$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13afa9f1-49e9-3527-80a0-2d429b4b892e.roa File: 13afa9f1-49e9-3527-80a0-2d429b4b892e.roa (raw, json) Hash identifier: 5lNo22UV7ElClVt4KgdyeKGw5EuPf7iDvnN92nCKWow= Subject key identifier: 53:16:43:53:21:AB:75:79:69:E4:FB:36:AD:B5:BD:B3:F6:59:38:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A38A419B81BC32BEA43C1B100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13afa9f1-49e9-3527-80a0-2d429b4b892e.roa Signing time: Tue 17 Jun 2025 12:36:40 +0000 ROA not before: Tue 17 Jun 2025 12:36:40 +0000 ROA not after: Mon 15 Sep 2025 12:36:40 +0000 asID: 396584 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:a4:19:b8:1b:c3:2b:ea:43:c1:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 17 12:36:40 2025 GMT Not After : Sep 15 12:36:40 2025 GMT Subject: CN=5a0e48d3-0427-4580-bbdb-804f2e0e1a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4f:21:e1:25:a2:8c:f0:ec:6e:7e:50:75:e0: 90:83:22:aa:f9:c9:8d:1c:ae:94:61:19:63:84:ce: 47:eb:8e:4a:af:a9:ff:9e:a4:06:46:cf:a7:e5:0e: e3:0d:e7:f1:18:ed:f6:80:9f:75:6a:5a:25:d7:a9: 33:17:02:fc:f1:62:92:5f:d8:0b:0a:4c:86:35:1c: 4b:89:fd:4b:16:a0:7d:88:df:e1:13:70:55:9d:c2: b5:13:92:8e:19:e3:0c:65:f4:41:ef:61:de:d2:52: 62:76:73:86:79:b7:a7:a8:9d:4d:da:fc:c8:18:c3: aa:20:25:20:60:14:48:1c:55:05:1c:ff:36:28:95: 49:61:0b:d7:10:a7:d3:0b:3c:89:d4:bf:15:a8:25: 74:44:27:e4:cf:35:eb:2d:fd:27:d0:95:22:d0:a9: 8a:71:89:4a:c0:94:88:a8:6c:14:5c:c8:3f:81:e7: 73:9e:9f:46:5f:88:c5:62:85:b1:93:1e:ed:ec:b1: 7f:52:0b:0d:70:b6:6e:63:a8:8a:41:d2:34:ad:ef: e8:97:ae:1a:b5:51:df:71:50:6d:e1:4e:22:44:80: f2:79:05:6e:02:83:d8:75:24:43:7d:aa:52:b0:48: 43:6d:a9:59:20:99:cf:ec:5e:f7:26:07:f6:c6:e8: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:16:43:53:21:AB:75:79:69:E4:FB:36:AD:B5:BD:B3:F6:59:38:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13afa9f1-49e9-3527-80a0-2d429b4b892e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:bd:8e:a9:2a:85:28:77:74:22:3b:e3:63:ca:00:c6:1e:b7: 6c:db:49:eb:7a:fe:62:ff:85:86:92:8e:3e:fd:fe:de:2d:d3: b4:c7:a5:0e:29:25:9d:80:b6:bb:46:67:18:b0:df:e4:67:1a: 29:1c:ba:4d:a3:50:07:43:40:13:ba:a9:70:f9:d7:fb:db:ff: 9d:12:6b:35:03:4e:c3:86:b9:f2:2e:e7:ce:2f:9f:7a:5c:bc: 0b:0b:0f:a7:07:f8:8b:64:ac:e1:00:dd:7a:a8:6a:e7:00:11: 1b:26:8f:a1:9c:39:27:2f:fd:36:a8:a5:af:27:8a:2a:df:19: ce:51:54:4e:4e:59:6d:ed:56:8f:8e:05:c4:6a:97:e4:c6:bc: ea:eb:7a:33:f2:b5:27:08:91:0d:0c:d0:e4:b1:a3:05:24:ce: 18:6d:e1:30:91:69:6e:09:0c:26:c3:dc:3c:f4:8d:78:2b:72: 9b:f0:a1:b6:c2:58:17:9d:9a:a1:3d:5f:8b:aa:2e:55:3a:86: 65:f6:8a:ac:fe:b6:64:3c:f0:55:50:8c:2b:db:cb:a8:80:d2: 98:ae:e6:b2:c4:8b:c8:e3:07:1e:e2:33:23:ab:e6:c1:eb:21: 7f:ac:3e:c2:0d:8f:75:0c:3f:09:5e:a1:7b:82:6a:2f:46:6d: 88:10:81:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pBm4G8Mr6kPBsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxNzEyMzY0MFoXDTI1MDkxNTEyMzY0MFowLzEtMCsGA1UEAxMk NWEwZTQ4ZDMtMDQyNy00NTgwLWJiZGItODA0ZjJlMGUxYTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA808h4SWijPDsbn5QdeCQgyKq+cmNHK6UYRlj hM5H645Kr6n/nqQGRs+n5Q7jDefxGO32gJ91alol16kzFwL88WKSX9gLCkyGNRxL if1LFqB9iN/hE3BVncK1E5KOGeMMZfRB72He0lJidnOGebenqJ1N2vzIGMOqICUg YBRIHFUFHP82KJVJYQvXEKfTCzyJ1L8VqCV0RCfkzzXrLf0n0JUi0KmKcYlKwJSI qGwUXMg/gedznp9GX4jFYoWxkx7t7LF/UgsNcLZuY6iKQdI0re/ol64atVHfcVBt 4U4iRIDyeQVuAoPYdSRDfapSsEhDbalZIJnP7F73Jgf2xuhhFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFMWQ1Mhq3V5aeT7Nq21vbP2WTiXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTNhZmE5ZjEtNDllOS0z NTI3LTgwYTAtMmQ0MjliNGI4OTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKC9jqkqhSh3dCI742PKAMYet2zbSet6/mL/hYaSjj79/t4t07TH pQ4pJZ2AtrtGZxiw3+RnGikcuk2jUAdDQBO6qXD51/vb/50SazUDTsOGufIu584v n3pcvAsLD6cH+ItkrOEA3XqoaucAERsmj6GcOScv/Taopa8niirfGc5RVE5OWW3t Vo+OBcRql+TGvOrrejPytScIkQ0M0OSxowUkzhht4TCRaW4JDCbD3Dz0jXgrcpvw obbCWBedmqE9X4uqLlU6hmX2iqz+tmQ88FVQjCvby6iA0piu5rLEi8jjBx7iMyOr 5sHrIX+sPsINj3UMPwleoXuCai9GbYgQgdA= -----END CERTIFICATE-----Generated at Mon Jun 30 18:15:10 2025 by rpki-client