$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25dc2dc3-0597-3e1e-8aef-e06e2b3f56ae.roa File: 25dc2dc3-0597-3e1e-8aef-e06e2b3f56ae.roa (raw, json) Hash identifier: 0ER2sZA+CDQpYc3pL3yU9EaYapZb3ZApOw90anV9X1o= Subject key identifier: 9E:4B:70:5C:13:FE:FE:AB:0B:72:85:67:90:8C:BA:51:9E:58:A7:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6FA30896F65565C50C0D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25dc2dc3-0597-3e1e-8aef-e06e2b3f56ae.roa Signing time: Wed 18 Jun 2025 12:38:23 +0000 ROA not before: Wed 18 Jun 2025 12:38:23 +0000 ROA not after: Tue 16 Sep 2025 12:38:23 +0000 asID: 396547 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:a3:08:96:f6:55:65:c5:0c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:23 2025 GMT Not After : Sep 16 12:38:23 2025 GMT Subject: CN=8f12367c-f46a-4118-a7e0-7af2aac3f1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c5:b0:f4:b4:9d:16:33:87:78:0c:29:14:7a: e8:88:2d:b4:61:fc:78:ee:df:73:b9:fc:a8:c3:d9: 16:fe:89:79:11:9a:22:ec:84:21:bd:54:14:ca:3b: 75:cc:6c:3a:6c:c1:9a:50:0d:68:92:c3:1f:80:22: 41:6c:70:51:e8:84:e7:01:e0:de:0a:52:71:26:4d: dd:90:52:06:17:82:58:8e:75:24:97:65:82:42:a9: 54:45:a8:d9:80:9f:f2:a2:a3:c7:dd:6e:95:4b:3f: bc:1a:4e:dd:fb:84:fa:3c:1b:ad:70:e0:84:77:eb: d8:42:f4:7d:82:9a:3a:dd:46:38:ea:14:d2:70:a9: 66:b3:29:39:f1:cb:da:d4:5e:6b:67:e6:78:4c:ba: 17:0f:b8:00:74:82:b4:74:7b:5e:6b:14:8d:80:87: fe:b1:db:ef:02:50:fb:fa:a7:2a:89:4b:70:06:76: 25:91:dc:ae:74:13:d4:42:49:03:2a:c1:9f:97:eb: 5d:e0:87:c7:c5:e3:c2:49:00:d9:fb:a5:84:07:eb: 94:8b:36:3c:b6:32:89:79:71:d6:89:00:83:e7:9c: f0:b3:e4:b5:d8:85:68:79:43:d1:2d:8f:24:ae:08: 81:8a:b7:dd:c2:92:8b:75:10:11:9b:fd:89:74:b2: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4B:70:5C:13:FE:FE:AB:0B:72:85:67:90:8C:BA:51:9E:58:A7:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25dc2dc3-0597-3e1e-8aef-e06e2b3f56ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:40:7e:c6:d2:69:55:ae:4e:ef:b3:b9:ee:a1:72:e2:55:d7: f8:ef:ab:a5:7a:36:0d:68:e3:0a:3d:18:f2:98:0c:cd:eb:fd: 83:a3:76:cc:90:6f:88:04:9e:a1:e3:6f:e9:75:51:d0:e4:4f: 33:a6:5b:c3:81:92:fd:7b:a1:14:44:eb:05:26:3b:44:77:dc: 17:ed:0a:c4:8d:4b:95:86:3f:2b:8c:3a:0b:fe:87:e2:e0:92: cf:d8:9c:21:96:77:45:47:14:e6:e8:ff:53:41:a3:13:f7:10: b7:44:74:86:14:0a:3e:27:19:7b:2f:4e:d3:76:57:61:ae:80: a1:5a:8d:b8:77:a6:07:d0:bd:2a:23:34:d0:83:76:50:27:d2: 61:70:89:80:fb:97:de:56:4f:d7:0b:f3:2f:6b:30:e2:ce:11: 91:d0:e8:9f:8a:1f:17:37:2c:50:92:9a:9e:74:42:a7:68:8e: 6f:98:62:f0:4a:5b:6a:f3:88:99:9f:4a:4d:29:e0:6c:d6:f8: 47:7c:a5:70:98:89:59:26:8f:70:36:0f:7a:66:d4:91:02:56: f2:57:d3:a2:56:a9:98:d8:51:23:e7:cb:1d:22:2a:81:81:88: 0b:cb:b2:5c:d4:1b:87:31:5c:ea:81:8f:3b:e5:0f:f9:e3:a0: 5c:21:63:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b6MIlvZVZcUMDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyM1oXDTI1MDkxNjEyMzgyM1owLzEtMCsGA1UEAxMk OGYxMjM2N2MtZjQ2YS00MTE4LWE3ZTAtN2FmMmFhYzNmMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsWw9LSdFjOHeAwpFHroiC20Yfx47t9zufyo w9kW/ol5EZoi7IQhvVQUyjt1zGw6bMGaUA1oksMfgCJBbHBR6ITnAeDeClJxJk3d kFIGF4JYjnUkl2WCQqlURajZgJ/yoqPH3W6VSz+8Gk7d+4T6PButcOCEd+vYQvR9 gpo63UY46hTScKlmsyk58cva1F5rZ+Z4TLoXD7gAdIK0dHteaxSNgIf+sdvvAlD7 +qcqiUtwBnYlkdyudBPUQkkDKsGfl+td4IfHxePCSQDZ+6WEB+uUizY8tjKJeXHW iQCD55zws+S12IVoeUPRLY8krgiBirfdwpKLdRARm/2JdLJefwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ5LcFwT/v6rC3KFZ5CMulGeWKfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjVkYzJkYzMtMDU5Ny0z ZTFlLThhZWYtZTA2ZTJiM2Y1NmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9AfsbSaVWuTu+zue6hcuJV1/jvq6V6Ng1o4wo9GPKYDM3r/YOj dsyQb4gEnqHjb+l1UdDkTzOmW8OBkv17oRRE6wUmO0R33BftCsSNS5WGPyuMOgv+ h+Lgks/YnCGWd0VHFObo/1NBoxP3ELdEdIYUCj4nGXsvTtN2V2GugKFajbh3pgfQ vSojNNCDdlAn0mFwiYD7l95WT9cL8y9rMOLOEZHQ6J+KHxc3LFCSmp50Qqdojm+Y YvBKW2rziJmfSk0p4GzW+Ed8pXCYiVkmj3A2D3pm1JECVvJX06JWqZjYUSPnyx0i KoGBiAvLslzUG4cxXOqBjzvlD/njoFwhYwQ= -----END CERTIFICATE-----Generated at Tue Jul 1 13:04:38 2025 by rpki-client