$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3c8c7e-2546-3517-a2f1-dd801b03efc9.roa File: 3a3c8c7e-2546-3517-a2f1-dd801b03efc9.roa (raw, json) Hash identifier: GCvoCxlKGpCEx1V/OeD9BOfe9CAiBwGV8oecvqbEGf0= Subject key identifier: A6:A4:2A:71:7C:E0:4A:C4:FC:6D:2A:A8:28:0B:13:81:F9:8E:3C:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1BA7B4394AF69B1E31B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3c8c7e-2546-3517-a2f1-dd801b03efc9.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40717 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:ba:7b:43:94:af:69:b1:e3:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=28212c1b-ae68-4c35-9e1a-a3e3c0d06f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:12:ee:d9:bf:43:f7:cd:6b:ad:dc:4f:dc: 52:54:43:06:3b:81:6b:20:1d:52:11:3e:c4:54:46: c8:07:a7:1a:df:f3:80:9d:0c:15:74:e9:1e:c6:e3: 6e:24:a9:c0:f5:0f:ce:b3:94:37:62:8f:03:46:2c: ce:58:88:2a:8e:f3:ad:9c:d9:76:ff:cc:f6:04:0d: 95:7d:64:9c:58:a2:70:59:53:8f:82:80:a2:1d:51: 6c:94:02:98:b4:cc:34:d6:58:42:c2:40:b6:2c:cd: 96:db:e9:33:0b:6d:7f:4a:69:72:5b:e7:9f:3d:31: c5:de:08:4c:d7:78:f1:f4:bc:47:c5:94:cc:51:5f: c1:41:1a:53:71:a4:93:35:88:3b:b1:fa:8a:46:a3: 77:57:a3:75:8a:6b:e6:b5:a2:0b:18:0a:5f:15:86: ed:2d:58:d1:d0:3f:19:ea:e4:6b:50:03:df:92:d1: f9:33:be:74:9a:9c:cb:9f:9b:3c:eb:99:8c:68:70: b0:1d:db:85:2b:a0:6f:f7:db:7d:2d:49:08:b3:75: e7:37:ed:a4:ef:e2:2b:86:e7:d0:49:91:f3:1d:04: 2b:bc:c4:e3:f1:91:75:c5:60:5b:74:e2:b4:2d:ca: 1c:81:8f:2c:45:17:b9:45:ab:4c:a3:9f:ba:5f:ff: 69:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A4:2A:71:7C:E0:4A:C4:FC:6D:2A:A8:28:0B:13:81:F9:8E:3C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a3c8c7e-2546-3517-a2f1-dd801b03efc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:65:46:33:e3:44:dd:a6:40:d6:0a:b5:cc:fa:1d:b9:a5:a2: 9c:f2:a5:5a:60:b4:09:ce:cb:7c:5d:1c:a8:a1:7f:c8:cd:32: 27:39:10:bf:46:4c:e1:0f:a4:3e:60:f2:3a:94:6e:d6:f3:9f: 84:1e:5a:d3:1a:46:a6:0a:f6:d4:c2:4a:16:2a:fc:e6:b0:88: fe:85:07:2d:49:65:7c:f5:d2:e6:c4:a1:fe:5d:77:16:04:1d: 20:76:d3:91:6b:97:f9:f2:74:f1:8b:3e:82:34:29:b7:11:73: 42:83:6c:77:70:0e:72:fa:93:01:e0:3a:40:c9:2c:82:a5:28: a2:f1:01:7c:da:6b:83:92:e9:2f:56:a6:9f:80:44:b4:af:28: 86:f8:75:c6:6d:b7:9f:05:b9:c6:39:8d:68:f6:29:d1:c2:f9: da:71:e1:54:f3:d3:07:95:3d:77:b0:99:60:e1:ac:48:8a:74: be:04:07:55:43:c9:ea:b2:08:af:0f:8b:da:aa:b9:b4:86:2c: c2:f1:26:86:8e:ed:07:9d:70:33:00:92:b8:28:5a:36:a9:eb: 91:b4:67:4f:b7:c6:a4:71:63:b0:10:6f:47:12:36:19:57:48: 5e:bb:78:e9:22:f0:c9:59:10:b8:c3:7f:cd:8e:df:04:c8:d2: 12:63:28:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bp7Q5SvabHjGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MjgyMTJjMWItYWU2OC00YzM1LTllMWEtYTNlM2MwZDA2ZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW8S7tm/Q/fNa63cT9xSVEMGO4FrIB1SET7E VEbIB6ca3/OAnQwVdOkexuNuJKnA9Q/Os5Q3Yo8DRizOWIgqjvOtnNl2/8z2BA2V fWScWKJwWVOPgoCiHVFslAKYtMw01lhCwkC2LM2W2+kzC21/SmlyW+efPTHF3ghM 13jx9LxHxZTMUV/BQRpTcaSTNYg7sfqKRqN3V6N1imvmtaILGApfFYbtLVjR0D8Z 6uRrUAPfktH5M750mpzLn5s865mMaHCwHduFK6Bv99t9LUkIs3XnN+2k7+IrhufQ SZHzHQQrvMTj8ZF1xWBbdOK0LcocgY8sRRe5RatMo5+6X/9p8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKakKnF84ErE/G0qqCgLE4H5jjxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2EzYzhjN2UtMjU0Ni0z NTE3LWEyZjEtZGQ4MDFiMDNlZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALNlRjPjRN2mQNYKtcz6HbmlopzypVpgtAnOy3xdHKihf8jNMic5 EL9GTOEPpD5g8jqUbtbzn4QeWtMaRqYK9tTCShYq/OawiP6FBy1JZXz10ubEof5d dxYEHSB205Frl/nydPGLPoI0KbcRc0KDbHdwDnL6kwHgOkDJLIKlKKLxAXzaa4OS 6S9Wpp+ARLSvKIb4dcZtt58FucY5jWj2KdHC+dpx4VTz0weVPXewmWDhrEiKdL4E B1VDyeqyCK8Pi9qqubSGLMLxJoaO7QedcDMAkrgoWjap65G0Z0+3xqRxY7AQb0cS NhlXSF67eOki8MlZELjDf82O3wTI0hJjKLY= -----END CERTIFICATE-----Generated at Wed Sep 10 17:55:55 2025 by rpki-client