$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e99ef517-eb29-3e6f-b0f5-b274461e6614.roa File: e99ef517-eb29-3e6f-b0f5-b274461e6614.roa (raw, json) Hash identifier: 90zOrQP4mS/oExVtuoES5h95qYVeSH+CXM7kVuvva3E= Subject key identifier: 28:65:5E:AC:BF:86:48:CF:60:7B:7C:B0:7D:ED:BD:F2:9A:17:6B:C5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1B9AA8F2C3B7331B8FD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e99ef517-eb29-3e6f-b0f5-b274461e6614.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 396585 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b9:aa:8f:2c:3b:73:31:b8:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=3a0e025c-a0d8-492d-914d-7073ac9e9ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:83:6a:8a:42:6a:e3:25:a9:5b:cc:45:3d:84: 6f:9b:a4:f4:d2:72:a3:65:4c:97:02:3c:c4:b5:4f: 0f:3f:d7:74:48:e2:22:d6:29:02:42:6d:f9:2f:9e: 1b:bd:e4:ce:bc:1e:b7:c4:a8:df:6a:2e:3c:db:6a: ea:47:a6:3e:df:17:ce:a4:d1:f3:60:e9:ee:1d:54: b6:2e:4d:59:07:7a:94:6a:ab:df:e9:84:cc:03:d9: 39:60:a3:f5:e9:08:34:04:c8:51:c0:ab:0e:c3:50: 9a:10:93:06:74:86:44:41:b6:47:73:99:2b:9d:65: 45:25:5e:59:8d:a6:9c:12:85:aa:0e:05:24:66:3e: 8d:f5:f5:25:7f:10:77:6e:ee:bb:f7:86:73:be:a9: ab:87:80:f2:25:8b:8f:3c:df:28:bd:cb:41:8d:6f: 23:4e:d8:6e:ad:68:af:3f:8f:3e:5b:3e:ea:38:5c: fa:fd:a2:3b:28:52:7f:32:63:e8:16:c1:dd:b1:3e: 92:9f:17:11:ae:6d:0f:ba:d8:71:3d:b5:57:61:6b: 9c:a4:4a:87:2e:8f:8e:93:73:dd:aa:55:bb:b3:e0: 2c:80:a9:2e:51:2b:d1:b1:41:96:de:b7:79:60:26: ad:21:45:c8:90:66:ba:90:2b:d0:45:4f:95:49:f8: 5f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:65:5E:AC:BF:86:48:CF:60:7B:7C:B0:7D:ED:BD:F2:9A:17:6B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e99ef517-eb29-3e6f-b0f5-b274461e6614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:b9:43:97:50:99:4d:ea:9a:ad:e9:f6:f1:9c:92:91:37:d5: 60:22:96:d2:45:75:00:fa:81:fc:fd:fe:f2:64:4e:36:83:5e: ed:23:e3:5b:67:53:93:2a:cf:4f:16:55:76:2e:09:fa:ec:82: 50:4b:82:d6:24:2c:26:32:30:98:8a:1f:d6:1e:d3:92:83:24: 5c:24:c0:3f:1c:d6:d8:03:6d:be:6a:11:fa:36:95:98:51:b1: d7:c1:e8:f6:47:ae:fb:c7:be:75:90:96:bc:15:d4:21:52:92: ba:55:62:d8:d6:d0:5e:0e:cb:fc:80:9c:d6:72:87:2c:12:9c: f3:62:b8:8f:ef:9a:de:05:e6:0b:18:d6:ef:16:01:ff:72:93: 38:0e:63:00:7c:06:1c:75:0f:a2:ec:57:d2:36:24:01:2a:3b: e7:02:48:15:1c:51:80:71:07:ce:b8:1e:97:b6:b3:48:c1:e5: 46:9f:40:82:ce:15:f1:b0:a3:79:12:72:21:19:2c:e9:e8:df: 14:65:60:96:dc:64:88:ec:51:5a:f5:67:7e:90:c3:f3:f4:d9: 77:ff:3f:15:c1:5c:34:64:08:2b:5a:14:d5:c4:8a:7f:95:06: 4a:af:fd:d2:4b:6f:0b:49:1f:37:f0:fa:26:ca:5d:59:df:e9: e1:43:bd:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bmqjyw7czG4/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk M2EwZTAyNWMtYTBkOC00OTJkLTkxNGQtNzA3M2FjOWU5ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooNqikJq4yWpW8xFPYRvm6T00nKjZUyXAjzE tU8PP9d0SOIi1ikCQm35L54bveTOvB63xKjfai4822rqR6Y+3xfOpNHzYOnuHVS2 Lk1ZB3qUaqvf6YTMA9k5YKP16Qg0BMhRwKsOw1CaEJMGdIZEQbZHc5krnWVFJV5Z jaacEoWqDgUkZj6N9fUlfxB3bu6794Zzvqmrh4DyJYuPPN8ovctBjW8jTthurWiv P48+Wz7qOFz6/aI7KFJ/MmPoFsHdsT6SnxcRrm0PuthxPbVXYWucpEqHLo+Ok3Pd qlW7s+AsgKkuUSvRsUGW3rd5YCatIUXIkGa6kCvQRU+VSfhfsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFChlXqy/hkjPYHt8sH3tvfKaF2vFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTk5ZWY1MTctZWIyOS0z ZTZmLWIwZjUtYjI3NDQ2MWU2NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA+5Q5dQmU3qmq3p9vGckpE31WAiltJFdQD6gfz9/vJkTjaDXu0j 41tnU5Mqz08WVXYuCfrsglBLgtYkLCYyMJiKH9Ye05KDJFwkwD8c1tgDbb5qEfo2 lZhRsdfB6PZHrvvHvnWQlrwV1CFSkrpVYtjW0F4Oy/yAnNZyhywSnPNiuI/vmt4F 5gsY1u8WAf9ykzgOYwB8Bhx1D6LsV9I2JAEqO+cCSBUcUYBxB864Hpe2s0jB5Uaf QILOFfGwo3kSciEZLOno3xRlYJbcZIjsUVr1Z36Qw/P02Xf/PxXBXDRkCCtaFNXE in+VBkqv/dJLbwtJHzfw+ibKXVnf6eFDvWQ= -----END CERTIFICATE-----Generated at Wed Sep 10 18:00:37 2025 by rpki-client