$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa File: bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa (raw, json) Hash identifier: wpQYz3lUts0f/0LcWMaOy87CA0Hau7Nmg1Ben745V7I= Subject key identifier: D7:B5:7A:BD:07:78:B8:77:E8:D8:F8:D4:B0:4B:EB:2A:81:04:09:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7344D5748BB3890304D6E200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa Signing time: Tue 08 Jul 2025 12:37:25 +0000 ROA not before: Tue 08 Jul 2025 12:37:25 +0000 ROA not after: Mon 06 Oct 2025 12:37:25 +0000 asID: 396617 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:44:d5:74:8b:b3:89:03:04:d6:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 12:37:25 2025 GMT Not After : Oct 6 12:37:25 2025 GMT Subject: CN=b0dc84e5-978e-4799-98c1-d12fea48a8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:99:f6:3d:94:01:d2:fb:c1:9c:34:72:d5:80: 7c:45:e9:db:2f:93:ff:a3:f1:be:94:4d:cc:58:d3: 4b:d0:e1:32:3b:aa:41:24:71:e2:38:2f:27:88:1b: 85:da:3a:7a:74:7b:59:de:14:a1:46:ea:40:8d:d2: c1:17:2c:60:a6:69:67:39:3b:af:78:f3:4e:85:ae: 4c:01:d0:79:9d:ea:8e:9d:91:a9:40:8d:a1:34:64: b6:79:69:b2:e1:24:6d:d2:50:96:03:17:06:ca:af: 34:9b:85:a3:8e:e1:7e:3b:40:de:24:91:6b:5e:f1: f9:42:d3:08:aa:68:ba:31:b9:6a:b1:91:80:46:be: 5d:26:cb:32:d6:6e:69:4f:d6:c1:d6:68:f7:86:12: ff:0f:c1:0a:2d:c2:e0:72:df:98:07:52:73:5b:f7: 42:43:76:e6:3f:7e:51:53:82:64:5f:6c:50:be:24: 6e:a9:4c:0f:8b:2b:58:36:43:b2:09:a3:ed:b0:57: 80:69:74:90:aa:80:69:7f:da:89:e9:b3:82:cc:28: 6a:50:be:cd:48:fb:ab:94:96:cc:f6:fa:af:a3:f1: 55:6d:19:67:b6:e4:03:f1:e6:c4:05:c6:3f:ab:f2: eb:a0:a6:6f:a0:23:99:b8:9b:e6:03:99:69:8e:1e: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B5:7A:BD:07:78:B8:77:E8:D8:F8:D4:B0:4B:EB:2A:81:04:09:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf5b2ba1-7a3f-3291-b3de-20f2462cbe88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:99:6a:59:49:d4:5e:ea:a2:89:9f:28:d0:48:2e:f2:8c:33: 41:14:af:03:82:30:bb:4e:cc:ca:3b:93:99:35:6d:68:92:e4: 56:6c:ee:99:5e:7b:8a:d6:a4:a4:fa:a0:3b:64:b9:a5:88:b7: 74:15:44:76:d1:93:9c:82:9e:2c:95:89:2e:e3:a6:18:c3:5d: 29:bd:c6:6a:5a:00:0f:e6:ba:fa:87:72:32:6c:66:22:44:45: 10:dc:0a:8c:8e:4e:27:db:60:16:57:f0:69:49:c2:d8:ca:35: 66:95:1d:72:04:9c:b5:8b:c8:e8:81:a8:ed:3a:42:32:0e:8a: 16:a5:21:ea:12:d2:18:d2:3a:36:1e:b1:a0:ed:20:9e:ed:78: f9:9a:cf:32:d2:0a:c2:a4:0f:19:f5:2a:25:73:ad:3f:25:ac: b5:a9:46:6d:53:3d:32:e0:1a:c3:b0:f6:58:d0:e1:95:22:a4: dc:dc:5f:b8:65:34:54:29:05:f6:30:d2:2a:90:60:67:b3:23: 84:e7:c3:09:4f:7d:6e:ef:cb:ac:98:ce:34:a0:6d:a1:83:46: 80:58:66:18:db:25:f4:b8:bd:47:3b:a4:80:80:a9:57:f6:73: 79:48:aa:37:55:88:9d:1b:a0:9b:ee:a0:02:97:a9:0a:49:a1: 08:cb:a7:d2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzRNV0i7OJAwTW4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEyMzcyNVoXDTI1MTAwNjEyMzcyNVowLzEtMCsGA1UEAxMk YjBkYzg0ZTUtOTc4ZS00Nzk5LTk4YzEtZDEyZmVhNDhhOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJn2PZQB0vvBnDRy1YB8RenbL5P/o/G+lE3M WNNL0OEyO6pBJHHiOC8niBuF2jp6dHtZ3hShRupAjdLBFyxgpmlnOTuvePNOha5M AdB5neqOnZGpQI2hNGS2eWmy4SRt0lCWAxcGyq80m4WjjuF+O0DeJJFrXvH5QtMI qmi6MblqsZGARr5dJssy1m5pT9bB1mj3hhL/D8EKLcLgct+YB1JzW/dCQ3bmP35R U4JkX2xQviRuqUwPiytYNkOyCaPtsFeAaXSQqoBpf9qJ6bOCzChqUL7NSPurlJbM 9vqvo/FVbRlntuQD8ebEBcY/q/LroKZvoCOZuJvmA5lpjh6dCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNe1er0HeLh36Nj41LBL6yqBBAmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY1YjJiYTEtN2EzZi0z MjkxLWIzZGUtMjBmMjQ2MmNiZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCZallJ1F7qoomfKNBILvKMM0EUrwOCMLtOzMo7k5k1bWiS5FZs 7plee4rWpKT6oDtkuaWIt3QVRHbRk5yCniyViS7jphjDXSm9xmpaAA/muvqHcjJs ZiJERRDcCoyOTifbYBZX8GlJwtjKNWaVHXIEnLWLyOiBqO06QjIOihalIeoS0hjS OjYesaDtIJ7tePmazzLSCsKkDxn1KiVzrT8lrLWpRm1TPTLgGsOw9ljQ4ZUipNzc X7hlNFQpBfYw0iqQYGezI4TnwwlPfW7vy6yYzjSgbaGDRoBYZhjbJfS4vUc7pICA qVf2c3lIqjdViJ0boJvuoAKXqQpJoQjLp9I= -----END CERTIFICATE-----Generated at Thu Jul 10 13:41:35 2025 by rpki-client