$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0038ff8b-4d59-3136-aaac-3e3ace933fe0.roa File: 0038ff8b-4d59-3136-aaac-3e3ace933fe0.roa (raw, json) Hash identifier: xYYfjdJ+asujYrMUC0rRSDy/cdKMvS4amZ6iHj6BKPs= Subject key identifier: 34:A4:53:6C:82:AC:FE:F4:4C:7E:3E:9B:9E:B4:6F:45:5A:7C:12:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1807005C126679856632A180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0038ff8b-4d59-3136-aaac-3e3ace933fe0.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 36617 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:07:00:5c:12:66:79:85:66:32:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=4efdb678-98d3-4e7a-84c6-0b9b1c09102c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:0d:e6:6d:cf:58:85:62:55:73:aa:0e:4b: c8:9a:16:56:1b:dd:f2:03:19:0c:cf:3c:21:ad:0a: ea:30:d6:a6:f0:09:64:bc:28:96:f2:3a:96:8e:c5: 4b:a1:6f:49:77:c3:e2:4f:1a:a2:d4:29:18:2f:72: 91:4e:dc:4e:9d:14:06:65:41:26:61:19:2e:cc:43: 6f:e4:16:8b:27:6e:a3:76:53:18:08:d1:0e:1a:72: fd:aa:2b:f0:67:b8:98:ac:e5:31:76:f8:49:18:db: 52:cb:3e:30:71:d6:cb:43:38:c3:a8:84:b6:0b:9b: 57:8d:25:86:f2:29:97:cb:6b:76:c7:88:5d:e3:1f: 8a:d2:d0:a4:df:4d:12:97:6b:5e:5c:9e:a2:cb:ed: 27:1c:f3:93:1f:3a:94:7f:c8:d2:b9:cf:26:f1:02: 24:4d:46:e9:2e:b5:c2:0f:9e:77:ed:45:c6:e7:79: 12:f5:d9:89:58:70:66:67:f3:01:c7:b9:05:e9:96: 2c:3d:1b:41:af:ad:0a:a5:ef:4b:32:32:41:75:0e: 40:df:1c:c1:ed:c0:3f:a1:ed:66:42:51:a8:23:b4: 11:1b:cd:ef:cd:32:95:de:d4:5b:a5:d8:30:55:08: 48:1d:9f:74:3d:f9:7a:d1:fc:7c:6d:52:cd:af:8f: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A4:53:6C:82:AC:FE:F4:4C:7E:3E:9B:9E:B4:6F:45:5A:7C:12:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0038ff8b-4d59-3136-aaac-3e3ace933fe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:15:be:a7:bb:d9:d3:4f:22:fe:19:1d:3c:65:5b:a3:7c:99: c0:22:5f:1b:c3:a5:ff:7d:7e:2f:94:9d:3a:73:0d:de:bb:fe: 45:f0:cb:40:5b:6c:b0:94:09:9a:79:ce:91:57:ed:36:43:a6: f0:0d:e6:43:cc:5d:5d:ef:c5:a3:52:a3:14:e2:4e:cc:0e:07: 17:e1:36:3d:1a:0f:5d:5d:7b:d7:6e:98:c5:c8:45:be:71:40: 79:63:fe:c1:12:20:9d:f4:e7:38:c1:91:fc:0f:f4:ea:fc:8c: 3f:af:cd:cf:db:ef:80:9c:b8:f6:ba:f3:dc:33:68:99:ba:b9: 15:5c:d7:80:49:0a:85:f9:e6:5e:40:66:22:e5:47:7a:9b:61: 27:6d:69:7a:af:62:7b:47:b7:08:fb:35:b2:8d:de:6e:7e:b7: 77:b4:f5:39:97:a5:03:58:e9:15:4b:80:86:0b:a4:ab:1f:91: 65:5f:0e:cb:30:26:e6:e6:25:ef:13:4b:fd:1c:2f:55:a5:e3: 90:00:21:c5:a0:2d:43:f3:99:64:2e:85:a5:16:fa:8c:dd:f4: f1:ff:f0:3a:94:89:7f:e1:6c:26:58:b2:5c:9c:1b:59:be:03: 04:9d:18:2a:29:a1:92:ef:38:65:e9:14:63:36:f1:ad:76:45: b8:be:ae:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBwBcEmZ5hWYyoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NGVmZGI2NzgtOThkMy00ZTdhLTg0YzYtMGI5YjFjMDkxMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaoN5m3PWIViVXOqDkvImhZWG93yAxkMzzwh rQrqMNam8AlkvCiW8jqWjsVLoW9Jd8PiTxqi1CkYL3KRTtxOnRQGZUEmYRkuzENv 5BaLJ26jdlMYCNEOGnL9qivwZ7iYrOUxdvhJGNtSyz4wcdbLQzjDqIS2C5tXjSWG 8imXy2t2x4hd4x+K0tCk300Sl2teXJ6iy+0nHPOTHzqUf8jSuc8m8QIkTUbpLrXC D5537UXG53kS9dmJWHBmZ/MBx7kF6ZYsPRtBr60Kpe9LMjJBdQ5A3xzB7cA/oe1m QlGoI7QRG83vzTKV3tRbpdgwVQhIHZ90Pfl60fx8bVLNr49ixwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDSkU2yCrP70TH4+m560b0VafBKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDAzOGZmOGItNGQ1OS0z MTM2LWFhYWMtM2UzYWNlOTMzZmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFMVvqe72dNPIv4ZHTxlW6N8mcAiXxvDpf99fi+UnTpzDd67/kXw y0BbbLCUCZp5zpFX7TZDpvAN5kPMXV3vxaNSoxTiTswOBxfhNj0aD11de9dumMXI Rb5xQHlj/sESIJ305zjBkfwP9Or8jD+vzc/b74CcuPa689wzaJm6uRVc14BJCoX5 5l5AZiLlR3qbYSdtaXqvYntHtwj7NbKN3m5+t3e09TmXpQNY6RVLgIYLpKsfkWVf DsswJubmJe8TS/0cL1Wl45AAIcWgLUPzmWQuhaUW+ozd9PH/8DqUiX/hbCZYslyc G1m+AwSdGCopoZLvOGXpFGM28a12Rbi+rg8= -----END CERTIFICATE-----Generated at Wed Sep 10 17:47:58 2025 by rpki-client