$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0d33e9-07cc-332a-840a-df9a58d457a1.roa File: fd0d33e9-07cc-332a-840a-df9a58d457a1.roa (raw, json) Hash identifier: huU2HkncQGRAdXXZf4tRwXX4/zrAkM5OU6q94ColSUg= Subject key identifier: DD:7C:0B:9C:09:60:7D:69:C1:82:12:98:A4:21:3D:56:39:41:83:49 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7344D34FF50AF130F8B7C7C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0d33e9-07cc-332a-840a-df9a58d457a1.roa Signing time: Tue 08 Jul 2025 12:37:24 +0000 ROA not before: Tue 08 Jul 2025 12:37:24 +0000 ROA not after: Mon 06 Oct 2025 12:37:24 +0000 asID: 36630 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:44:d3:4f:f5:0a:f1:30:f8:b7:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 8 12:37:24 2025 GMT Not After : Oct 6 12:37:24 2025 GMT Subject: CN=11bd554f-87f0-496b-82d1-3370c75ae2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:41:f9:07:8b:58:65:40:60:f1:be:f5:81:d9: 48:c3:96:e3:80:6b:bf:13:11:df:e2:ff:18:3c:45: ca:af:85:1b:fb:df:30:04:99:1d:bf:5c:7d:0e:ca: 36:bd:26:07:60:18:0d:5d:ad:22:65:89:2f:8e:30: 80:2c:8d:d5:91:8c:d0:90:8f:ba:90:6c:9e:b9:c7: 8b:79:61:b7:fe:13:72:cd:e8:30:fb:3a:6c:76:ee: f6:63:b4:0d:66:12:24:e5:45:61:eb:1c:ef:ed:38: d2:9c:89:8b:9b:4f:c4:ed:eb:36:4b:f0:85:f0:1f: ed:d5:45:b3:68:ab:b4:2f:00:86:1f:f4:07:6c:87: 6d:70:40:e7:04:10:77:3b:70:5c:ba:16:74:69:4b: 1a:be:6c:60:5a:0b:73:49:c8:52:62:e5:42:72:34: 3d:b4:d2:99:c2:cd:50:a9:e7:6d:18:99:0f:bb:74: a1:65:ae:f1:49:78:4c:48:6c:52:8e:9a:1d:cb:ab: 11:9b:3e:4d:c7:3b:e1:a8:4f:f2:73:f3:c3:ec:49: 2d:62:b3:cd:ef:91:6c:1c:fc:39:b3:8b:04:52:1f: 97:5c:8f:e6:af:e4:e9:64:49:30:5b:d8:f4:c4:ed: 9d:8f:8f:4d:02:0d:21:d2:75:4a:2b:31:d9:e5:d0: c8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7C:0B:9C:09:60:7D:69:C1:82:12:98:A4:21:3D:56:39:41:83:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd0d33e9-07cc-332a-840a-df9a58d457a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:56:b9:e5:c3:ba:88:62:12:08:0a:92:a2:39:61:14:1b:28: b8:42:38:92:e0:9f:0d:95:53:e8:5c:fc:2d:1e:8d:9e:fc:34: 21:e6:6f:e1:f4:b5:66:3e:27:99:89:a2:0b:4c:95:8f:20:7a: f0:e1:71:d4:97:0c:9c:d6:6f:5d:9b:b5:d8:8e:46:aa:ee:db: 82:b3:d5:c4:b1:be:ea:f4:b7:6b:c5:63:18:cf:be:d5:72:69: 92:bc:e4:d1:60:10:60:f8:89:72:63:4f:0b:0d:68:b2:67:e5: 83:ea:4b:13:d7:f2:38:f1:2b:4e:7a:68:e8:a6:63:06:2c:bb: 31:a4:4e:5a:02:39:71:e4:9a:64:0a:93:82:ef:90:96:44:4d: 8d:86:bd:44:0e:c8:a6:22:78:1f:ec:e0:87:fb:03:22:49:e3: 1e:f5:4a:d3:e7:18:81:87:0b:fe:6d:84:34:4a:0c:8d:30:60: 4e:d5:0f:58:9c:c0:ce:5e:76:88:95:6e:b4:b5:78:ff:6a:ab: 8e:4f:da:40:52:27:f5:ba:64:a9:7a:fd:b0:6f:b1:89:01:cc: cd:dc:26:92:2c:98:e3:6b:fd:9c:cb:cc:52:8d:95:ba:7c:d2: c2:4f:be:6c:86:53:13:1f:07:0c:97:2f:44:8f:72:9a:c1:f7: d5:05:aa:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpzRNNP9QrxMPi3x8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwODEyMzcyNFoXDTI1MTAwNjEyMzcyNFowLzEtMCsGA1UEAxMk MTFiZDU1NGYtODdmMC00OTZiLTgyZDEtMzM3MGM3NWFlMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUH5B4tYZUBg8b71gdlIw5bjgGu/ExHf4v8Y PEXKr4Ub+98wBJkdv1x9Dso2vSYHYBgNXa0iZYkvjjCALI3VkYzQkI+6kGyeuceL eWG3/hNyzegw+zpsdu72Y7QNZhIk5UVh6xzv7TjSnImLm0/E7es2S/CF8B/t1UWz aKu0LwCGH/QHbIdtcEDnBBB3O3BcuhZ0aUsavmxgWgtzSchSYuVCcjQ9tNKZws1Q qedtGJkPu3ShZa7xSXhMSGxSjpody6sRmz5NxzvhqE/yc/PD7EktYrPN75FsHPw5 s4sEUh+XXI/mr+TpZEkwW9j0xO2dj49NAg0h0nVKKzHZ5dDIRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN18C5wJYH1pwYISmKQhPVY5QYNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQwZDMzZTktMDdjYy0z MzJhLTg0MGEtZGY5YTU4ZDQ1N2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5WueXDuohiEggKkqI5YRQbKLhCOJLgnw2VU+hc/C0ejZ78NCHm b+H0tWY+J5mJogtMlY8gevDhcdSXDJzWb12btdiORqru24Kz1cSxvur0t2vFYxjP vtVyaZK85NFgEGD4iXJjTwsNaLJn5YPqSxPX8jjxK056aOimYwYsuzGkTloCOXHk mmQKk4LvkJZETY2GvUQOyKYieB/s4If7AyJJ4x71StPnGIGHC/5thDRKDI0wYE7V D1icwM5edoiVbrS1eP9qq45P2kBSJ/W6ZKl6/bBvsYkBzM3cJpIsmONr/ZzLzFKN lbp80sJPvmyGUxMfBwyXL0SPcprB99UFquk= -----END CERTIFICATE-----Generated at Thu Jul 10 11:35:42 2025 by rpki-client