$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cb093d-a8c4-3ef6-90ba-b962a56c26b4.roa File: 04cb093d-a8c4-3ef6-90ba-b962a56c26b4.roa (raw, json) Hash identifier: F9eDpOW0K5RAtSmAm65J4dAwOWWTQxtjstZQ2YtD2FE= Subject key identifier: 1B:19:F9:93:7B:8E:67:C1:A1:F4:0F:A1:4F:77:EC:1B:91:91:CE:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1B9CF66D687C40F6D4E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cb093d-a8c4-3ef6-90ba-b962a56c26b4.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 36618 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b9:cf:66:d6:87:c4:0f:6d:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=f9c64598-e1d9-4a5a-a7bf-285c7219643e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:36:52:c9:8c:fd:b0:61:a1:c1:4e:9f:2c:34: 37:f1:06:f2:66:93:a9:f7:62:69:56:0c:52:83:b3: 47:60:65:9d:4b:24:29:e0:68:e2:b0:26:21:0a:87: 83:95:6a:66:5c:54:20:7e:6b:b6:38:ea:08:9a:b4: b9:50:f9:cd:4c:9e:9f:99:46:28:d8:fe:d2:1b:72: a0:32:c0:2e:d2:bc:b3:05:7f:3c:e5:1c:02:e1:d9: dc:04:5c:8c:19:f7:5b:da:d6:18:64:f1:1c:fb:93: 3f:26:5b:e5:30:d4:ee:c5:ec:f4:88:46:bc:ba:c1: 5e:94:75:ca:8d:5b:cc:05:9d:34:c9:55:81:ed:43: 9a:a8:f0:7a:07:ad:ba:0e:fb:94:0e:8c:05:35:56: 08:b8:9e:3e:17:b9:73:3e:92:da:e7:3e:94:a6:6a: fa:8c:67:99:86:66:18:6f:a9:8c:fd:6c:81:d0:e7: 58:14:87:53:4d:1d:f1:db:a8:55:74:32:bf:d6:87: e7:ac:1a:da:1b:a4:98:46:e5:47:00:bd:2f:11:72: b5:c4:22:b3:e2:a0:76:75:12:9b:bd:29:0e:56:4f: 1d:d5:a4:a6:7f:d2:3c:fb:54:52:de:5a:ae:f4:54: c8:2f:53:1d:9b:75:8a:82:ad:4e:ca:e8:b0:60:15: ec:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:19:F9:93:7B:8E:67:C1:A1:F4:0F:A1:4F:77:EC:1B:91:91:CE:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cb093d-a8c4-3ef6-90ba-b962a56c26b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6f:7e:5c:b3:1a:55:8c:4d:d3:0d:9f:43:6f:24:1f:31:69: 3c:3d:c6:81:1f:be:8f:49:35:78:57:bd:96:bb:4f:ae:d7:67: 99:9c:b0:d8:24:d2:20:c7:79:fb:f3:11:ab:0b:1d:c2:7e:6d: 0e:5f:d4:99:a4:b3:a3:41:b9:d6:95:e5:22:ee:93:2f:38:aa: 0c:1c:c8:68:6e:28:22:36:2c:61:33:d0:93:90:76:70:cc:40: e3:3f:f9:85:02:8c:40:2f:12:95:b4:eb:94:46:e3:29:81:4c: e6:1c:2f:0a:13:4e:20:df:a7:74:eb:4a:75:4d:75:b1:71:c3: df:de:ba:51:42:3a:55:da:03:02:4e:ff:78:d4:fa:fb:8b:8c: 0c:d7:6f:b6:fb:e4:88:fd:0c:de:d6:34:76:58:82:28:bd:e1: af:f1:c8:6b:9c:d5:0a:db:39:21:2e:0b:74:4e:fa:85:08:10: e4:46:f8:7b:ee:5d:e1:97:c8:07:6e:f0:12:85:85:c8:87:80: 15:eb:8a:c2:dd:f5:78:8d:c1:e2:26:2e:c0:d0:99:d3:22:52: e8:b1:4b:21:29:4a:9d:95:9e:bd:96:b5:1b:25:6b:9b:35:38: 0c:b0:62:67:72:1a:5c:6a:cb:74:78:03:af:49:3a:6d:20:a3: 8b:a9:93:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bnPZtaHxA9tToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjljNjQ1OTgtZTFkOS00YTVhLWE3YmYtMjg1YzcyMTk2NDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjZSyYz9sGGhwU6fLDQ38QbyZpOp92JpVgxS g7NHYGWdSyQp4GjisCYhCoeDlWpmXFQgfmu2OOoImrS5UPnNTJ6fmUYo2P7SG3Kg MsAu0ryzBX885RwC4dncBFyMGfdb2tYYZPEc+5M/JlvlMNTuxez0iEa8usFelHXK jVvMBZ00yVWB7UOaqPB6B626DvuUDowFNVYIuJ4+F7lzPpLa5z6Upmr6jGeZhmYY b6mM/WyB0OdYFIdTTR3x26hVdDK/1ofnrBraG6SYRuVHAL0vEXK1xCKz4qB2dRKb vSkOVk8d1aSmf9I8+1RS3lqu9FTIL1Mdm3WKgq1OyuiwYBXs9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBsZ+ZN7jmfBofQPoU937BuRkc4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDRjYjA5M2QtYThjNC0z ZWY2LTkwYmEtYjk2MmE1NmMyNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFvflyzGlWMTdMNn0NvJB8xaTw9xoEfvo9JNXhXvZa7T67XZ5mc sNgk0iDHefvzEasLHcJ+bQ5f1Jmks6NBudaV5SLuky84qgwcyGhuKCI2LGEz0JOQ dnDMQOM/+YUCjEAvEpW065RG4ymBTOYcLwoTTiDfp3TrSnVNdbFxw9/eulFCOlXa AwJO/3jU+vuLjAzXb7b75Ij9DN7WNHZYgii94a/xyGuc1QrbOSEuC3RO+oUIEORG +HvuXeGXyAdu8BKFhciHgBXrisLd9XiNweImLsDQmdMiUuixSyEpSp2Vnr2WtRsl a5s1OAywYmdyGlxqy3R4A69JOm0go4upkxc= -----END CERTIFICATE-----Generated at Wed Sep 10 17:49:54 2025 by rpki-client