$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2189681-3312-3b1e-8b45-4af826fe7515.roa File: e2189681-3312-3b1e-8b45-4af826fe7515.roa (raw, json) Hash identifier: vsSCSCfdEXrjgwwUXSg/G8WdedZAzxy2SkHb5Aa6unM= Subject key identifier: C8:CE:43:EC:E2:61:46:09:AA:C8:BD:F3:16:E0:1E:E8:AD:AD:81:54 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7344CFD7F9D788DD0130E870 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2189681-3312-3b1e-8b45-4af826fe7515.roa Signing time: Tue 08 Jul 2025 12:37:22 +0000 ROA not before: Tue 08 Jul 2025 12:37:22 +0000 ROA not after: Mon 06 Oct 2025 12:37:22 +0000 asID: 36626 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:44:cf:d7:f9:d7:88:dd:01:30:e8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 12:37:22 2025 GMT Not After : Oct 6 12:37:22 2025 GMT Subject: CN=0ef1f0d6-87f6-4737-88f7-5ab8e90176f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:66:94:68:0d:e6:ef:be:4b:37:55:76:76:c9: 17:ea:cb:ec:be:50:36:58:0f:c2:50:a3:00:7f:1a: 63:62:25:de:71:3c:74:c9:d3:fa:28:0f:7e:0a:0f: e7:80:a7:cc:85:e1:12:ca:ab:db:cf:be:bb:07:54: aa:e0:b8:4d:55:5e:d5:e4:18:bd:33:37:30:78:65: cb:c4:fa:78:bd:09:c6:57:84:b4:5e:0b:fc:72:39: 0a:dd:1b:6a:8d:8f:83:d4:58:0e:79:bc:bc:09:01: 4c:c4:d6:8d:13:00:9a:a5:f0:1e:c2:a7:67:65:28: 3e:5d:e5:0a:b3:00:f1:32:7d:99:da:a2:fc:4c:a8: f9:ed:4c:26:82:17:69:77:12:9a:cd:fc:6f:d2:ed: 5e:79:48:59:b2:1e:e1:e4:0c:a8:fc:77:35:4c:45: 9c:7a:40:b8:f3:df:66:c2:f3:93:bf:27:47:19:a4: ae:d6:ac:e0:14:0e:da:4e:c6:40:5c:48:df:aa:ea: 66:3f:79:08:be:63:4b:06:5e:39:b9:c8:d2:be:58: 5b:f9:ac:f7:ff:93:41:bb:40:fd:0b:25:11:f9:56: 8a:2b:2e:92:4c:cc:55:42:f8:a7:c8:c4:d7:40:0d: d4:fe:4b:7a:65:41:2c:48:2b:5f:58:29:67:42:2e: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CE:43:EC:E2:61:46:09:AA:C8:BD:F3:16:E0:1E:E8:AD:AD:81:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2189681-3312-3b1e-8b45-4af826fe7515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4c:e8:32:bc:65:dd:e1:7c:58:d5:2a:9f:53:51:0b:72:43: 22:a0:6e:7c:7a:03:01:b9:20:6e:57:5e:eb:ad:99:0e:8f:42: 3f:1f:52:33:39:04:2f:c7:00:72:fe:8d:81:48:ae:eb:23:3b: b8:df:83:35:e8:d3:de:c9:4b:83:86:a0:6a:bb:fb:37:3b:a0: 26:12:bf:fd:97:ce:2a:15:b8:44:43:08:a4:00:db:69:7d:32: 63:54:c6:55:f3:68:3a:33:e4:33:94:7e:00:3a:e5:10:b4:10: 11:1e:02:18:f8:18:e7:e7:0c:0e:ce:8d:84:6e:dd:a3:b6:34: a9:f2:d6:0d:4d:19:79:7a:47:2f:4b:ec:85:cb:41:09:03:24: 2a:f0:99:da:5c:56:ee:84:1d:55:24:b0:d6:1c:db:e2:3a:be: 5c:70:6f:5e:c4:95:89:70:a0:87:cf:04:cf:c5:d0:b8:14:a3: dd:a2:4e:2c:a4:d7:89:b5:a1:12:dc:04:5a:e1:aa:1c:42:44: f9:f8:34:23:7a:c2:71:a6:42:76:c9:be:12:d9:95:69:fb:0b: 24:92:f7:90:fe:7a:bd:49:18:77:46:0c:1f:50:ab:b1:31:1c: 58:7a:70:92:4a:6c:92:70:a6:49:80:92:a5:85:6d:dc:9b:69: df:de:02:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzRM/X+deI3QEw6HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEyMzcyMloXDTI1MTAwNjEyMzcyMlowLzEtMCsGA1UEAxMk MGVmMWYwZDYtODdmNi00NzM3LTg4ZjctNWFiOGU5MDE3NmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGaUaA3m775LN1V2dskX6svsvlA2WA/CUKMA fxpjYiXecTx0ydP6KA9+Cg/ngKfMheESyqvbz767B1Sq4LhNVV7V5Bi9MzcweGXL xPp4vQnGV4S0Xgv8cjkK3RtqjY+D1FgOeby8CQFMxNaNEwCapfAewqdnZSg+XeUK swDxMn2Z2qL8TKj57UwmghdpdxKazfxv0u1eeUhZsh7h5Ayo/Hc1TEWcekC4899m wvOTvydHGaSu1qzgFA7aTsZAXEjfqupmP3kIvmNLBl45ucjSvlhb+az3/5NBu0D9 CyUR+VaKKy6STMxVQvinyMTXQA3U/kt6ZUEsSCtfWClnQi5kYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjOQ+ziYUYJqsi98xbgHuitrYFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIxODk2ODEtMzMxMi0z YjFlLThiNDUtNGFmODI2ZmU3NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFM6DK8Zd3hfFjVKp9TUQtyQyKgbnx6AwG5IG5XXuutmQ6PQj8f UjM5BC/HAHL+jYFIrusjO7jfgzXo097JS4OGoGq7+zc7oCYSv/2XzioVuERDCKQA 22l9MmNUxlXzaDoz5DOUfgA65RC0EBEeAhj4GOfnDA7OjYRu3aO2NKny1g1NGXl6 Ry9L7IXLQQkDJCrwmdpcVu6EHVUksNYc2+I6vlxwb17ElYlwoIfPBM/F0LgUo92i Tiyk14m1oRLcBFrhqhxCRPn4NCN6wnGmQnbJvhLZlWn7CySS95D+er1JGHdGDB9Q q7ExHFh6cJJKbJJwpkmAkqWFbdybad/eAic= -----END CERTIFICATE-----Generated at Thu Jul 10 13:20:50 2025 by rpki-client