$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cb093d-a8c4-3ef6-90ba-b962a56c26b4.roa File: 04cb093d-a8c4-3ef6-90ba-b962a56c26b4.roa (raw, json) Hash identifier: nbU33+SwQxh6jXvcgJGYzUjmq+UNFhFCf8bXicye1rI= Subject key identifier: E4:5E:59:D3:D1:10:D5:2E:A6:7A:87:47:70:46:1C:54:09:19:D7:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6FA18130C79BADEE7A9800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cb093d-a8c4-3ef6-90ba-b962a56c26b4.roa Signing time: Wed 18 Jun 2025 12:38:23 +0000 ROA not before: Wed 18 Jun 2025 12:38:23 +0000 ROA not after: Tue 16 Sep 2025 12:38:23 +0000 asID: 36618 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:a1:81:30:c7:9b:ad:ee:7a:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:23 2025 GMT Not After : Sep 16 12:38:23 2025 GMT Subject: CN=6490a4bd-a1a3-4ab7-9c93-03a5e5647856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:05:b1:41:8c:83:83:03:ad:2f:89:e9:79: 38:7a:60:ca:d7:54:d7:cb:f2:5d:67:03:b0:a8:e2: 5b:fd:e9:c0:cb:6d:03:13:a4:13:3f:72:1a:8f:83: 16:ee:ed:d9:c4:e5:52:a9:15:54:f6:28:83:b1:4b: 59:0e:64:54:01:e1:e6:46:89:6a:10:a0:87:1b:7b: 4c:1f:5d:42:2b:08:47:1c:29:25:9e:15:55:55:99: a9:64:cc:26:fd:25:3f:83:c4:db:71:91:f9:ac:b2: 21:8e:b6:4e:25:64:76:50:bf:52:81:2a:4d:42:43: 55:d7:26:04:5b:07:a9:84:c9:cd:90:21:5a:00:1d: e4:d0:d5:2f:01:e7:84:8a:b4:8c:ca:f6:b2:1f:37: 54:6c:d0:c8:ce:3c:33:62:d0:cb:5b:05:77:55:60: b9:31:9e:db:4a:94:04:3f:5b:82:63:2b:c2:93:3b: be:a0:86:b7:fc:87:19:10:e2:a5:cc:8e:cd:b9:de: d0:ca:50:08:97:3a:0f:64:0f:18:ff:da:fc:64:a8: f6:82:92:1e:7b:60:0c:2b:42:5a:89:75:24:19:84: ee:b4:87:c6:44:be:c2:4b:c0:a7:46:15:a2:00:e9: 17:e4:1b:be:25:92:43:ef:7d:e1:d4:ca:ab:11:aa: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5E:59:D3:D1:10:D5:2E:A6:7A:87:47:70:46:1C:54:09:19:D7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04cb093d-a8c4-3ef6-90ba-b962a56c26b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:24:bb:da:5e:9f:bc:89:5d:5e:f5:ec:42:ef:52:8e:d2:e0: 0c:c2:c5:41:17:72:43:89:92:24:16:ef:d6:2c:ba:b1:e5:c3: 2e:f0:3c:b3:54:44:d4:2a:1f:80:0d:6b:67:37:a7:c5:46:08: 16:28:b4:bc:cf:5d:ed:aa:28:1e:24:e2:5e:45:79:a8:57:cf: 0a:05:2c:6a:cb:b3:e4:f9:0c:9c:45:de:5e:80:b4:5c:3f:48: 1f:44:36:f9:58:a4:88:ed:9e:bf:d1:3c:25:3f:37:b3:76:c3: 0e:ca:88:e6:f5:ad:15:df:db:0b:93:7f:9d:84:be:c1:b7:2e: b1:41:d5:4c:07:09:c4:e3:e0:dd:fc:05:e2:c0:a4:68:93:3e: 05:8f:7d:dc:c0:22:da:15:46:dd:cc:ed:d6:35:d6:33:74:a4: 18:48:59:fc:82:63:ae:5c:1c:d4:d6:d9:19:1c:a5:2a:f6:7a: 87:e0:87:e8:a5:4b:be:7a:70:6d:eb:83:15:73:4d:fe:6c:c0: cd:c6:cb:c3:4d:6e:09:c0:d4:9d:3a:f1:36:a1:5b:76:10:05: d1:da:80:fa:7c:58:f8:07:76:5e:d2:eb:af:5d:06:b7:ef:ef: ca:c2:d3:49:23:93:c8:9c:88:1d:21:7e:35:83:b3:c1:01:7b: 9e:38:ec:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b6GBMMebre56mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyM1oXDTI1MDkxNjEyMzgyM1owLzEtMCsGA1UEAxMk NjQ5MGE0YmQtYTFhMy00YWI3LTljOTMtMDNhNWU1NjQ3ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQEFsUGMg4MDrS+J6Xk4emDK11TXy/JdZwOw qOJb/enAy20DE6QTP3Iaj4MW7u3ZxOVSqRVU9iiDsUtZDmRUAeHmRolqEKCHG3tM H11CKwhHHCklnhVVVZmpZMwm/SU/g8TbcZH5rLIhjrZOJWR2UL9SgSpNQkNV1yYE WwephMnNkCFaAB3k0NUvAeeEirSMyvayHzdUbNDIzjwzYtDLWwV3VWC5MZ7bSpQE P1uCYyvCkzu+oIa3/IcZEOKlzI7Nud7QylAIlzoPZA8Y/9r8ZKj2gpIee2AMK0Ja iXUkGYTutIfGRL7CS8CnRhWiAOkX5Bu+JZJD733h1MqrEapS4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOReWdPRENUupnqHR3BGHFQJGdfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDRjYjA5M2QtYThjNC0z ZWY2LTkwYmEtYjk2MmE1NmMyNmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHQku9pen7yJXV717ELvUo7S4AzCxUEXckOJkiQW79YsurHlwy7w PLNURNQqH4ANa2c3p8VGCBYotLzPXe2qKB4k4l5FeahXzwoFLGrLs+T5DJxF3l6A tFw/SB9ENvlYpIjtnr/RPCU/N7N2ww7KiOb1rRXf2wuTf52EvsG3LrFB1UwHCcTj 4N38BeLApGiTPgWPfdzAItoVRt3M7dY11jN0pBhIWfyCY65cHNTW2RkcpSr2eofg h+ilS756cG3rgxVzTf5swM3Gy8NNbgnA1J068TahW3YQBdHagPp8WPgHdl7S669d Brfv78rC00kjk8iciB0hfjWDs8EBe5447Hc= -----END CERTIFICATE-----Generated at Mon Jun 30 13:33:15 2025 by rpki-client