$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f96ba9fd-c416-3cca-9cb9-f8d15d9e1290.roa File: f96ba9fd-c416-3cca-9cb9-f8d15d9e1290.roa (raw, json) Hash identifier: nDQQUZ4NFn0F4UZsbJxUhtruy/b8/GD0pIHZvamZqhI= Subject key identifier: E6:7D:A1:00:1B:7C:71:F6:EE:50:B5:38:22:C0:AF:0D:63:12:AB:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C5930DE2954F44F3B8F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f96ba9fd-c416-3cca-9cb9-f8d15d9e1290.roa Signing time: Tue 22 Jul 2025 12:41:19 +0000 ROA not before: Tue 22 Jul 2025 12:41:19 +0000 ROA not after: Mon 20 Oct 2025 12:41:19 +0000 asID: 396549 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:59:30:de:29:54:f4:4f:3b:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:19 2025 GMT Not After : Oct 20 12:41:19 2025 GMT Subject: CN=3a95ed0b-3688-4c19-91e7-f6b38dcacdd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:0d:16:73:aa:3d:1c:66:1f:77:39:da:83: 9b:43:47:b5:6d:9f:b6:c5:61:36:1a:9b:26:af:71: fc:38:db:4b:b2:7b:ef:e8:44:da:29:d8:84:7e:be: 5c:23:a5:bf:9d:1a:95:f7:a9:03:3f:b6:d5:ab:00: 03:3a:1b:4f:61:c1:ba:87:fb:49:30:c6:56:6c:72: 89:90:e5:a1:6b:75:2b:00:d7:ec:ae:4f:68:5a:f5: 3e:8e:7d:48:14:02:9e:23:e5:76:ac:58:84:85:25: a3:53:f8:81:49:71:b6:7d:6f:0e:d6:2f:d3:cd:36: 94:aa:e7:26:a0:06:db:7d:03:34:bd:46:fc:31:fd: 13:d4:b7:18:a0:df:8b:4e:c3:a2:d0:3e:88:a7:2f: 8f:42:71:34:cb:1b:e6:23:8c:89:88:29:89:2c:26: 78:3e:92:1a:57:f5:ae:b6:61:a5:97:aa:cd:f0:06: 75:bc:5a:1e:b1:44:2c:8e:fd:8a:4d:23:ae:2a:d3: 81:9c:d3:e1:1c:9c:3b:d0:4d:86:12:99:24:3a:e1: 6d:1b:8d:ee:81:4c:eb:60:9a:9d:d3:b0:15:9d:06: 3d:1d:3c:7a:c0:9b:7c:eb:b6:c9:2a:7e:81:c3:a2: 36:52:0d:ae:72:94:3c:92:a3:70:a4:f1:e2:ad:bc: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7D:A1:00:1B:7C:71:F6:EE:50:B5:38:22:C0:AF:0D:63:12:AB:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f96ba9fd-c416-3cca-9cb9-f8d15d9e1290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:21:87:28:b0:d1:f5:37:ae:48:f0:58:95:db:2a:69:5b:b4: 48:af:89:0a:56:54:72:ca:4e:b7:1a:57:ab:fa:35:87:dd:57: c3:c9:de:61:4f:73:09:86:a9:4d:bb:97:43:65:5e:95:4f:bc: b8:c0:eb:b7:3d:a4:e4:4a:9b:57:9e:8c:ef:ea:1e:6e:13:03: 5f:00:7a:a6:06:3e:42:66:60:cb:85:96:41:d8:c2:60:4d:0f: 82:13:f4:1f:18:be:80:de:01:c8:57:e1:cd:96:92:1e:e7:e3: a6:97:51:ec:23:72:57:15:02:77:ff:f8:31:3a:9d:dd:45:36: ab:a0:0f:41:e6:c3:6c:56:01:84:77:c6:9d:af:a2:01:7a:56: 68:8d:bd:b4:d0:f2:cb:9f:41:27:e9:7f:e8:fd:7c:d2:ff:cb: 82:ad:95:f9:0d:c0:5a:70:38:ec:25:2f:85:33:e7:21:86:7a: b6:70:a1:93:21:c3:bf:91:4c:04:ce:88:ab:da:18:f1:0c:b4: d5:c7:46:37:68:7d:17:e6:b8:fb:4d:16:21:a7:ad:c2:94:e8: 3d:c5:4a:c9:d6:9a:d6:39:6e:96:3c:d3:49:8b:2e:40:5d:76: 23:11:63:9a:44:0c:cb:39:50:c1:7f:b5:df:d9:c2:49:32:ac: 0a:6b:08:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFkw3ilU9E87j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExOVoXDTI1MTAyMDEyNDExOVowLzEtMCsGA1UEAxMk M2E5NWVkMGItMzY4OC00YzE5LTkxZTctZjZiMzhkY2FjZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X4NFnOqPRxmH3c52oObQ0e1bZ+2xWE2Gpsm r3H8ONtLsnvv6ETaKdiEfr5cI6W/nRqV96kDP7bVqwADOhtPYcG6h/tJMMZWbHKJ kOWha3UrANfsrk9oWvU+jn1IFAKeI+V2rFiEhSWjU/iBSXG2fW8O1i/TzTaUqucm oAbbfQM0vUb8Mf0T1LcYoN+LTsOi0D6Ipy+PQnE0yxvmI4yJiCmJLCZ4PpIaV/Wu tmGll6rN8AZ1vFoesUQsjv2KTSOuKtOBnNPhHJw70E2GEpkkOuFtG43ugUzrYJqd 07AVnQY9HTx6wJt867bJKn6Bw6I2Ug2ucpQ8kqNwpPHirbyzuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOZ9oQAbfHH27lC1OCLArw1jEqtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk2YmE5ZmQtYzQxNi0z Y2NhLTljYjktZjhkMTVkOWUxMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK8hhyiw0fU3rkjwWJXbKmlbtEiviQpWVHLKTrcaV6v6NYfdV8PJ 3mFPcwmGqU27l0NlXpVPvLjA67c9pORKm1eejO/qHm4TA18AeqYGPkJmYMuFlkHY wmBND4IT9B8YvoDeAchX4c2Wkh7n46aXUewjclcVAnf/+DE6nd1FNqugD0Hmw2xW AYR3xp2vogF6VmiNvbTQ8sufQSfpf+j9fNL/y4KtlfkNwFpwOOwlL4Uz5yGGerZw oZMhw7+RTATOiKvaGPEMtNXHRjdofRfmuPtNFiGnrcKU6D3FSsnWmtY5bpY800mL LkBddiMRY5pEDMs5UMF/td/ZwkkyrAprCCw= -----END CERTIFICATE-----Generated at Wed Jul 23 17:14:59 2025 by rpki-client