$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c01dad-6171-3fc3-ad22-c0d0a925e81e.roa File: 38c01dad-6171-3fc3-ad22-c0d0a925e81e.roa (raw, json) Hash identifier: G1Dr7wodgs228C51XdKZV6GiIlEUYZiyhbtRwF0EHLU= Subject key identifier: E5:DA:C6:B5:32:04:B1:B3:A9:D8:C7:4D:9B:11:29:04:0F:22:ED:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7344D0C089491E9944EA5670 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c01dad-6171-3fc3-ad22-c0d0a925e81e.roa Signing time: Tue 08 Jul 2025 12:37:23 +0000 ROA not before: Tue 08 Jul 2025 12:37:23 +0000 ROA not after: Mon 06 Oct 2025 12:37:23 +0000 asID: 36631 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:44:d0:c0:89:49:1e:99:44:ea:56:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 12:37:23 2025 GMT Not After : Oct 6 12:37:23 2025 GMT Subject: CN=258d211f-cfac-41b6-b2fd-186d4047fb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:91:96:d1:aa:f2:4a:eb:7f:b6:1a:d5:f5:c1: b8:ac:31:a8:01:91:db:6b:26:f2:35:4f:8e:b5:5e: 92:3d:20:ea:99:7b:c5:73:15:80:1a:fd:4d:ab:b7: 8a:6c:86:22:90:4c:ab:c8:f6:4d:79:79:b4:41:25: d8:20:e1:b8:0e:c9:00:4f:57:9d:de:a9:1c:29:c5: 26:c6:dc:b3:f8:0e:96:86:88:89:38:f8:a5:ae:1a: c5:d3:a2:7c:0c:17:fa:00:fc:40:f5:9c:5d:dd:c2: ef:51:fa:e9:e2:b3:ac:74:81:bc:b2:c5:5f:78:2f: 7f:40:44:d8:f3:46:3a:46:29:d4:b9:1c:4c:5a:05: 40:0c:70:0d:f9:0f:23:26:d5:09:7c:d8:a4:8e:4f: f4:f7:bf:a1:f9:de:1b:ea:0e:b5:af:20:9c:42:80: 23:44:e5:d3:a5:d8:c2:38:ef:55:34:40:30:c2:3f: 6a:42:68:18:bb:a0:de:9f:e2:99:ba:25:64:0a:c0: 16:7a:6c:95:0c:5f:90:d6:da:bc:f3:5d:32:23:a6: c8:2e:91:85:fe:1b:1c:90:f8:e6:0a:37:08:98:7d: 6a:6b:00:22:85:b6:8f:39:3c:51:bd:d0:0f:1d:d0: 97:c3:44:4d:b1:50:43:72:0f:99:63:6a:d0:89:cf: db:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:C6:B5:32:04:B1:B3:A9:D8:C7:4D:9B:11:29:04:0F:22:ED:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38c01dad-6171-3fc3-ad22-c0d0a925e81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b2:59:d5:e8:04:52:af:9f:d3:75:37:0b:d1:19:b7:63:da: 77:d8:68:df:61:2d:d3:99:c2:a9:ed:87:99:83:37:98:45:56: 08:36:f2:a7:bf:48:52:4c:87:0b:14:39:79:63:83:03:70:36: ff:fb:e8:f7:a7:52:96:82:a2:b1:93:47:a9:e6:3c:e4:43:4a: 18:6a:be:d6:b5:45:20:8d:9d:72:7c:12:aa:43:0c:15:9e:1f: c8:d4:b1:d7:78:81:72:e8:25:d8:72:50:c2:8a:df:a6:45:26: e9:09:fd:45:55:77:e3:53:f9:36:97:ed:20:47:92:38:3a:ba: 70:4b:f1:72:33:e1:38:78:c7:13:93:82:ec:cd:58:c7:6b:dd: 30:6d:42:4b:8b:c0:a9:51:5e:86:04:cd:75:78:29:1e:6e:96: 68:3c:67:e7:f3:a6:b1:b5:4a:b1:ab:7c:67:56:41:21:14:d7: 21:63:03:87:eb:50:7d:07:ca:89:8c:e7:b8:07:1b:d8:f0:68: 0f:9e:86:1a:08:76:0b:dd:ac:f5:d8:18:ee:71:95:7a:13:82: e3:4c:a2:3c:3a:cf:93:e0:17:78:c7:38:e7:f4:a7:3a:bd:f4: 95:52:d4:66:07:4d:7e:6a:38:2a:d3:e3:67:aa:70:8b:35:fd: 79:61:40:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzRNDAiUkemUTqVnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEyMzcyM1oXDTI1MTAwNjEyMzcyM1owLzEtMCsGA1UEAxMk MjU4ZDIxMWYtY2ZhYy00MWI2LWIyZmQtMTg2ZDQwNDdmYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZGW0arySut/thrV9cG4rDGoAZHbaybyNU+O tV6SPSDqmXvFcxWAGv1Nq7eKbIYikEyryPZNeXm0QSXYIOG4DskAT1ed3qkcKcUm xtyz+A6WhoiJOPilrhrF06J8DBf6APxA9Zxd3cLvUfrp4rOsdIG8ssVfeC9/QETY 80Y6RinUuRxMWgVADHAN+Q8jJtUJfNikjk/097+h+d4b6g61ryCcQoAjROXTpdjC OO9VNEAwwj9qQmgYu6Den+KZuiVkCsAWemyVDF+Q1tq8810yI6bILpGF/hsckPjm CjcImH1qawAihbaPOTxRvdAPHdCXw0RNsVBDcg+ZY2rQic/bqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOXaxrUyBLGzqdjHTZsRKQQPIu10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzhjMDFkYWQtNjE3MS0z ZmMzLWFkMjItYzBkMGE5MjVlODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCyWdXoBFKvn9N1NwvRGbdj2nfYaN9hLdOZwqnth5mDN5hFVgg2 8qe/SFJMhwsUOXljgwNwNv/76PenUpaCorGTR6nmPORDShhqvta1RSCNnXJ8EqpD DBWeH8jUsdd4gXLoJdhyUMKK36ZFJukJ/UVVd+NT+TaX7SBHkjg6unBL8XIz4Th4 xxOTguzNWMdr3TBtQkuLwKlRXoYEzXV4KR5ulmg8Z+fzprG1SrGrfGdWQSEU1yFj A4frUH0HyomM57gHG9jwaA+ehhoIdgvdrPXYGO5xlXoTguNMojw6z5PgF3jHOOf0 pzq99JVS1GYHTX5qOCrT42eqcIs1/XlhQG0= -----END CERTIFICATE-----Generated at Thu Jul 10 04:35:09 2025 by rpki-client