$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d65a0102-c6d8-3e13-94bf-2be4e3589f36.roa File: d65a0102-c6d8-3e13-94bf-2be4e3589f36.roa (raw, json) Hash identifier: am/OgQMQcYWDYIU9RKX+0Ce5AWoDn4TlTJfPeItL0ew= Subject key identifier: 00:D7:35:E7:56:C9:2B:7D:BD:09:F6:57:80:76:A3:ED:47:2F:08:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7344CDA6E88A59DA0FD98D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d65a0102-c6d8-3e13-94bf-2be4e3589f36.roa Signing time: Tue 08 Jul 2025 12:37:21 +0000 ROA not before: Tue 08 Jul 2025 12:37:21 +0000 ROA not after: Mon 06 Oct 2025 12:37:21 +0000 asID: 396573 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:44:cd:a6:e8:8a:59:da:0f:d9:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 12:37:21 2025 GMT Not After : Oct 6 12:37:21 2025 GMT Subject: CN=40cb3c71-c8c2-4db5-8b59-89666a477662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dd:1a:c6:87:4c:3d:de:8b:cf:cc:47:ce:e6: 87:8a:f6:3e:1a:10:3e:e7:dd:9e:6c:bf:3c:b4:28: d6:83:05:de:e5:6a:ed:63:ae:62:ca:b1:38:52:ab: d3:38:34:7f:5a:93:fe:f2:f9:ec:58:75:5f:97:a0: 2e:2a:e8:1b:4c:98:c3:82:93:2d:25:bc:df:38:dd: ba:fb:85:ab:41:36:fe:94:ce:83:ec:21:4f:5a:8e: 8a:81:5d:d9:b0:ec:23:bd:d2:d7:9d:1d:fa:0b:c8: a5:17:8f:8c:d8:80:1f:ed:0e:89:38:78:14:2c:d4: d0:1e:60:bb:41:0d:57:ed:a2:2b:df:89:3a:0e:c7: 5d:38:3f:c5:f8:5c:ee:f2:cf:22:d2:84:00:65:08: ab:01:68:dc:74:34:47:60:b1:bb:a7:88:88:57:52: c7:78:b9:e2:42:77:3a:cd:66:44:45:c2:d3:09:18: 65:55:7c:54:b3:ee:15:0b:e1:b6:79:27:0b:bd:23: dd:97:48:d1:ab:e8:3d:54:a1:00:0f:02:65:7b:cb: 8a:68:be:0b:8a:6d:37:21:34:dc:81:6f:d6:74:4d: 61:64:e0:d0:42:6e:f5:25:be:40:c3:4e:8d:1e:06: fb:64:7e:42:4b:7a:47:76:51:af:07:9e:ea:cb:72: e5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D7:35:E7:56:C9:2B:7D:BD:09:F6:57:80:76:A3:ED:47:2F:08:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d65a0102-c6d8-3e13-94bf-2be4e3589f36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7e:48:bc:25:b8:d0:99:b7:f3:d8:bd:fc:27:46:c9:76:11: 26:dc:c7:4b:c6:3b:97:6a:07:38:f5:80:1e:c3:81:8a:01:bb: 57:e8:73:e6:f9:ce:c7:44:d8:91:21:c1:b8:ed:c6:40:91:15: 17:45:51:e4:7c:80:de:94:13:e6:3d:4a:56:23:cc:65:47:69: dc:0a:d9:7b:89:f4:f9:30:98:f0:ff:ed:8f:33:c2:a5:6d:b1: 36:cd:2b:2a:bb:a0:87:33:82:3b:7f:89:0d:ad:1b:bc:7d:9c: 89:54:9d:3e:17:ff:09:2b:88:48:e2:88:d2:9c:81:4c:b4:7e: d7:d6:3d:62:87:18:e6:4b:5c:f7:ea:14:2a:0a:f1:08:bf:64: 93:dd:1a:72:30:d0:bd:1d:2d:5e:f9:72:85:8e:f4:0a:d0:ed: 43:ea:a8:20:57:a9:e5:56:56:06:35:a8:b4:e1:c9:77:17:b4: 8c:a9:ed:81:a1:49:f2:3b:f3:4e:d2:9c:09:59:bc:06:25:2c: 11:80:98:fc:dc:84:6f:70:f0:d3:77:a8:1e:54:82:82:27:f5: 38:51:3e:b3:5c:9f:6d:11:4e:c9:c1:37:ef:8a:0c:d1:17:c4: 21:10:6c:99:e5:fe:5d:f2:17:bd:bd:3b:45:df:15:42:34:91: 86:b3:02:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzRM2m6IpZ2g/ZjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEyMzcyMVoXDTI1MTAwNjEyMzcyMVowLzEtMCsGA1UEAxMk NDBjYjNjNzEtYzhjMi00ZGI1LThiNTktODk2NjZhNDc3NjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN0axodMPd6Lz8xHzuaHivY+GhA+592ebL88 tCjWgwXe5WrtY65iyrE4UqvTODR/WpP+8vnsWHVfl6AuKugbTJjDgpMtJbzfON26 +4WrQTb+lM6D7CFPWo6KgV3ZsOwjvdLXnR36C8ilF4+M2IAf7Q6JOHgULNTQHmC7 QQ1X7aIr34k6DsddOD/F+Fzu8s8i0oQAZQirAWjcdDRHYLG7p4iIV1LHeLniQnc6 zWZERcLTCRhlVXxUs+4VC+G2eScLvSPdl0jRq+g9VKEADwJle8uKaL4Lim03ITTc gW/WdE1hZODQQm71Jb5Aw06NHgb7ZH5CS3pHdlGvB57qy3Ll5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFADXNedWySt9vQn2V4B2o+1HLwgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDY1YTAxMDItYzZkOC0z ZTEzLTk0YmYtMmJlNGUzNTg5ZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZ+SLwluNCZt/PYvfwnRsl2ESbcx0vGO5dqBzj1gB7DgYoBu1fo c+b5zsdE2JEhwbjtxkCRFRdFUeR8gN6UE+Y9SlYjzGVHadwK2XuJ9PkwmPD/7Y8z wqVtsTbNKyq7oIczgjt/iQ2tG7x9nIlUnT4X/wkriEjiiNKcgUy0ftfWPWKHGOZL XPfqFCoK8Qi/ZJPdGnIw0L0dLV75coWO9ArQ7UPqqCBXqeVWVgY1qLThyXcXtIyp 7YGhSfI7807SnAlZvAYlLBGAmPzchG9w8NN3qB5UgoIn9ThRPrNcn20RTsnBN++K DNEXxCEQbJnl/l3yF729O0XfFUI0kYazApQ= -----END CERTIFICATE-----Generated at Thu Jul 10 04:16:11 2025 by rpki-client