$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329d1610-acf9-3307-a833-d7e15c7c5a28.roa File: 329d1610-acf9-3307-a833-d7e15c7c5a28.roa (raw, json) Hash identifier: cWUtAtvlC3SgxLRrEOQxUKeg7pkVbrtRra36mmuiOUg= Subject key identifier: 00:C5:B9:49:73:D0:9E:84:C8:EA:62:2F:41:A1:1B:C0:83:D8:8B:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A38A4200335314A33919601C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329d1610-acf9-3307-a833-d7e15c7c5a28.roa Signing time: Tue 17 Jun 2025 12:36:43 +0000 ROA not before: Tue 17 Jun 2025 12:36:43 +0000 ROA not after: Mon 15 Sep 2025 12:36:43 +0000 asID: 396582 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:a4:20:03:35:31:4a:33:91:96:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 17 12:36:43 2025 GMT Not After : Sep 15 12:36:43 2025 GMT Subject: CN=00237b99-a43c-4097-a41c-b7a69f7d9e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4d:e3:10:fc:95:5c:64:bc:5d:4f:e0:3e:76: 16:bc:13:53:a6:9b:7c:2a:0c:82:7f:53:70:d0:9b: d3:8c:af:3f:ed:b0:06:8e:a5:1b:48:b2:61:5f:6b: 36:71:71:89:f3:0d:d2:11:5e:e6:58:f9:9e:3b:b2: 31:43:2c:9d:9e:49:e3:15:81:f3:6d:5c:11:bd:b1: 58:c7:58:d5:70:e4:1c:f4:66:4f:3c:97:53:d5:e5: 72:04:49:bd:ad:e4:ac:6a:a5:50:0a:7d:7f:c5:04: 0c:be:d5:51:d1:31:45:d1:5d:ca:a4:9d:ee:aa:e0: 42:90:9a:8f:34:19:07:b9:1a:7b:db:2f:17:d3:70: 91:40:06:a0:c5:5e:be:d5:d4:15:e7:48:a5:56:36: 69:3d:be:53:2a:61:71:bc:43:93:f6:d0:68:98:1b: 90:d7:58:71:6e:94:f8:7b:1c:82:e9:f3:5a:1f:a4: d2:2d:40:ee:c6:43:fe:20:ea:bc:25:0b:85:e6:dc: 02:47:ee:b8:97:fe:4e:4b:63:c0:88:4e:29:d0:cf: 1f:10:08:14:ad:af:d2:9f:4c:61:ea:eb:1d:6b:ab: 3d:a5:1f:92:e0:32:8c:7d:43:d6:9a:40:38:b2:e3: 28:b3:77:0a:08:12:63:7c:e9:64:be:32:26:9b:b9: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:B9:49:73:D0:9E:84:C8:EA:62:2F:41:A1:1B:C0:83:D8:8B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/329d1610-acf9-3307-a833-d7e15c7c5a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:58:c9:6e:00:5a:4b:22:1c:c9:70:25:5f:38:f5:c6:c3:62: 5a:5f:d5:ce:d1:94:ce:72:9e:f3:a5:c3:8a:cf:95:39:03:99: 48:02:96:5f:c5:a9:4c:9a:f0:6a:07:96:87:af:cf:1b:7c:fd: b2:d2:b7:31:59:15:b8:c1:c0:ee:fc:c8:c2:d0:57:9e:86:ef: 1e:e1:3a:48:ae:ab:d2:33:22:8d:70:d6:26:e3:84:53:4a:6e: 85:2c:78:73:0d:78:59:1a:b5:92:15:79:f7:c3:99:3f:c3:82: 4b:e6:64:5c:06:5a:24:38:58:47:72:32:20:af:34:11:21:a5: 72:74:54:7c:8f:8e:3c:8f:e3:c4:c7:3f:d3:ef:67:8f:39:95: 45:56:97:0b:ed:5f:78:a6:18:a6:80:69:02:49:b3:fa:4f:7a: 2f:26:e6:bf:c7:fd:c7:0c:30:ee:cc:2f:35:1a:50:4d:13:ab: 9b:28:6b:b7:f9:fe:85:de:c6:e0:49:6d:f2:ca:5b:9f:68:cc: 07:42:6b:e1:d9:99:c3:e0:12:43:31:0f:1d:a7:36:ae:63:38: 0a:2f:21:21:dd:cc:6c:0a:6b:e6:91:17:de:9d:78:4c:97:1b: fa:31:24:37:c0:e7:ad:89:49:77:83:3a:54:41:e3:d0:19:88: 5d:92:de:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pCADNTFKM5GWAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxNzEyMzY0M1oXDTI1MDkxNTEyMzY0M1owLzEtMCsGA1UEAxMk MDAyMzdiOTktYTQzYy00MDk3LWE0MWMtYjdhNjlmN2Q5ZTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgU3jEPyVXGS8XU/gPnYWvBNTppt8KgyCf1Nw 0JvTjK8/7bAGjqUbSLJhX2s2cXGJ8w3SEV7mWPmeO7IxQyydnknjFYHzbVwRvbFY x1jVcOQc9GZPPJdT1eVyBEm9reSsaqVQCn1/xQQMvtVR0TFF0V3KpJ3uquBCkJqP NBkHuRp72y8X03CRQAagxV6+1dQV50ilVjZpPb5TKmFxvEOT9tBomBuQ11hxbpT4 exyC6fNaH6TSLUDuxkP+IOq8JQuF5twCR+64l/5OS2PAiE4p0M8fEAgUra/Sn0xh 6usda6s9pR+S4DKMfUPWmkA4suMos3cKCBJjfOlkvjImm7mCQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFADFuUlz0J6EyOpiL0GhG8CD2Iv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI5ZDE2MTAtYWNmOS0z MzA3LWE4MzMtZDdlMTVjN2M1YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACNYyW4AWksiHMlwJV849cbDYlpf1c7RlM5ynvOlw4rPlTkDmUgC ll/FqUya8GoHloevzxt8/bLStzFZFbjBwO78yMLQV56G7x7hOkiuq9IzIo1w1ibj hFNKboUseHMNeFkatZIVeffDmT/DgkvmZFwGWiQ4WEdyMiCvNBEhpXJ0VHyPjjyP 48THP9PvZ485lUVWlwvtX3imGKaAaQJJs/pPei8m5r/H/ccMMO7MLzUaUE0Tq5so a7f5/oXexuBJbfLKW59ozAdCa+HZmcPgEkMxDx2nNq5jOAovISHdzGwKa+aRF96d eEyXG/oxJDfA562JSXeDOlRB49AZiF2S3jk= -----END CERTIFICATE-----Generated at Mon Jun 30 11:06:43 2025 by rpki-client