$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48abd405-b0aa-3655-a270-81a325d7404f.roa File: 48abd405-b0aa-3655-a270-81a325d7404f.roa (raw, json) Hash identifier: MnLHXJq8a1HWXUfsacZcwwJRYbyvmgek1ZBW+/oPs/k= Subject key identifier: 49:65:0E:6E:40:94:2C:36:35:74:78:83:04:5C:DD:6C:30:81:0D:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6FA272F7BE4255C0A42B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48abd405-b0aa-3655-a270-81a325d7404f.roa Signing time: Wed 18 Jun 2025 12:38:23 +0000 ROA not before: Wed 18 Jun 2025 12:38:23 +0000 ROA not after: Tue 16 Sep 2025 12:38:23 +0000 asID: 397200 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:a2:72:f7:be:42:55:c0:a4:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:23 2025 GMT Not After : Sep 16 12:38:23 2025 GMT Subject: CN=11587de6-7584-4c5b-9510-f0f0dab2bbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:03:fb:cf:d8:bf:3e:ff:56:37:66:72:08: 63:fc:33:72:60:bc:da:c0:d6:8e:75:e4:05:76:c5: a1:49:09:3f:e7:96:d6:0b:d8:55:fc:b8:a5:11:59: 84:f3:a8:a5:e9:69:10:a7:25:de:5f:ad:c9:9c:12: 6c:80:e6:b8:c6:0c:b0:ab:70:d6:67:d7:71:1e:a2: 7e:2c:dc:81:47:65:9c:62:45:9a:8b:20:3b:43:29: 68:14:06:a7:a9:58:c5:5e:5f:29:c4:79:c9:63:d6: 42:7f:50:2a:7f:3b:06:4d:54:23:d2:ff:a6:d6:0a: c9:27:7f:60:e4:d0:08:c0:e3:af:38:64:07:37:21: b7:b8:43:df:d5:f2:42:b1:36:ff:b2:1f:9b:08:67: c8:f4:d3:44:b3:75:78:cc:fb:49:77:4d:ee:5a:e8: b4:3e:04:44:bf:fb:6e:87:ca:71:03:6d:0d:26:84: e6:ef:0b:75:bc:c2:40:07:72:57:3a:50:7c:06:ed: 59:3e:16:71:5c:ad:e1:0b:01:84:d3:d8:72:7a:b6: 22:4b:1a:ac:ac:5a:5c:91:25:1f:23:1d:76:45:cf: 5d:39:cf:5a:ec:19:05:c0:36:65:60:00:96:e9:67: 68:0f:43:03:da:8b:dc:f1:8d:1e:b7:27:e1:a8:a5: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:65:0E:6E:40:94:2C:36:35:74:78:83:04:5C:DD:6C:30:81:0D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48abd405-b0aa-3655-a270-81a325d7404f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fa:94:1b:13:f0:e9:04:60:00:b1:43:b1:c5:62:56:e7:3a: fa:53:13:74:fa:49:ae:2d:b7:cf:65:45:75:83:f4:06:7c:7b: 68:ac:40:fb:1e:06:21:6b:f2:95:34:3c:b2:17:7b:da:b7:69: 33:52:78:14:b8:cb:05:cd:ea:61:f8:cd:e1:90:32:56:82:6c: b6:10:c0:21:30:5e:ac:6d:cd:6d:8a:70:63:5f:45:4d:af:2e: 1f:75:76:e8:7f:4e:31:dd:3f:ba:ee:e4:f2:57:8d:8b:12:6a: bb:65:4f:05:83:d4:52:73:ea:a8:72:6c:55:e1:48:ba:d2:b7: 80:a8:33:94:17:7d:2a:ea:af:3c:d6:c4:d6:5e:36:d2:e3:32: a1:38:be:ae:7b:31:31:02:93:a0:89:a9:c4:08:75:8f:43:94: 06:54:23:84:1b:41:f2:e9:d9:e6:83:f4:fa:bd:ad:aa:ca:e7: f1:30:99:48:2f:e5:62:d5:78:b0:9d:44:f1:18:1e:fe:bb:24: 3c:6f:64:d0:83:38:04:f7:4f:c3:f9:fe:39:9f:06:43:0d:99: ba:bc:67:bc:f4:2d:c0:3d:51:b3:75:7c:2b:e4:d7:36:a3:d4: 30:b2:82:46:17:23:6b:17:e4:a6:6a:44:83:bb:03:6d:20:1c: c7:a5:22:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b6Jy975CVcCkKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyM1oXDTI1MDkxNjEyMzgyM1owLzEtMCsGA1UEAxMk MTE1ODdkZTYtNzU4NC00YzViLTk1MTAtZjBmMGRhYjJiYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaUD+8/Yvz7/Vjdmcghj/DNyYLzawNaOdeQF dsWhSQk/55bWC9hV/LilEVmE86il6WkQpyXeX63JnBJsgOa4xgywq3DWZ9dxHqJ+ LNyBR2WcYkWaiyA7QyloFAanqVjFXl8pxHnJY9ZCf1AqfzsGTVQj0v+m1grJJ39g 5NAIwOOvOGQHNyG3uEPf1fJCsTb/sh+bCGfI9NNEs3V4zPtJd03uWui0PgREv/tu h8pxA20NJoTm7wt1vMJAB3JXOlB8Bu1ZPhZxXK3hCwGE09hyerYiSxqsrFpckSUf Ix12Rc9dOc9a7BkFwDZlYACW6WdoD0MD2ovc8Y0etyfhqKV5aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEllDm5AlCw2NXR4gwRc3WwwgQ1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDhhYmQ0MDUtYjBhYS0z NjU1LWEyNzAtODFhMzI1ZDc0MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIz6lBsT8OkEYACxQ7HFYlbnOvpTE3T6Sa4tt89lRXWD9AZ8e2is QPseBiFr8pU0PLIXe9q3aTNSeBS4ywXN6mH4zeGQMlaCbLYQwCEwXqxtzW2KcGNf RU2vLh91duh/TjHdP7ru5PJXjYsSartlTwWD1FJz6qhybFXhSLrSt4CoM5QXfSrq rzzWxNZeNtLjMqE4vq57MTECk6CJqcQIdY9DlAZUI4QbQfLp2eaD9Pq9rarK5/Ew mUgv5WLVeLCdRPEYHv67JDxvZNCDOAT3T8P5/jmfBkMNmbq8Z7z0LcA9UbN1fCvk 1zaj1DCygkYXI2sX5KZqRIO7A20gHMelIrQ= -----END CERTIFICATE-----Generated at Tue Jul 1 13:22:47 2025 by rpki-client