$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041758f1-f876-3c21-9b6f-da07e1256e2a.roa File: 041758f1-f876-3c21-9b6f-da07e1256e2a.roa (raw, json) Hash identifier: ohJkgSyx+FtZlRhWo5mF9kLBWmjs+tBnYUzBkqGmoe8= Subject key identifier: 1B:4A:C3:CB:CF:F6:2C:7D:44:81:33:21:2D:58:38:92:3B:49:43:C7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6F9CEA75AE709641FD0C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041758f1-f876-3c21-9b6f-da07e1256e2a.roa Signing time: Wed 18 Jun 2025 12:38:20 +0000 ROA not before: Wed 18 Jun 2025 12:38:20 +0000 ROA not after: Tue 16 Sep 2025 12:38:20 +0000 asID: 396579 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:9c:ea:75:ae:70:96:41:fd:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:20 2025 GMT Not After : Sep 16 12:38:20 2025 GMT Subject: CN=73a62196-d6b2-4900-9b1b-25c0101bb4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:6c:98:aa:c8:dc:d3:08:05:ec:67:f0:0d: 2a:31:05:f3:08:ec:45:b9:d5:c6:7f:05:f8:39:7a: ed:02:8a:67:cf:c7:be:6e:2a:88:8d:1e:f2:de:c9: 19:1e:3e:86:4b:02:cc:2e:ea:55:ed:cc:07:97:bb: 91:a6:51:f4:ad:b0:6c:00:eb:2d:e3:38:57:a2:77: ef:b0:e2:b7:de:8a:ea:93:a5:cc:bf:56:c9:ff:ef: 3c:61:bc:7e:31:41:79:61:91:da:67:40:76:5b:f1: 80:67:c9:91:12:38:cc:62:d4:81:f7:22:c5:9c:8d: f5:59:f0:bd:c6:98:4e:dc:c3:7d:5d:fd:6e:e7:2a: 42:80:52:4d:8b:fd:e5:9c:c6:6c:ae:cd:21:40:71: 49:a9:2c:3e:af:d2:d7:6a:7c:71:0b:8a:49:ed:b0: 1a:95:55:9a:20:14:3b:d0:f4:09:73:0f:75:21:21: b0:36:48:ed:35:a4:c9:b5:a8:e0:0d:bc:76:b0:b9: a3:51:49:78:ac:f4:6b:1e:33:62:4f:7c:ab:aa:92: 07:c7:ef:5e:1f:00:65:08:03:ce:f4:d6:bf:e6:5e: 2d:c4:9c:2d:36:c0:96:42:fa:4a:9f:4f:a3:f6:a6: 20:fb:34:42:92:e2:8e:30:68:32:f9:9a:21:7c:af: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4A:C3:CB:CF:F6:2C:7D:44:81:33:21:2D:58:38:92:3B:49:43:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041758f1-f876-3c21-9b6f-da07e1256e2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:09:ec:fe:6f:d9:c6:ca:b6:31:17:b8:81:c6:05:5f:89:4d: 86:85:75:13:dd:31:7d:ed:b1:30:d0:69:b3:9b:90:13:19:9b: ba:1d:5c:5d:b8:4f:86:91:47:59:5d:05:82:c6:81:13:e0:c7: 6f:a1:1f:df:74:43:57:4c:66:46:b2:86:50:c3:24:34:d5:27: 88:d4:a1:63:5a:7f:c4:44:ea:9d:71:77:cc:15:bf:a6:28:f2: 0d:39:6b:a5:cf:3b:02:b1:7a:bb:60:ff:d5:32:43:0b:24:2d: e9:fd:80:0b:f9:51:e8:c1:19:b9:4b:31:94:65:dc:03:0e:49: 7f:8c:a1:c4:d9:70:60:d7:35:86:d7:f5:bc:57:ad:3c:99:f8: ac:67:bc:f1:2d:e1:cb:b9:16:81:0a:3d:97:4d:8b:ec:a9:43: 3e:9a:d7:b0:ba:01:39:87:14:13:c4:0a:98:3b:ae:b6:52:10: bf:9b:93:17:e5:d7:59:f7:da:ac:42:87:e6:61:2c:65:ff:03: 6a:a2:d3:fc:07:2b:34:5d:e9:f1:3b:03:44:68:3b:b7:0d:4e: aa:35:35:7b:4b:44:51:0a:7b:1d:a0:c1:c6:49:af:32:3a:ec: c6:45:c2:0b:7d:15:26:06:b0:d1:d1:fb:ea:38:bf:22:15:a7: 3c:d3:dd:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b5zqda5wlkH9DIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyMFoXDTI1MDkxNjEyMzgyMFowLzEtMCsGA1UEAxMk NzNhNjIxOTYtZDZiMi00OTAwLTliMWItMjVjMDEwMWJiNGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIBsmKrI3NMIBexn8A0qMQXzCOxFudXGfwX4 OXrtAopnz8e+biqIjR7y3skZHj6GSwLMLupV7cwHl7uRplH0rbBsAOst4zhXonfv sOK33orqk6XMv1bJ/+88Ybx+MUF5YZHaZ0B2W/GAZ8mREjjMYtSB9yLFnI31WfC9 xphO3MN9Xf1u5ypCgFJNi/3lnMZsrs0hQHFJqSw+r9LXanxxC4pJ7bAalVWaIBQ7 0PQJcw91ISGwNkjtNaTJtajgDbx2sLmjUUl4rPRrHjNiT3yrqpIHx+9eHwBlCAPO 9Na/5l4txJwtNsCWQvpKn0+j9qYg+zRCkuKOMGgy+ZohfK8aVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBtKw8vP9ix9RIEzIS1YOJI7SUPHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDQxNzU4ZjEtZjg3Ni0z YzIxLTliNmYtZGEwN2UxMjU2ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4J7P5v2cbKtjEXuIHGBV+JTYaFdRPdMX3tsTDQabObkBMZm7od XF24T4aRR1ldBYLGgRPgx2+hH990Q1dMZkayhlDDJDTVJ4jUoWNaf8RE6p1xd8wV v6Yo8g05a6XPOwKxertg/9UyQwskLen9gAv5UejBGblLMZRl3AMOSX+MocTZcGDX NYbX9bxXrTyZ+KxnvPEt4cu5FoEKPZdNi+ypQz6a17C6ATmHFBPECpg7rrZSEL+b kxfl11n32qxCh+ZhLGX/A2qi0/wHKzRd6fE7A0RoO7cNTqo1NXtLRFEKex2gwcZJ rzI67MZFwgt9FSYGsNHR++o4vyIVpzzT3d8= -----END CERTIFICATE-----Generated at Mon Jun 30 09:56:41 2025 by rpki-client