$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ec6046-70ab-3efa-b492-febb1f9daff2.roa File: 34ec6046-70ab-3efa-b492-febb1f9daff2.roa (raw, json) Hash identifier: 00IxTWvt/Orsv7C3mkuA5u7XPzJ23yd1CKvkFZTaBR8= Subject key identifier: D7:EF:D1:34:C3:98:04:D9:9F:8D:63:AC:87:E4:2C:35:52:74:E5:E5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6F9D82CCF9B107A59E3C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ec6046-70ab-3efa-b492-febb1f9daff2.roa Signing time: Wed 18 Jun 2025 12:38:21 +0000 ROA not before: Wed 18 Jun 2025 12:38:21 +0000 ROA not after: Tue 16 Sep 2025 12:38:21 +0000 asID: 40647 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:9d:82:cc:f9:b1:07:a5:9e:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:21 2025 GMT Not After : Sep 16 12:38:21 2025 GMT Subject: CN=84b38cb3-5f6f-437a-935b-6ce706feb6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:f2:dc:30:f2:00:31:89:1c:f5:9a:32:68: 6a:b9:d1:a1:6f:0d:3b:a0:61:0d:8b:48:7a:63:4c: 73:31:56:34:53:cf:da:fb:78:48:fc:7d:05:c2:ea: 29:2a:be:74:6a:55:02:f3:85:81:cb:5b:f5:ec:4f: bb:d9:d0:ad:f3:98:3a:98:01:34:04:f0:bc:68:84: e8:3f:2c:bb:2c:4d:90:90:d9:0b:e8:76:3e:53:f1: 92:d6:cc:73:f5:2a:00:31:f4:2f:45:38:3a:c3:e4: f9:e2:ee:0b:90:cb:97:05:0f:78:d6:72:62:11:ff: cc:5c:71:a2:95:d4:6c:16:4a:bc:ca:43:0a:d3:df: a8:55:2a:16:90:40:61:2c:89:85:3f:47:3a:97:f9: 2b:fc:f7:55:aa:33:bd:5c:9a:b4:7b:02:6d:79:89: 9c:c4:b4:f5:49:c7:3e:b3:f0:23:49:b5:fd:54:e0: b1:e8:14:b3:ba:3b:86:25:e6:15:40:e0:22:32:e2: 89:30:db:a7:09:0e:17:e9:7e:6b:ef:cf:22:4d:75: 48:d1:df:24:04:f0:5b:70:02:bc:56:a7:1e:bb:97: 77:1d:f8:e9:27:c5:41:4c:a3:3b:6b:86:70:12:c9: ec:35:81:ce:b3:82:ff:c7:40:94:34:52:2b:00:51: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EF:D1:34:C3:98:04:D9:9F:8D:63:AC:87:E4:2C:35:52:74:E5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34ec6046-70ab-3efa-b492-febb1f9daff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:62:d9:6f:98:82:7b:81:1f:5b:32:f8:8b:65:63:6e:0c:af: 2b:c5:e2:d1:0b:aa:b7:74:cd:b3:61:e8:2c:42:9e:2e:de:1a: d8:7a:8a:fa:45:5d:eb:8c:fd:0c:4b:3a:c4:63:ce:e6:c9:5e: 40:9b:76:86:fe:2f:2b:84:31:15:f2:53:c7:7b:f4:e3:6e:24: eb:51:27:5d:22:b9:be:87:9b:3e:6b:ba:2c:ab:13:b0:b4:f3: cb:23:cc:79:dd:30:05:ba:20:01:8d:1d:02:e2:22:c6:ad:76: b5:64:f3:d8:04:98:87:b3:93:66:70:05:c2:f6:31:16:5f:80: d2:cc:14:de:07:91:02:20:de:45:ea:61:6b:a8:33:f8:c4:0e: c5:30:b5:1d:91:a5:43:e4:03:5f:22:29:69:ce:73:58:4f:b9: 1e:c0:4e:b1:e9:d5:95:c2:8d:05:b4:89:33:97:aa:3d:7a:77: d2:40:dc:e9:32:5d:1f:9d:aa:a3:9d:5f:1a:dd:18:c4:17:89: b6:c9:ae:0d:d3:88:bf:bd:85:36:7c:3b:8d:57:32:83:73:43: 47:b6:5d:e5:37:fa:ee:59:54:26:ed:b8:87:40:60:61:06:3b: a8:23:24:c1:63:3f:43:91:86:0e:71:35:01:e4:c2:b9:0b:2d: 46:66:99:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b52CzPmxB6WePAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyMVoXDTI1MDkxNjEyMzgyMVowLzEtMCsGA1UEAxMk ODRiMzhjYjMtNWY2Zi00MzdhLTkzNWItNmNlNzA2ZmViNmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ7y3DDyADGJHPWaMmhqudGhbw07oGENi0h6 Y0xzMVY0U8/a+3hI/H0FwuopKr50alUC84WBy1v17E+72dCt85g6mAE0BPC8aITo Pyy7LE2QkNkL6HY+U/GS1sxz9SoAMfQvRTg6w+T54u4LkMuXBQ941nJiEf/MXHGi ldRsFkq8ykMK09+oVSoWkEBhLImFP0c6l/kr/PdVqjO9XJq0ewJteYmcxLT1Scc+ s/AjSbX9VOCx6BSzujuGJeYVQOAiMuKJMNunCQ4X6X5r788iTXVI0d8kBPBbcAK8 Vqceu5d3HfjpJ8VBTKM7a4ZwEsnsNYHOs4L/x0CUNFIrAFGojwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNfv0TTDmATZn41jrIfkLDVSdOXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzRlYzYwNDYtNzBhYi0z ZWZhLWI0OTItZmViYjFmOWRhZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1i2W+YgnuBH1sy+ItlY24MryvF4tELqrd0zbNh6CxCni7eGth6 ivpFXeuM/QxLOsRjzubJXkCbdob+LyuEMRXyU8d79ONuJOtRJ10iub6Hmz5ruiyr E7C088sjzHndMAW6IAGNHQLiIsatdrVk89gEmIezk2ZwBcL2MRZfgNLMFN4HkQIg 3kXqYWuoM/jEDsUwtR2RpUPkA18iKWnOc1hPuR7ATrHp1ZXCjQW0iTOXqj16d9JA 3OkyXR+dqqOdXxrdGMQXibbJrg3TiL+9hTZ8O41XMoNzQ0e2XeU3+u5ZVCbtuIdA YGEGO6gjJMFjP0ORhg5xNQHkwrkLLUZmmS4= -----END CERTIFICATE-----Generated at Tue Jul 1 20:39:18 2025 by rpki-client