$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/925a88b3-753f-379c-ac87-5c1b94e37e92.roa File: 925a88b3-753f-379c-ac87-5c1b94e37e92.roa (raw, json) Hash identifier: iWQwgwa3shPjueDNC15OUFZdgn3pvw+4/O34TwYEUog= Subject key identifier: 17:0C:3F:CE:DE:63:3B:D4:41:E0:16:0B:5F:6C:3A:63:DB:9A:43:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A5FDD61FE4535E71979BB68E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/925a88b3-753f-379c-ac87-5c1b94e37e92.roa Signing time: Tue 01 Jul 2025 13:48:37 +0000 ROA not before: Tue 01 Jul 2025 13:48:37 +0000 ROA not after: Mon 29 Sep 2025 13:48:37 +0000 asID: 397209 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:dd:61:fe:45:35:e7:19:79:bb:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 1 13:48:37 2025 GMT Not After : Sep 29 13:48:37 2025 GMT Subject: CN=e7e76ead-ac5b-4eb1-83c2-99d6551ee352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6d:47:5d:f4:fd:2f:40:89:c6:53:20:53:87: 50:0f:85:36:d3:26:00:3a:48:5a:79:85:c2:cb:50: 22:ee:e2:9b:d0:03:9f:31:61:27:a4:9a:e3:83:a5: 35:98:9a:95:42:dd:f5:6e:f3:15:be:ec:f9:e2:06: 0a:50:0d:fa:9a:b8:d2:9c:ff:c2:64:dc:88:bd:e9: ef:b0:e4:3b:ab:99:4b:a5:4c:81:6d:7f:1d:83:15: 41:e5:2a:6a:03:c8:bd:d4:0c:b8:94:af:ff:ef:ad: 42:39:7e:da:3e:4f:22:ca:24:80:3a:8e:eb:b7:c1: 56:eb:1b:e3:3d:46:80:7b:1a:58:f0:7f:ca:70:55: f3:fd:2a:dc:1a:fe:f0:29:70:aa:f0:6b:20:0f:1d: 52:e8:41:9f:39:42:02:fc:62:f3:49:8d:4b:f8:fd: 9a:f9:6c:23:24:27:8a:f3:2f:1f:52:5b:64:20:3b: f0:68:c8:a1:28:33:36:71:8e:72:86:db:ac:12:b6: 1a:07:93:fb:97:20:a9:06:92:ba:f6:9b:e2:69:33: 25:47:81:4d:51:33:e9:be:a8:38:c8:3a:74:ef:04: 3e:6f:ff:b4:7c:df:65:04:0a:c9:5f:3a:67:b2:91: 63:b9:88:90:b8:d6:cc:67:86:24:7e:10:43:7c:52: 89:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:3F:CE:DE:63:3B:D4:41:E0:16:0B:5F:6C:3A:63:DB:9A:43:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/925a88b3-753f-379c-ac87-5c1b94e37e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:72:11:41:8e:e3:b6:22:47:f9:70:f2:7b:fc:0e:fa:3f:c3: 38:a4:db:74:67:96:23:85:d3:f8:d4:76:62:e6:74:8b:2b:f1: db:58:07:ad:8d:c2:7a:e5:71:f8:2f:bd:81:f0:6e:a4:6d:09: 3c:cf:f4:d0:41:f9:98:8b:ef:99:bb:d0:39:8f:27:2e:4c:63: 8f:e3:a7:1d:23:a8:84:e4:22:77:5c:0c:35:d8:70:e9:b7:e9: 20:3f:36:eb:e3:fe:7c:96:4b:fa:eb:75:2f:a4:17:56:7c:2c: ea:5c:60:49:ef:34:71:18:ab:5c:1e:87:dd:45:b1:54:a6:d7: f7:70:55:8d:b4:09:54:b2:ee:4f:d6:88:e8:93:33:2b:5d:fa: 9e:24:d3:19:0b:ec:ec:f4:fd:2e:f0:6f:ea:f0:c7:a3:63:24: b6:c4:e1:1e:f2:ae:68:c2:08:0e:33:f8:86:3c:3b:10:47:31: 39:cc:d4:04:f7:eb:48:05:e2:23:d5:09:5f:ce:21:c4:da:48: c7:06:78:ea:08:1a:a1:ba:31:16:df:20:f2:83:36:b1:9a:c9: 2b:84:c3:fe:a7:66:ab:94:ec:c3:3c:06:13:68:41:a0:21:22: 57:04:d3:1c:80:99:f5:62:3e:30:51:4c:76:b9:f2:d6:4e:ba: fd:c1:22:c6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpf3WH+RTXnGXm7aOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwMTEzNDgzN1oXDTI1MDkyOTEzNDgzN1owLzEtMCsGA1UEAxMk ZTdlNzZlYWQtYWM1Yi00ZWIxLTgzYzItOTlkNjU1MWVlMzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu21HXfT9L0CJxlMgU4dQD4U20yYAOkhaeYXC y1Ai7uKb0AOfMWEnpJrjg6U1mJqVQt31bvMVvuz54gYKUA36mrjSnP/CZNyIvenv sOQ7q5lLpUyBbX8dgxVB5SpqA8i91Ay4lK//761COX7aPk8iyiSAOo7rt8FW6xvj PUaAexpY8H/KcFXz/SrcGv7wKXCq8GsgDx1S6EGfOUIC/GLzSY1L+P2a+WwjJCeK 8y8fUltkIDvwaMihKDM2cY5yhtusErYaB5P7lyCpBpK69pviaTMlR4FNUTPpvqg4 yDp07wQ+b/+0fN9lBArJXzpnspFjuYiQuNbMZ4YkfhBDfFKJkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBcMP87eYzvUQeAWC19sOmPbmkOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTI1YTg4YjMtNzUzZi0z NzljLWFjODctNWMxYjk0ZTM3ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQChchFBjuO2Ikf5cPJ7/A76P8M4pNt0Z5YjhdP4 1HZi5nSLK/HbWAetjcJ65XH4L72B8G6kbQk8z/TQQfmYi++Zu9A5jycuTGOP46cd I6iE5CJ3XAw12HDpt+kgPzbr4/58lkv663UvpBdWfCzqXGBJ7zRxGKtcHofdRbFU ptf3cFWNtAlUsu5P1ojokzMrXfqeJNMZC+zs9P0u8G/q8MejYyS2xOEe8q5owggO M/iGPDsQRzE5zNQE9+tIBeIj1QlfziHE2kjHBnjqCBqhujEW3yDygzaxmskrhMP+ p2arlOzDPAYTaEGgISJXBNMcgJn1Yj4wUUx2ufLWTrr9wSLG -----END CERTIFICATE-----Generated at Thu Jul 10 11:32:28 2025 by rpki-client