$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b686f9-3c40-3d49-b8ed-3e89bacaa5c9.roa File: 43b686f9-3c40-3d49-b8ed-3e89bacaa5c9.roa (raw, json) Hash identifier: lh2dQzyviQDp0QyE1uO2tdAHtegDdqi09pffJFbNIOg= Subject key identifier: 1F:80:D4:2E:08:CE:63:DF:24:96:F0:BD:78:EF:C1:90:10:BD:7D:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A38A418FA5F3A75451FFEA200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b686f9-3c40-3d49-b8ed-3e89bacaa5c9.roa Signing time: Tue 17 Jun 2025 12:36:40 +0000 ROA not before: Tue 17 Jun 2025 12:36:40 +0000 ROA not after: Mon 15 Sep 2025 12:36:40 +0000 asID: 396574 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:a4:18:fa:5f:3a:75:45:1f:fe:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 17 12:36:40 2025 GMT Not After : Sep 15 12:36:40 2025 GMT Subject: CN=b887eeae-8cfa-46a9-ac09-28b31cd52666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:e3:b9:24:df:88:0a:fe:64:01:1a:1b:b4: aa:cb:25:d9:44:7f:15:b6:7d:c7:96:40:f1:89:fe: d6:87:72:92:d1:a4:90:90:2d:63:11:7d:ad:88:b3: a7:de:34:0d:02:80:0c:d1:d1:a1:25:53:96:92:4c: 88:ed:d3:d4:03:a5:bc:6c:8b:97:f6:a7:b5:57:02: 67:f5:4d:bb:2e:f1:30:6d:22:ed:77:40:56:56:06: b6:fd:db:3b:ad:6b:3a:46:6a:a7:d0:40:c7:ae:22: 4b:a2:9b:2d:43:43:59:ea:e6:77:14:77:e3:7e:b9: 80:00:cc:fd:9c:28:92:0d:7f:27:3d:b2:b6:c9:67: 3e:e5:3f:01:29:0f:57:cd:1b:67:4f:44:b3:9d:39: ca:37:97:36:49:71:77:61:c2:3a:6c:fb:c5:9e:a9: a9:e7:cb:3e:0d:1a:c5:af:52:03:77:51:79:4b:34: ef:16:10:7a:3d:bb:33:71:64:99:da:2f:a6:e4:c9: 50:58:7d:2f:89:a5:f4:51:28:fc:df:c3:a1:0c:22: cb:0a:b3:9c:f6:8c:2e:7a:5c:d5:36:e6:5e:1c:39: 08:c2:4d:c3:8f:c9:c4:46:70:3f:b3:2f:56:47:1e: e7:87:65:9d:16:47:3a:1b:87:56:cd:ab:c1:4c:4a: 7f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:80:D4:2E:08:CE:63:DF:24:96:F0:BD:78:EF:C1:90:10:BD:7D:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b686f9-3c40-3d49-b8ed-3e89bacaa5c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a5:5f:c5:23:e6:c9:17:59:76:32:27:62:52:a0:f3:29:a4: 98:81:8f:16:69:9d:5c:e5:49:2f:11:67:e1:fa:30:14:86:36: a6:81:48:38:a8:86:2b:c9:64:bd:85:b9:ff:b8:7a:87:d6:a9: 54:c8:1e:9f:a1:2c:62:e1:a9:ca:1a:93:28:50:be:cf:d6:b9: d1:8a:34:18:b6:bc:40:c2:3e:4a:1c:54:89:1c:b1:59:60:e8: 8d:6b:23:af:c5:54:08:57:be:e8:00:d4:74:4d:64:82:fe:ca: f1:7f:c4:36:12:da:8a:75:d0:a1:4f:dd:ea:de:eb:4f:9e:c6: 87:7f:64:40:51:9b:c8:df:ef:7a:d6:7a:a2:c6:01:41:dc:75: c9:3c:ea:e5:09:76:d9:99:fc:35:ca:cf:e7:c5:95:eb:2d:59: 0c:f2:d1:81:7f:fe:d6:1e:8d:32:88:3a:9b:18:c3:76:c2:78: 0b:97:ea:f2:50:9f:c3:81:4c:d8:d3:d3:b9:62:60:81:75:8c: 78:c1:ab:12:f1:77:cb:e3:d5:17:8d:29:35:ed:c3:75:66:fa: 65:66:38:37:fd:2b:e1:d9:8e:d6:1b:be:2f:41:27:2b:f7:54: ab:ba:0a:ff:8b:47:37:ae:ab:ed:e4:b0:f8:34:73:42:76:0b: 60:2d:99:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pBj6Xzp1RR/+ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxNzEyMzY0MFoXDTI1MDkxNTEyMzY0MFowLzEtMCsGA1UEAxMk Yjg4N2VlYWUtOGNmYS00NmE5LWFjMDktMjhiMzFjZDUyNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXbjuSTfiAr+ZAEaG7SqyyXZRH8Vtn3HlkDx if7Wh3KS0aSQkC1jEX2tiLOn3jQNAoAM0dGhJVOWkkyI7dPUA6W8bIuX9qe1VwJn 9U27LvEwbSLtd0BWVga2/ds7rWs6Rmqn0EDHriJLopstQ0NZ6uZ3FHfjfrmAAMz9 nCiSDX8nPbK2yWc+5T8BKQ9XzRtnT0SznTnKN5c2SXF3YcI6bPvFnqmp58s+DRrF r1IDd1F5SzTvFhB6PbszcWSZ2i+m5MlQWH0viaX0USj838OhDCLLCrOc9owuelzV NuZeHDkIwk3Dj8nERnA/sy9WRx7nh2WdFkc6G4dWzavBTEp/IwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB+A1C4IzmPfJJbwvXjvwZAQvX2pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNiNjg2ZjktM2M0MC0z ZDQ5LWI4ZWQtM2U4OWJhY2FhNWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFilX8Uj5skXWXYyJ2JSoPMppJiBjxZpnVzlSS8RZ+H6MBSGNqaB SDiohivJZL2Fuf+4eofWqVTIHp+hLGLhqcoakyhQvs/WudGKNBi2vEDCPkocVIkc sVlg6I1rI6/FVAhXvugA1HRNZIL+yvF/xDYS2op10KFP3ere60+exod/ZEBRm8jf 73rWeqLGAUHcdck86uUJdtmZ/DXKz+fFlestWQzy0YF//tYejTKIOpsYw3bCeAuX 6vJQn8OBTNjT07liYIF1jHjBqxLxd8vj1ReNKTXtw3Vm+mVmODf9K+HZjtYbvi9B Jyv3VKu6Cv+LRzeuq+3ksPg0c0J2C2AtmXg= -----END CERTIFICATE-----Generated at Mon Jun 30 10:45:05 2025 by rpki-client