$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41e09e71-e3e9-3d71-b160-d3eb8b390bae.roa File: 41e09e71-e3e9-3d71-b160-d3eb8b390bae.roa (raw, json) Hash identifier: 29Ki39zE0iKeMO3eLmfQIlJrrapWDq2miM0HPaEyiVA= Subject key identifier: D1:86:96:39:B4:EE:CE:58:A8:7F:04:A8:0A:2C:84:89:51:98:42:AE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6F9F23A882DEE1BECA2C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41e09e71-e3e9-3d71-b160-d3eb8b390bae.roa Signing time: Wed 18 Jun 2025 12:38:22 +0000 ROA not before: Wed 18 Jun 2025 12:38:22 +0000 ROA not after: Tue 16 Sep 2025 12:38:22 +0000 asID: 20172 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:9f:23:a8:82:de:e1:be:ca:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:22 2025 GMT Not After : Sep 16 12:38:22 2025 GMT Subject: CN=069ad3c7-81c4-4979-ae11-97ce83b65695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:e6:f1:f3:64:60:19:be:2b:a8:54:9e:32: 48:6b:f6:cb:38:12:78:7b:a0:92:d9:e5:61:f1:f9: 7a:94:c1:56:c4:6f:3c:9e:23:6f:46:c7:b4:19:dc: 25:77:58:f5:90:83:0a:2c:20:d7:bc:12:2c:8c:d0: 2c:4b:3c:6d:0d:c2:67:d4:94:b5:5b:52:18:1b:ae: 65:80:98:fb:3d:d5:86:da:2f:1c:7f:c9:30:10:08: 92:3c:05:0f:db:14:ab:b1:9e:ef:f9:97:9f:a5:f2: 82:0b:0a:64:e4:5b:78:56:78:8d:49:9a:cb:c9:bf: 1e:92:70:59:45:6e:07:3f:50:55:75:46:dd:aa:ad: f2:05:d6:02:3d:b7:e1:c4:3a:4f:79:9e:f0:da:3a: b0:e1:08:ff:2d:00:8b:ac:a2:01:07:3e:ab:15:c5: 4d:cb:d5:78:03:d1:9a:a5:59:73:ef:0a:df:e1:44: bb:12:74:72:7c:a7:09:60:d6:3b:7e:18:a4:20:44: 23:b5:e6:69:33:36:b7:8f:22:71:be:40:d9:f7:30: 3f:13:31:9d:85:26:33:07:a8:b3:d6:20:d8:9f:57: 43:90:4b:87:30:8f:03:3e:c3:2b:7e:b0:32:c3:4f: 20:47:39:75:0e:91:9b:23:3e:68:7f:f6:bd:11:13: 61:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:86:96:39:B4:EE:CE:58:A8:7F:04:A8:0A:2C:84:89:51:98:42:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41e09e71-e3e9-3d71-b160-d3eb8b390bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:40:44:20:0c:0f:16:e7:1f:f4:09:fc:f9:4b:9f:64:2f:fd: d7:c4:1b:0c:b6:6d:f0:5e:41:0f:2d:70:db:0d:a7:e5:41:79: ad:27:13:02:83:cb:da:8b:0f:1c:e0:ea:ba:be:4b:94:d0:48: 45:4a:91:39:fd:fc:b6:d2:c8:10:16:f8:1e:49:53:7d:26:a5: 41:50:60:b6:e0:69:98:2e:b4:0c:b5:25:d1:65:9b:79:dd:69: 1a:e4:8a:97:12:9b:83:6b:1f:ca:33:e6:f4:91:5a:04:c8:a9: c2:21:20:8b:d0:27:61:ba:a7:da:f2:a1:87:71:d0:b2:88:de: 2e:21:e1:ba:7d:1d:e6:6f:45:c4:48:c7:4b:6b:9e:91:ba:09: b8:b7:cb:32:61:9e:0e:55:0b:46:81:7a:9e:41:a5:67:9d:87: 56:b4:0a:d1:6c:6f:6b:e4:11:bc:14:b8:ba:34:cc:16:e9:81: 02:18:6d:bf:ab:66:9b:15:9b:f9:39:6b:a1:f3:6f:27:88:73: 21:a6:be:90:02:93:a7:94:8b:7d:22:a7:6f:52:2a:c2:d7:93: 5f:b0:ea:31:31:3d:83:e2:b1:26:71:c0:48:c7:d5:fc:ca:b7: e3:c8:59:84:7d:ad:00:4a:9a:a9:f3:f1:a4:75:b2:69:06:f0: e9:b5:8b:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b58jqILe4b7KLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyMloXDTI1MDkxNjEyMzgyMlowLzEtMCsGA1UEAxMk MDY5YWQzYzctODFjNC00OTc5LWFlMTEtOTdjZTgzYjY1Njk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4Dm8fNkYBm+K6hUnjJIa/bLOBJ4e6CS2eVh 8fl6lMFWxG88niNvRse0Gdwld1j1kIMKLCDXvBIsjNAsSzxtDcJn1JS1W1IYG65l gJj7PdWG2i8cf8kwEAiSPAUP2xSrsZ7v+ZefpfKCCwpk5Ft4VniNSZrLyb8eknBZ RW4HP1BVdUbdqq3yBdYCPbfhxDpPeZ7w2jqw4Qj/LQCLrKIBBz6rFcVNy9V4A9Ga pVlz7wrf4US7EnRyfKcJYNY7fhikIEQjteZpMza3jyJxvkDZ9zA/EzGdhSYzB6iz 1iDYn1dDkEuHMI8DPsMrfrAyw08gRzl1DpGbIz5of/a9ERNhpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNGGljm07s5YqH8EqAoshIlRmEKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDFlMDllNzEtZTNlOS0z ZDcxLWIxNjAtZDNlYjhiMzkwYmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAVARCAMDxbnH/QJ/PlLn2Qv/dfEGwy2bfBeQQ8tcNsNp+VBea0n EwKDy9qLDxzg6rq+S5TQSEVKkTn9/LbSyBAW+B5JU30mpUFQYLbgaZgutAy1JdFl m3ndaRrkipcSm4NrH8oz5vSRWgTIqcIhIIvQJ2G6p9ryoYdx0LKI3i4h4bp9HeZv RcRIx0trnpG6Cbi3yzJhng5VC0aBep5BpWedh1a0CtFsb2vkEbwUuLo0zBbpgQIY bb+rZpsVm/k5a6HzbyeIcyGmvpACk6eUi30ip29SKsLXk1+w6jExPYPisSZxwEjH 1fzKt+PIWYR9rQBKmqnz8aR1smkG8Om1i5o= -----END CERTIFICATE-----Generated at Mon Jun 30 11:43:20 2025 by rpki-client