1UEAxMk ZmFmNDYyZTEtZDFjMi00NDYzLThmN2EtZDg1ZjE3NjRhNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8+a9PrbgJYh4DNxMO/ffxaZRyNDHmWWvJxP k8ipBAIFf+RUbizaOIJeiZPUoodqloFtgT1QAtsxBLD5mMyu+ouhrpy3tRPK3d+H vaOI6E0KTaTM305PiSPzDlRSZp+bG6Tivc/tRQU2E/brb8rZNW24dTyrKHGRIuts KwPurRoqRVXXP84TIC8Il1Si8xybZk/VjiZmsJEMas/pXg+FjAiNQEmX9rltgqfE Je2bho7GYRkK1I4vxh7GYfzg0UxlcCUELlYnZdXoMs5pK6zQQxy8BLFZIrdZZtNx WTEjYUc6ykIPL/J+rgNKT9vqhN025y/o1OPjbyAFsHZf39tmQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGDEbXP4+vUg5AnTmwtdnpE4roRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhjYWQxMmQtZmM2My0z MTFhLTg0MGItZjc2Y2IzYjI2ODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG9CihrcLerzMMcbxBxgTrB1ZMBcGmeUNE5jJah0eyjZmPiZk6Lf 4eP/77OhpwCZGT93IRTtStI5vUhhdyeTfd8xhLFHXJyn1b9TuHdc5tRwe+iGo7Iz CExvJ4RUEMuYs1koPLUk/Ww6udzcBEId+30uNGP0cU+V3PnCUK5TfKaWKny0EnE1 UDko7uLG0hjhDJ+9hPii4+33bBG6YpX10d158iRQm/m35CXcDyCYSTFJ2TI6Icj6 3ULyxPLQFdE/EgbsKo6oyT13AP68QkQs++kA67V6k+RKnBEPKwaVlpS5G41njOuu d7mjQMpF/Kzso6qaxve6NyL59ummWQbRkqE= -----END CERTIFICATE-----Generated at Wed Jul 23 23:42:42 2025 by rpki-client