$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91af3795-1bcd-37c9-802c-bb2623d53d8d.roa File: 91af3795-1bcd-37c9-802c-bb2623d53d8d.roa (raw, json) Hash identifier: /eKfPF0vUbXmU3uQa8cs6BLH0e6OWWsJRAiXIBq9PW0= Subject key identifier: BD:D3:38:36:8E:9A:66:E5:20:0F:43:76:0F:F7:10:74:81:B1:65:F6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7344D1F615117D19FF109C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91af3795-1bcd-37c9-802c-bb2623d53d8d.roa Signing time: Tue 08 Jul 2025 12:37:23 +0000 ROA not before: Tue 08 Jul 2025 12:37:23 +0000 ROA not after: Mon 06 Oct 2025 12:37:23 +0000 asID: 396561 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:44:d1:f6:15:11:7d:19:ff:10:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 12:37:23 2025 GMT Not After : Oct 6 12:37:23 2025 GMT Subject: CN=51e71b7d-eb66-4643-a283-1518b4199be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3c:ea:89:76:3c:e6:79:af:28:38:c9:2a:97: 79:1e:d8:8f:f3:fd:69:21:3f:44:00:1b:1e:be:1d: 8b:c6:b3:b0:8f:f2:6a:2d:be:39:4d:f1:c0:8e:91: a0:bf:78:c9:99:5c:d6:1f:f0:b2:be:83:77:8f:19: fd:41:15:6a:c9:28:8c:58:14:a5:ae:d7:cd:70:40: 1c:c3:f2:b4:45:a8:9a:16:99:3b:99:19:63:a7:4a: fd:a7:db:56:5f:1f:68:ed:61:10:6f:7e:02:51:a4: 43:23:2d:b2:9d:6b:26:02:1b:68:9d:cd:8a:50:ca: 42:af:6f:06:86:3c:c1:af:a4:59:bf:95:6b:72:34: ee:11:b5:a9:95:2f:15:3c:e3:18:23:2e:8b:7c:be: b4:39:a4:6a:84:08:76:02:f6:12:9f:da:0b:42:c8: 2d:05:d5:3d:d6:2c:6f:bb:67:98:09:48:90:a4:5f: 5c:f4:6f:ec:d4:6c:8f:4a:a8:3d:6d:89:35:15:9a: 05:e9:e3:b1:62:59:2b:17:20:c8:6c:ff:ee:39:5e: 25:94:f9:e5:35:b5:c1:c2:29:49:dd:99:66:a5:41: 43:99:25:17:c9:69:3a:e7:3d:43:4b:d5:a0:af:87: e2:67:1a:57:2c:e5:96:2b:ab:bf:6f:a7:74:50:65: 7d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D3:38:36:8E:9A:66:E5:20:0F:43:76:0F:F7:10:74:81:B1:65:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/91af3795-1bcd-37c9-802c-bb2623d53d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2f:56:7e:f4:f2:4b:6b:44:cb:c4:c5:99:b0:49:d6:05:81: 79:d8:1b:b1:08:8f:66:8c:64:5e:d5:40:4c:38:43:5c:2a:f4: f1:0c:82:5f:0a:61:10:2c:29:bf:de:09:31:8a:ff:c3:51:8b: 61:da:6d:ec:fa:01:9e:63:02:08:13:63:66:ca:be:a2:40:7a: f6:f0:c1:a5:91:6a:d2:af:2a:1b:58:3a:09:37:e9:4c:f6:e7: a8:80:5f:fb:24:ee:c3:3d:4c:bf:cc:3d:e7:72:f3:d1:2a:3b: 42:08:e2:1a:eb:30:e0:47:29:40:22:6c:33:41:a1:56:d1:cf: ee:0b:d2:ac:35:0a:2c:4a:d7:4f:02:56:b0:4c:d9:a7:10:da: 29:19:e6:47:f6:b6:b1:96:9c:8e:2d:af:7f:c2:36:54:a6:01: 47:71:e2:0a:80:6a:33:a9:8d:26:87:4d:4b:83:ab:64:95:aa: 07:c9:9f:b7:15:98:d6:96:c2:75:bf:e5:a3:3a:96:57:15:6e: d8:db:b9:b6:a7:c6:16:d4:52:9b:9d:38:91:7f:99:9e:b9:a6: 0b:56:1c:34:8c:e9:9e:39:dc:54:37:b1:7e:23:e5:6a:44:17: d2:8b:d3:d6:8a:67:1e:59:cd:75:ae:eb:d9:b9:8d:85:bb:5e: b8:3f:73:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzRNH2FRF9Gf8QnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEyMzcyM1oXDTI1MTAwNjEyMzcyM1owLzEtMCsGA1UEAxMk NTFlNzFiN2QtZWI2Ni00NjQzLWEyODMtMTUxOGI0MTk5YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijzqiXY85nmvKDjJKpd5HtiP8/1pIT9EABse vh2LxrOwj/JqLb45TfHAjpGgv3jJmVzWH/CyvoN3jxn9QRVqySiMWBSlrtfNcEAc w/K0RaiaFpk7mRljp0r9p9tWXx9o7WEQb34CUaRDIy2ynWsmAhtonc2KUMpCr28G hjzBr6RZv5VrcjTuEbWplS8VPOMYIy6LfL60OaRqhAh2AvYSn9oLQsgtBdU91ixv u2eYCUiQpF9c9G/s1GyPSqg9bYk1FZoF6eOxYlkrFyDIbP/uOV4llPnlNbXBwilJ 3ZlmpUFDmSUXyWk65z1DS9Wgr4fiZxpXLOWWK6u/b6d0UGV9uwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL3TODaOmmblIA9Ddg/3EHSBsWX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTFhZjM3OTUtMWJjZC0z N2M5LTgwMmMtYmIyNjIzZDUzZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACovVn708ktrRMvExZmwSdYFgXnYG7EIj2aMZF7VQEw4Q1wq9PEM gl8KYRAsKb/eCTGK/8NRi2Habez6AZ5jAggTY2bKvqJAevbwwaWRatKvKhtYOgk3 6Uz256iAX/sk7sM9TL/MPedy89EqO0II4hrrMOBHKUAibDNBoVbRz+4L0qw1CixK 108CVrBM2acQ2ikZ5kf2trGWnI4tr3/CNlSmAUdx4gqAajOpjSaHTUuDq2SVqgfJ n7cVmNaWwnW/5aM6llcVbtjbubanxhbUUpudOJF/mZ65pgtWHDSM6Z453FQ3sX4j 5WpEF9KL09aKZx5ZzXWu69m5jYW7Xrg/c00= -----END CERTIFICATE-----Generated at Thu Jul 10 12:45:49 2025 by rpki-client