$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8ef83a-4865-36b2-aba1-67cdd68651e4.roa File: 4c8ef83a-4865-36b2-aba1-67cdd68651e4.roa (raw, json) Hash identifier: xmLKmFx5I71nzxRS2S+f1ZPlz1wTnW0b1ldg6CxIdPs= Subject key identifier: E0:A7:6B:BE:3E:4E:84:D1:99:7C:5C:33:1C:83:FA:5D:B8:1E:82:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6FA17061D93310207B23C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8ef83a-4865-36b2-aba1-67cdd68651e4.roa Signing time: Wed 18 Jun 2025 12:38:23 +0000 ROA not before: Wed 18 Jun 2025 12:38:23 +0000 ROA not after: Tue 16 Sep 2025 12:38:23 +0000 asID: 396566 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:a1:70:61:d9:33:10:20:7b:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:23 2025 GMT Not After : Sep 16 12:38:23 2025 GMT Subject: CN=84df5a68-346e-488f-8f64-26238d215991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:ee:99:24:56:81:04:78:6a:b6:36:65:8c: b0:c0:c5:36:db:9c:2e:7d:62:50:6c:93:db:98:ea: 8f:cc:01:ba:00:ca:24:6f:84:22:ca:30:2a:6b:ba: f1:dd:69:df:41:1e:d5:cf:da:95:52:e9:a7:b1:c2: 0a:a3:9d:2d:a0:bf:ac:c5:83:d9:b4:42:8a:9d:53: 22:c1:f4:7d:84:7d:af:57:73:92:52:d7:ec:54:65: 1a:ef:94:ac:2a:f0:5f:c5:88:1c:ba:2c:be:96:26: 92:3d:d6:e1:b1:a7:3b:7d:ed:b1:c1:ed:4d:b1:1e: d9:4c:ef:67:db:b1:72:d3:53:3f:77:27:68:56:e3: fc:be:c1:ae:de:cc:e5:b7:58:e7:55:c5:83:c3:c4: 91:f1:94:73:29:bc:90:39:89:47:dd:8a:41:cf:a4: a4:45:a2:0a:a5:a1:ca:28:eb:e5:3e:e4:02:de:34: 62:05:0c:42:bb:d4:a3:b9:91:57:a5:31:d4:04:82: ff:c2:07:8a:0f:da:2a:a2:e9:aa:7c:e1:87:8a:19: 80:79:7f:d5:f9:7a:c4:3a:2c:d7:0e:67:bb:35:00: a3:bd:9a:dd:a2:24:f5:5e:4d:26:e9:80:5d:e0:c6: 22:9a:86:f8:bd:a8:36:a1:0a:6a:21:de:13:c3:86: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A7:6B:BE:3E:4E:84:D1:99:7C:5C:33:1C:83:FA:5D:B8:1E:82:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8ef83a-4865-36b2-aba1-67cdd68651e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:75:36:de:65:65:11:a2:e1:86:a6:5f:36:69:d5:d4:58:d1: bb:9b:29:5b:36:82:4f:81:02:a5:f4:29:60:79:23:1a:36:ee: 0e:c9:82:cb:66:d7:ad:80:b2:11:58:8a:96:13:e8:88:16:68: ed:5d:49:76:26:e0:ee:41:1f:1c:53:c1:a4:e3:ea:10:ee:89: ce:0a:ae:7f:b6:a4:b3:07:0e:46:55:70:39:5f:8e:05:05:f4: dc:20:24:84:45:a3:b0:d8:06:6d:ef:87:cf:33:76:d4:92:74: ec:54:30:85:e8:b3:e3:40:ea:3b:f6:e8:ca:c4:6d:34:9f:d3: 00:32:ec:93:5e:68:18:a5:70:ae:ae:f9:ce:fe:ac:b1:5d:69: 42:be:b7:8a:1a:c3:53:02:5c:4f:28:9b:b7:b9:52:d9:d4:5e: ff:95:5d:70:1c:19:4f:14:8a:aa:41:42:84:f5:b4:1e:4d:24: bf:02:32:d8:d6:1a:d6:b4:f7:06:e0:0c:97:c3:aa:81:45:49: ed:cc:cb:81:2f:9f:62:ac:ec:4a:88:77:e7:05:84:be:0a:2c: dc:a9:d8:94:c2:73:65:14:5c:8b:98:3e:56:f9:53:60:9d:e4: aa:5d:7c:30:b9:28:2e:13:88:40:b2:52:e6:67:4b:22:7d:b6: 6f:1a:77:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b6FwYdkzECB7I8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyM1oXDTI1MDkxNjEyMzgyM1owLzEtMCsGA1UEAxMk ODRkZjVhNjgtMzQ2ZS00ODhmLThmNjQtMjYyMzhkMjE1OTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbzumSRWgQR4arY2ZYywwMU225wufWJQbJPb mOqPzAG6AMokb4QiyjAqa7rx3WnfQR7Vz9qVUumnscIKo50toL+sxYPZtEKKnVMi wfR9hH2vV3OSUtfsVGUa75SsKvBfxYgcuiy+liaSPdbhsac7fe2xwe1NsR7ZTO9n 27Fy01M/dydoVuP8vsGu3szlt1jnVcWDw8SR8ZRzKbyQOYlH3YpBz6SkRaIKpaHK KOvlPuQC3jRiBQxCu9SjuZFXpTHUBIL/wgeKD9oqoumqfOGHihmAeX/V+XrEOizX Dme7NQCjvZrdoiT1Xk0m6YBd4MYimob4vag2oQpqId4Tw4a5HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOCna74+ToTRmXxcMxyD+l24HoI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGM4ZWY4M2EtNDg2NS0z NmIyLWFiYTEtNjdjZGQ2ODY1MWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD51Nt5lZRGi4YamXzZp1dRY0bubKVs2gk+BAqX0KWB5Ixo27g7J gstm162AshFYipYT6IgWaO1dSXYm4O5BHxxTwaTj6hDuic4Krn+2pLMHDkZVcDlf jgUF9NwgJIRFo7DYBm3vh88zdtSSdOxUMIXos+NA6jv26MrEbTSf0wAy7JNeaBil cK6u+c7+rLFdaUK+t4oaw1MCXE8om7e5UtnUXv+VXXAcGU8UiqpBQoT1tB5NJL8C MtjWGta09wbgDJfDqoFFSe3My4Evn2Ks7EqId+cFhL4KLNyp2JTCc2UUXIuYPlb5 U2Cd5KpdfDC5KC4TiECyUuZnSyJ9tm8adwc= -----END CERTIFICATE-----Generated at Tue Jul 1 07:06:16 2025 by rpki-client