$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23570b91-3a8c-3310-96dd-bb8f2a62baf2.roa File: 23570b91-3a8c-3310-96dd-bb8f2a62baf2.roa (raw, json) Hash identifier: 1pvCOKLkUB4WBk+CnmCq2DEfRKWXIKZBDxSX4H5BIHc= Subject key identifier: D6:59:E5:C7:F0:F8:A7:E0:94:C3:2C:B1:3B:67:5E:A2:3C:C6:A9:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6F9F031DB6019CE725D8A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23570b91-3a8c-3310-96dd-bb8f2a62baf2.roa Signing time: Wed 18 Jun 2025 12:38:21 +0000 ROA not before: Wed 18 Jun 2025 12:38:21 +0000 ROA not after: Tue 16 Sep 2025 12:38:21 +0000 asID: 396574 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:9f:03:1d:b6:01:9c:e7:25:d8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:21 2025 GMT Not After : Sep 16 12:38:21 2025 GMT Subject: CN=a26074b1-3c3e-4d85-882b-fd026e3edf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:23:bb:34:0a:cc:62:db:ba:8d:a0:db:4b:b7: 1c:57:47:50:d2:93:34:60:c6:c6:6e:ce:62:4e:86: c7:0b:0d:b5:b3:4f:08:ad:38:4f:df:7d:19:ab:8f: aa:16:60:bc:6d:f3:ef:f7:48:c8:2e:6d:80:4b:93: 01:af:b3:66:88:07:7e:ec:75:3f:f5:c5:4a:8a:ce: 21:81:b3:e9:2b:d7:ed:39:55:80:ce:cc:57:d1:8a: f9:a4:b8:e7:0f:67:d6:00:e1:b1:05:ab:64:7b:ce: af:88:dc:9e:a4:55:5a:83:f5:c7:73:6c:43:c9:7b: 9f:26:62:2e:e3:8a:9b:26:3e:51:da:45:a1:02:62: 0d:ed:c5:f1:82:96:07:f0:7c:a8:1e:8a:48:f2:a8: 46:57:38:47:60:c7:0a:73:6d:17:9b:3e:3b:b9:45: 33:cc:ab:a7:dd:3e:60:a0:de:3b:e3:c7:6a:f3:28: 40:24:9c:8f:d9:a5:15:13:37:e1:82:56:d5:6c:c4: 3b:12:ba:1f:46:2e:e0:c8:4a:7c:83:60:7d:43:34: 26:05:dd:12:81:20:c2:5b:37:72:f6:d1:49:99:23: f1:44:70:07:f1:4c:a8:f4:20:70:d0:72:9d:54:14: 03:45:f7:df:95:0e:06:3e:01:9d:f7:2c:f0:f0:f3: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:59:E5:C7:F0:F8:A7:E0:94:C3:2C:B1:3B:67:5E:A2:3C:C6:A9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23570b91-3a8c-3310-96dd-bb8f2a62baf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6a:ab:39:db:57:4b:da:f1:d8:0a:7f:84:ae:96:af:2a:56: 86:0e:2d:6c:99:a9:fa:6f:e8:96:06:f8:ea:89:47:05:bf:cc: c4:f0:3c:b8:82:33:3b:87:5b:2a:3a:06:22:09:09:45:c9:90: 5b:03:95:0d:bc:11:22:04:b1:2a:3b:75:e3:fd:6a:08:22:1f: cd:34:15:6e:ee:ae:eb:4e:25:d7:41:99:fc:07:ad:a9:fb:cc: b3:91:08:6f:92:85:eb:6a:61:8d:93:0d:46:5e:5d:bd:c0:90: 2a:be:75:79:af:04:fd:52:e9:18:2d:39:9d:0a:0a:a0:c2:08: 1f:29:3b:89:bc:0e:83:c7:e2:d3:f6:d4:42:f4:9b:9f:49:6c: 61:3e:91:98:3f:3f:49:ad:94:ba:00:6e:49:0c:21:e2:d9:4a: 09:35:0f:74:6f:6b:6f:8e:4f:86:12:50:fc:ce:ce:f0:4b:71: 5a:43:56:2d:d1:d6:c4:06:fe:98:1c:85:4f:61:80:a8:36:06: 5d:87:f2:07:f8:9f:16:c7:f6:5c:a3:64:55:b9:ab:e5:9d:c8: 4e:1e:93:36:97:8b:44:e6:b1:02:f9:42:24:ce:6f:95:8d:05: 9d:59:8b:09:02:79:4f:71:c6:06:fa:bf:5b:18:b3:4d:44:30: 0b:83:a9:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b58DHbYBnOcl2KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyMVoXDTI1MDkxNjEyMzgyMVowLzEtMCsGA1UEAxMk YTI2MDc0YjEtM2MzZS00ZDg1LTg4MmItZmQwMjZlM2VkZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyO7NArMYtu6jaDbS7ccV0dQ0pM0YMbGbs5i TobHCw21s08IrThP330Zq4+qFmC8bfPv90jILm2AS5MBr7NmiAd+7HU/9cVKis4h gbPpK9ftOVWAzsxX0Yr5pLjnD2fWAOGxBatke86viNyepFVag/XHc2xDyXufJmIu 44qbJj5R2kWhAmIN7cXxgpYH8HyoHopI8qhGVzhHYMcKc20Xmz47uUUzzKun3T5g oN4748dq8yhAJJyP2aUVEzfhglbVbMQ7ErofRi7gyEp8g2B9QzQmBd0SgSDCWzdy 9tFJmSPxRHAH8Uyo9CBw0HKdVBQDRffflQ4GPgGd9yzw8PMDIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZZ5cfw+KfglMMssTtnXqI8xqnuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjM1NzBiOTEtM2E4Yy0z MzEwLTk2ZGQtYmI4ZjJhNjJiYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHNqqznbV0va8dgKf4Sulq8qVoYOLWyZqfpv6JYG+OqJRwW/zMTw PLiCMzuHWyo6BiIJCUXJkFsDlQ28ESIEsSo7deP9aggiH800FW7urutOJddBmfwH ran7zLORCG+ShetqYY2TDUZeXb3AkCq+dXmvBP1S6RgtOZ0KCqDCCB8pO4m8DoPH 4tP21EL0m59JbGE+kZg/P0mtlLoAbkkMIeLZSgk1D3Rva2+OT4YSUPzOzvBLcVpD Vi3R1sQG/pgchU9hgKg2Bl2H8gf4nxbH9lyjZFW5q+WdyE4ekzaXi0TmsQL5QiTO b5WNBZ1ZiwkCeU9xxgb6v1sYs01EMAuDqa4= -----END CERTIFICATE-----Generated at Mon Jun 30 16:53:18 2025 by rpki-client