$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d97605a-5430-3995-a5f1-203f2b01cd0c.roa File: 2d97605a-5430-3995-a5f1-203f2b01cd0c.roa (raw, json) Hash identifier: Vn31K++NDqWJ/NPP57rFuxCw5xPXY1Xkip7RHIVAXa4= Subject key identifier: 82:40:92:49:FB:73:3E:74:7D:40:CA:B9:1F:80:C7:94:2A:9B:BC:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1B4653EA1936FAD439D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d97605a-5430-3995-a5f1-203f2b01cd0c.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 396610 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b4:65:3e:a1:93:6f:ad:43:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=f359a34b-dc44-4176-b4e4-97c807b60d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f0:cc:94:c4:0f:23:5c:88:49:1d:af:0a:79: 7b:ce:77:1f:88:39:fb:22:5a:36:f0:d5:68:4b:9e: 7f:88:4c:02:51:dd:59:ad:e3:d0:72:09:4f:4c:5d: cb:15:d1:63:9d:de:c5:1c:31:ed:8b:22:d5:6d:0e: 61:ca:b5:4d:26:25:7b:5b:d6:b3:76:11:df:95:4f: 9e:7b:43:fc:c3:f9:1d:0f:25:0a:00:4b:2c:84:4b: 8b:b9:11:17:e5:67:88:58:18:89:5d:cc:5b:7b:ee: 67:42:db:97:86:0f:c7:b1:d3:5a:89:a8:d4:82:ad: 44:62:e1:56:88:55:91:8f:9f:90:ac:b5:0f:2f:63: bc:01:72:c4:d5:ca:1d:d0:b1:19:55:02:1c:bc:00: ff:f2:74:3c:68:68:8c:76:38:72:93:22:93:3d:d7: 2e:1c:ec:49:7b:a5:f0:e1:ab:60:46:03:16:2a:80: 0d:db:33:a6:1f:0f:ff:e7:e4:55:8e:50:9a:2d:34: dc:1b:38:de:8a:71:0a:f5:30:30:a4:8a:6e:21:81: a5:a7:8e:7b:ab:6e:db:82:a3:fc:99:19:be:5f:2e: 82:cb:f8:4e:53:cf:b5:4b:67:f9:b3:30:44:19:a6: 2a:58:b5:bb:d2:35:bc:4b:72:1e:e7:1e:f3:3b:6f: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:40:92:49:FB:73:3E:74:7D:40:CA:B9:1F:80:C7:94:2A:9B:BC:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d97605a-5430-3995-a5f1-203f2b01cd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:84:fa:f3:4d:ef:8a:43:6d:7e:af:a7:f4:39:63:fd:6a:fe: c7:48:e5:66:40:32:3f:3e:8e:32:bf:ad:2e:a7:d5:16:31:ab: a6:8e:73:49:5b:6d:7c:9f:db:59:ce:27:12:56:a5:27:75:4f: 40:ef:d4:50:ef:d6:54:a3:3c:6e:f1:fa:f8:ff:b9:ea:51:93: a4:d8:47:42:34:97:7d:0c:4f:c2:27:64:76:61:65:57:95:fe: 36:92:7b:22:82:32:86:7b:2b:e9:4c:05:64:fc:a2:f7:10:2e: 0b:c2:a0:13:41:c4:d5:49:3d:b2:1f:d5:bb:5f:99:d9:b8:73: 6a:b2:87:7d:9b:30:a9:ed:fd:3d:e0:58:ea:f1:84:7d:97:16: b1:09:c2:ec:9e:08:8d:de:3c:8e:54:23:66:3c:82:f7:3a:e2: 95:df:f3:5d:1a:15:01:ca:b8:e2:72:b9:95:15:03:f2:1b:24: 27:d8:ea:aa:ed:97:9f:2d:9d:f9:7f:da:0a:43:cc:ac:2b:75: 04:be:c5:88:64:91:f0:41:36:93:b7:d8:d7:87:17:fa:c1:1e: aa:e8:4b:87:39:b8:e5:8a:f5:4a:b3:2c:70:e8:52:45:34:3f: 76:ad:55:ea:a9:50:9a:86:f1:5e:e2:7e:19:0e:eb:8e:9b:93: 8e:00:e5:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bRlPqGTb61DnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZjM1OWEzNGItZGM0NC00MTc2LWI0ZTQtOTdjODA3YjYwZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPDMlMQPI1yISR2vCnl7zncfiDn7Ilo28NVo S55/iEwCUd1ZrePQcglPTF3LFdFjnd7FHDHtiyLVbQ5hyrVNJiV7W9azdhHflU+e e0P8w/kdDyUKAEsshEuLuREX5WeIWBiJXcxbe+5nQtuXhg/HsdNaiajUgq1EYuFW iFWRj5+QrLUPL2O8AXLE1cod0LEZVQIcvAD/8nQ8aGiMdjhykyKTPdcuHOxJe6Xw 4atgRgMWKoAN2zOmHw//5+RVjlCaLTTcGzjeinEK9TAwpIpuIYGlp457q27bgqP8 mRm+Xy6Cy/hOU8+1S2f5szBEGaYqWLW70jW8S3Ie5x7zO2/EqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIJAkkn7cz50fUDKuR+Ax5Qqm7xfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQ5NzYwNWEtNTQzMC0z OTk1LWE1ZjEtMjAzZjJiMDFjZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKiE+vNN74pDbX6vp/Q5Y/1q/sdI5WZAMj8+jjK/rS6n1RYxq6aO c0lbbXyf21nOJxJWpSd1T0Dv1FDv1lSjPG7x+vj/uepRk6TYR0I0l30MT8InZHZh ZVeV/jaSeyKCMoZ7K+lMBWT8ovcQLgvCoBNBxNVJPbIf1btfmdm4c2qyh32bMKnt /T3gWOrxhH2XFrEJwuyeCI3ePI5UI2Y8gvc64pXf810aFQHKuOJyuZUVA/IbJCfY 6qrtl58tnfl/2gpDzKwrdQS+xYhkkfBBNpO32NeHF/rBHqroS4c5uOWK9UqzLHDo UkU0P3atVeqpUJqG8V7ifhkO646bk44A5cA= -----END CERTIFICATE-----Generated at Wed Sep 10 20:50:44 2025 by rpki-client