$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa File: aa852c86-45ac-3800-acf4-686ccad4d9f1.roa (raw, json) Hash identifier: gB5z6ArzMm/LXLw1wVR0M6R76K+lawiqvS0FMyO568Q= Subject key identifier: B5:D5:B1:A9:C7:9D:A9:19:AA:AD:F1:BC:48:FB:4E:87:2B:B2:99:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7344CFE8416C4E68D31A2CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa Signing time: Tue 08 Jul 2025 12:37:22 +0000 ROA not before: Tue 08 Jul 2025 12:37:22 +0000 ROA not after: Mon 06 Oct 2025 12:37:22 +0000 asID: 396572 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:44:cf:e8:41:6c:4e:68:d3:1a:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 12:37:22 2025 GMT Not After : Oct 6 12:37:22 2025 GMT Subject: CN=6f955251-c233-4877-b425-dbaa9f0a2058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cb:99:8c:0a:e7:51:a0:09:8b:ed:c9:bb:0d: bc:c9:e4:87:83:07:18:3d:11:d9:a4:e0:27:6d:55: 49:a1:4f:b6:1f:93:57:85:df:9a:6b:15:5e:6a:50: ea:4c:e3:cb:89:21:d2:f7:3a:0c:6e:af:03:20:e2: 11:37:c9:b4:6c:e6:84:42:2c:ea:d5:97:7d:86:eb: 98:50:9d:95:12:d3:d1:f4:29:0f:38:7d:10:0d:3d: df:3e:0c:f7:dc:c8:e0:6d:ac:76:62:4a:b7:0c:a5: 85:ec:3d:9e:1c:65:a7:1a:52:ea:aa:f6:09:e2:87: 71:63:7d:4c:78:ac:23:03:e3:81:d3:10:ac:e1:4d: 17:30:6a:93:e3:b7:ab:d5:b0:5e:a1:90:b0:1d:f3: 4c:0b:0d:1d:c1:84:94:12:59:bc:40:03:96:1d:fa: 97:60:93:f5:a5:f9:57:6b:29:f4:98:76:c6:76:6b: f7:c5:44:9e:d7:1a:a0:f5:c2:92:0a:8d:d9:ab:a6: 51:6e:75:e7:7b:18:e0:b9:56:1a:c3:33:32:6f:fc: d8:20:97:91:52:18:eb:31:1c:23:06:27:b9:22:0d: 5d:40:27:04:90:ed:e9:a6:26:fd:f6:33:be:fd:03: df:b0:4f:36:8f:6b:87:63:9a:40:8a:45:c3:42:8c: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D5:B1:A9:C7:9D:A9:19:AA:AD:F1:BC:48:FB:4E:87:2B:B2:99:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:23:f4:7d:ab:21:ec:b2:64:64:a7:81:ad:9b:8d:a9:b3:7e: 20:45:10:ef:ad:70:1b:85:4a:b2:0b:dd:3e:37:de:a9:50:ef: f4:0a:15:f0:b0:42:25:39:95:38:6a:71:dd:0d:37:77:01:da: 42:a2:1b:14:ad:c9:9c:bc:36:00:40:dd:dc:15:8f:3c:32:9c: 80:14:97:0b:c3:40:4a:56:7a:cd:0e:8c:ff:be:41:94:84:50: b8:d7:5f:89:42:3e:cf:bc:5d:75:c6:44:a7:29:53:47:e9:8d: 9a:03:bb:d3:01:b8:66:59:3a:2f:b3:64:b1:52:da:98:7b:96: f5:28:5b:23:ca:1b:32:c8:09:cf:83:5a:41:fb:67:96:ff:fa: 2f:27:e3:af:22:1d:5f:ad:78:b4:2e:a5:01:dd:d3:df:4c:73: 0b:65:18:be:f4:cb:4f:c8:bb:4a:74:cc:25:9d:65:a2:bf:16: 08:6b:2a:fe:64:20:2b:48:77:be:48:fb:2f:65:7d:99:1a:55: 3f:89:a3:d0:c1:4d:92:ff:9d:36:ce:cd:ed:8d:d7:83:f7:a7: 84:14:84:1e:72:08:5e:09:b7:30:07:2f:99:6a:7b:db:d1:28: 37:0b:e7:a1:3a:7b:b3:1f:e2:7c:60:aa:96:3f:09:65:c3:af: 2d:2b:03:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzRM/oQWxOaNMaLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEyMzcyMloXDTI1MTAwNjEyMzcyMlowLzEtMCsGA1UEAxMk NmY5NTUyNTEtYzIzMy00ODc3LWI0MjUtZGJhYTlmMGEyMDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8uZjArnUaAJi+3Juw28yeSHgwcYPRHZpOAn bVVJoU+2H5NXhd+aaxVealDqTOPLiSHS9zoMbq8DIOIRN8m0bOaEQizq1Zd9huuY UJ2VEtPR9CkPOH0QDT3fPgz33Mjgbax2Ykq3DKWF7D2eHGWnGlLqqvYJ4odxY31M eKwjA+OB0xCs4U0XMGqT47er1bBeoZCwHfNMCw0dwYSUElm8QAOWHfqXYJP1pflX ayn0mHbGdmv3xUSe1xqg9cKSCo3Zq6ZRbnXnexjguVYawzMyb/zYIJeRUhjrMRwj Bie5Ig1dQCcEkO3ppib99jO+/QPfsE82j2uHY5pAikXDQoy7pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLXVsanHnakZqq3xvEj7TocrspmSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE4NTJjODYtNDVhYy0z ODAwLWFjZjQtNjg2Y2NhZDRkOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYj9H2rIeyyZGSnga2bjamzfiBFEO+tcBuFSrIL3T433qlQ7/QK FfCwQiU5lThqcd0NN3cB2kKiGxStyZy8NgBA3dwVjzwynIAUlwvDQEpWes0OjP++ QZSEULjXX4lCPs+8XXXGRKcpU0fpjZoDu9MBuGZZOi+zZLFS2ph7lvUoWyPKGzLI Cc+DWkH7Z5b/+i8n468iHV+teLQupQHd099McwtlGL70y0/Iu0p0zCWdZaK/Fghr Kv5kICtId75I+y9lfZkaVT+Jo9DBTZL/nTbOze2N14P3p4QUhB5yCF4JtzAHL5lq e9vRKDcL56E6e7Mf4nxgqpY/CWXDry0rA4Q= -----END CERTIFICATE-----Generated at Thu Jul 10 12:54:59 2025 by rpki-client