$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa File: e8ecae6c-4778-387d-88a6-7131036ca703.roa (raw, json) Hash identifier: fJwcJaCR2t7hTVdoaw9WqcBXPJBUOLeagb7zRUKHtBc= Subject key identifier: 60:94:59:11:21:E4:2F:3D:48:54:7E:41:54:BC:AF:38:45:69:77:41 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C5D2125E016177B874F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa Signing time: Tue 22 Jul 2025 12:41:21 +0000 ROA not before: Tue 22 Jul 2025 12:41:21 +0000 ROA not after: Mon 20 Oct 2025 12:41:21 +0000 asID: 396695 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:5d:21:25:e0:16:17:7b:87:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:21 2025 GMT Not After : Oct 20 12:41:21 2025 GMT Subject: CN=1e3be5a6-fe0d-4eda-8649-08a396a40442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:b1:68:2c:93:34:a4:ce:69:35:62:16:2e: 8b:5d:2c:f2:b3:d8:02:1d:30:1c:25:9a:6b:d8:a9: b8:e7:75:82:d2:db:1e:7e:99:cd:03:c9:75:fb:1d: 82:2f:ba:f7:8b:d8:65:c3:03:66:2e:d2:ae:ca:05: 45:f9:30:6d:40:b5:80:15:cf:af:2f:79:93:67:b3: fc:29:9c:d6:af:5a:ab:e6:4d:2c:87:d2:a7:3d:1a: 75:4e:58:cf:4a:b3:ed:8d:33:10:09:fe:af:69:0d: df:4a:c0:9f:99:ed:e0:1f:2a:d7:cc:93:43:4f:30: 18:c6:ab:0a:d1:14:d7:ef:a7:29:ab:21:d0:34:84: 32:65:e4:e6:6a:87:06:47:39:78:02:91:59:72:2a: 2d:98:37:47:f1:9a:d5:2d:6b:f5:b9:d4:6c:83:4f: 5f:2c:a9:90:cb:79:9f:00:41:75:24:b8:0e:e4:46: 31:2d:0e:ba:c2:61:30:98:3e:38:d3:49:1a:20:0e: d0:94:73:f7:a3:15:fd:a0:c2:be:81:8e:79:b0:84: 4e:ea:7d:7a:d8:b1:e7:a6:55:93:64:b1:c3:a3:75: 3e:69:84:a9:c7:c4:22:b6:dd:c9:c8:d1:f5:3f:6e: ec:ba:b8:ed:c4:99:84:cc:03:55:d4:b6:c7:8b:81: 38:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:94:59:11:21:E4:2F:3D:48:54:7E:41:54:BC:AF:38:45:69:77:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:92:ba:e9:c8:50:fa:1c:85:73:1c:03:48:20:6b:32:91:d5: 5d:b3:5b:a9:5f:32:a5:0b:9f:63:ef:a2:63:b1:15:e6:51:ab: 81:2d:12:ba:06:3a:0a:9b:0b:35:19:b2:d1:84:c0:17:94:77: e2:52:c7:91:32:80:59:3e:ef:0d:29:fa:22:84:ce:fa:25:c0: fd:ef:69:1e:8b:50:81:9f:68:d6:3c:ea:f2:ec:a7:13:fb:e3: 80:fe:12:c6:51:df:f0:70:04:0a:e2:70:0e:88:67:14:7b:9e: ad:cb:9f:b0:cf:e6:a5:d7:fc:63:01:d8:12:73:bb:a2:66:34: 28:c1:5f:7d:83:9a:c3:61:34:4f:6a:52:66:c2:b6:79:9a:4b: ab:bf:82:23:fe:9c:35:17:4b:ae:6d:fe:5a:f1:98:34:81:41: 8c:a2:65:e6:2b:58:37:b3:69:fa:dd:02:d1:78:d8:66:9c:01: f6:b5:9a:dc:a7:f8:26:02:47:e9:2c:7e:21:90:93:6b:30:cf: 50:d5:6e:ab:cf:a4:f3:88:9b:09:45:39:e4:e1:03:c3:73:3d: 90:4c:1b:49:92:5b:0d:ed:01:90:95:75:71:ee:95:08:d1:06: 6a:a8:3e:24:e6:95:9f:04:10:ba:f3:fb:d8:9a:5e:5f:e6:74: 7a:46:1d:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXF0hJeAWF3uHT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDEyMVoXDTI1MTAyMDEyNDEyMVowLzEtMCsGA1UEAxMk MWUzYmU1YTYtZmUwZC00ZWRhLTg2NDktMDhhMzk2YTQwNDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYaxaCyTNKTOaTViFi6LXSzys9gCHTAcJZpr 2Km453WC0tsefpnNA8l1+x2CL7r3i9hlwwNmLtKuygVF+TBtQLWAFc+vL3mTZ7P8 KZzWr1qr5k0sh9KnPRp1TljPSrPtjTMQCf6vaQ3fSsCfme3gHyrXzJNDTzAYxqsK 0RTX76cpqyHQNIQyZeTmaocGRzl4ApFZciotmDdH8ZrVLWv1udRsg09fLKmQy3mf AEF1JLgO5EYxLQ66wmEwmD4400kaIA7QlHP3oxX9oMK+gY55sIRO6n162LHnplWT ZLHDo3U+aYSpx8Qitt3JyNH1P27surjtxJmEzANV1LbHi4E4LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGCUWREh5C89SFR+QVS8rzhFaXdBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZThlY2FlNmMtNDc3OC0z ODdkLTg4YTYtNzEzMTAzNmNhNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADSSuunIUPochXMcA0ggazKR1V2zW6lfMqULn2PvomOxFeZRq4Et EroGOgqbCzUZstGEwBeUd+JSx5EygFk+7w0p+iKEzvolwP3vaR6LUIGfaNY86vLs pxP744D+EsZR3/BwBAricA6IZxR7nq3Ln7DP5qXX/GMB2BJzu6JmNCjBX32DmsNh NE9qUmbCtnmaS6u/giP+nDUXS65t/lrxmDSBQYyiZeYrWDezafrdAtF42GacAfa1 mtyn+CYCR+ksfiGQk2swz1DVbqvPpPOImwlFOeThA8NzPZBMG0mSWw3tAZCVdXHu lQjRBmqoPiTmlZ8EELrz+9iaXl/mdHpGHTc= -----END CERTIFICATE-----Generated at Wed Jul 23 23:21:42 2025 by rpki-client