$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38247fc5-9e07-3224-afca-fe7e25ab308f.roa File: 38247fc5-9e07-3224-afca-fe7e25ab308f.roa (raw, json) Hash identifier: o/+s820V7qqeqd0TRHB86DuyNBm7kj24BbDSW/isdKI= Subject key identifier: 80:DE:C4:10:E0:7B:DE:AD:D6:00:F5:63:65:3B:8C:2A:BD:7E:09:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A38A41D534BA678364ECCB080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38247fc5-9e07-3224-afca-fe7e25ab308f.roa Signing time: Tue 17 Jun 2025 12:36:42 +0000 ROA not before: Tue 17 Jun 2025 12:36:42 +0000 ROA not after: Mon 15 Sep 2025 12:36:42 +0000 asID: 397208 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:a4:1d:53:4b:a6:78:36:4e:cc:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 17 12:36:42 2025 GMT Not After : Sep 15 12:36:42 2025 GMT Subject: CN=0c2a67d0-b736-47d7-b547-1cc15d797882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:e0:25:7b:e9:6a:f9:b5:e8:5f:c1:68:7e: 85:cc:25:f6:c2:12:68:6e:be:2e:74:02:91:b9:e9: 2b:ab:51:36:89:ec:50:70:68:a9:bd:1f:77:5b:35: 27:ea:6d:e8:38:dd:80:29:45:67:ea:dd:7c:05:10: 61:c4:7e:df:b6:29:25:f8:20:62:92:32:94:91:a9: db:48:7f:d5:1b:55:45:89:97:ea:25:a6:1f:f4:0f: 9b:02:0f:ec:62:1a:bd:c8:f4:45:9c:89:85:a6:83: d6:30:c0:c8:0c:bd:7b:8b:3e:08:7b:13:22:a8:aa: 70:ec:f5:d6:5e:5f:33:c1:60:fc:12:da:75:eb:7c: 82:51:c3:29:2a:6f:df:50:1c:f4:c7:a6:5b:96:02: 7b:33:7f:69:f8:df:78:89:2f:ff:e9:81:d1:7d:73: 51:8f:bc:7e:92:5a:ca:b4:0f:94:84:5d:4c:a9:d6: 03:36:d9:39:64:8a:74:df:ca:eb:40:83:14:12:d3: 38:46:72:90:85:5e:4a:1b:48:d0:c9:5c:b3:e2:bc: e6:f8:92:5b:64:b6:46:77:96:d9:f8:dd:8d:6d:64: 2b:42:2f:28:36:7b:d1:51:17:e0:f4:34:48:18:3e: 06:07:7a:84:12:02:ed:25:42:e7:f0:41:4c:8f:44: 36:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DE:C4:10:E0:7B:DE:AD:D6:00:F5:63:65:3B:8C:2A:BD:7E:09:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38247fc5-9e07-3224-afca-fe7e25ab308f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:42:e7:07:fd:fe:14:23:f5:cb:76:bc:ea:62:43:ea:8f:f5: 59:ec:ba:cc:1a:63:83:a2:78:58:66:5c:31:89:79:f1:e9:2a: 31:73:3c:5d:d9:ba:80:30:10:2b:54:e3:8e:6e:11:ad:25:ed: 97:01:7f:64:70:71:e4:cc:4d:2c:a0:14:8f:38:39:d1:49:5a: c0:8b:71:51:5d:ee:e5:f0:8e:0d:47:6f:0d:49:17:a8:50:da: 00:48:19:ae:f7:e4:77:0b:f7:31:5b:3d:50:c1:5d:ee:3b:c8: 3a:5f:29:a2:46:1b:93:83:e6:9b:a9:04:3a:91:ed:41:3f:c0: e5:0e:b5:78:bb:08:62:d6:dd:cc:7f:c5:0e:c7:c5:3c:bf:ba: f1:b9:41:f2:bf:20:ee:99:f9:7a:dc:ef:88:cd:d6:4b:05:66: 9b:b7:0a:63:e4:02:4f:a4:e5:38:c9:06:75:bb:46:47:17:04: 4f:7f:7e:4d:04:57:3b:96:f4:68:49:bf:57:ff:ea:5f:26:15: ec:f1:1a:52:40:24:e3:41:62:f8:5d:af:67:af:bc:e8:c1:ed: e9:be:90:8d:ff:4d:ca:2f:30:15:de:00:b4:b8:23:3e:4d:d1: 16:1e:d8:54:0b:fe:6a:f2:13:7d:94:e6:1a:01:5c:73:b6:6a: 33:45:b4:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pB1TS6Z4Nk7MsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxNzEyMzY0MloXDTI1MDkxNTEyMzY0MlowLzEtMCsGA1UEAxMk MGMyYTY3ZDAtYjczNi00N2Q3LWI1NDctMWNjMTVkNzk3ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ijgJXvpavm16F/BaH6FzCX2whJobr4udAKR uekrq1E2iexQcGipvR93WzUn6m3oON2AKUVn6t18BRBhxH7ftikl+CBikjKUkanb SH/VG1VFiZfqJaYf9A+bAg/sYhq9yPRFnImFpoPWMMDIDL17iz4IexMiqKpw7PXW Xl8zwWD8Etp163yCUcMpKm/fUBz0x6ZblgJ7M39p+N94iS//6YHRfXNRj7x+klrK tA+UhF1MqdYDNtk5ZIp038rrQIMUEtM4RnKQhV5KG0jQyVyz4rzm+JJbZLZGd5bZ +N2NbWQrQi8oNnvRURfg9DRIGD4GB3qEEgLtJULn8EFMj0Q2OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIDexBDge96t1gD1Y2U7jCq9fgkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgyNDdmYzUtOWUwNy0z MjI0LWFmY2EtZmU3ZTI1YWIzMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAApC5wf9/hQj9ct2vOpiQ+qP9VnsuswaY4OieFhmXDGJefHpKjFz PF3ZuoAwECtU445uEa0l7ZcBf2RwceTMTSygFI84OdFJWsCLcVFd7uXwjg1Hbw1J F6hQ2gBIGa735HcL9zFbPVDBXe47yDpfKaJGG5OD5pupBDqR7UE/wOUOtXi7CGLW 3cx/xQ7HxTy/uvG5QfK/IO6Z+Xrc74jN1ksFZpu3CmPkAk+k5TjJBnW7RkcXBE9/ fk0EVzuW9GhJv1f/6l8mFezxGlJAJONBYvhdr2evvOjB7em+kI3/TcovMBXeALS4 Iz5N0RYe2FQL/mryE32U5hoBXHO2ajNFtMU= -----END CERTIFICATE-----Generated at Tue Jul 1 01:05:58 2025 by rpki-client