$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d97d402-819d-3c28-9ee4-5b4b4c5aa12f.roa File: 4d97d402-819d-3c28-9ee4-5b4b4c5aa12f.roa (raw, json) Hash identifier: 5a9aX2v3t4lyDOwSAAKVy8tZQL5QC2oSi1C6IV3qjGk= Subject key identifier: DA:23:A4:01:8E:9B:77:30:FD:1F:BA:1E:DD:DB:C3:FE:92:F2:C1:9B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6F9F887D219E0608D55E40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d97d402-819d-3c28-9ee4-5b4b4c5aa12f.roa Signing time: Wed 18 Jun 2025 12:38:22 +0000 ROA not before: Wed 18 Jun 2025 12:38:22 +0000 ROA not after: Tue 16 Sep 2025 12:38:22 +0000 asID: 396597 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:9f:88:7d:21:9e:06:08:d5:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:22 2025 GMT Not After : Sep 16 12:38:22 2025 GMT Subject: CN=cbd2b1dd-26b9-468a-bd63-5d55ecf9eb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:22:6e:17:57:c0:20:46:23:29:fd:f3:48:d1: cb:b0:1c:14:97:2b:f0:c7:8f:cc:16:0b:2c:68:94: 56:5f:80:71:93:3e:15:fc:2c:04:e1:b0:4e:17:b8: 47:ae:02:7e:ab:66:71:03:4a:17:a6:f9:e0:d1:9f: 86:b9:4a:49:f1:a1:ae:32:c6:d0:9f:d7:30:90:55: 28:53:cc:36:38:43:b8:ce:b2:97:f2:42:3c:a5:91: 0b:db:16:b7:67:34:b3:bf:e4:e7:3e:7a:7b:71:85: 78:e4:35:6b:4c:af:38:ae:9f:65:e9:14:82:79:6f: 56:95:8f:12:94:3b:ff:ba:68:7d:8f:30:a1:6f:a2: f0:7a:20:f6:24:72:d8:ab:e2:75:71:ee:56:da:a9: 6c:5c:c3:f3:41:5e:77:3a:83:80:50:1b:ab:ad:ea: 55:a0:c4:3a:6b:b8:90:5f:6c:22:97:10:68:12:17: c7:f1:95:3b:6f:e6:8c:e8:2c:38:3e:0e:53:da:91: 20:21:2e:a8:25:96:42:0f:71:ac:b6:b9:e1:c7:aa: d2:0e:87:8b:e2:aa:88:ec:9e:ea:5d:2b:7f:5f:9a: 21:b9:a8:0a:c5:9f:3e:83:45:ab:5f:92:b7:86:59: e5:9e:7b:fe:35:33:16:37:38:ed:1f:1b:89:94:91: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:23:A4:01:8E:9B:77:30:FD:1F:BA:1E:DD:DB:C3:FE:92:F2:C1:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d97d402-819d-3c28-9ee4-5b4b4c5aa12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:33:37:bc:33:1a:0b:63:fa:bd:ef:f8:26:fc:be:8c:37:db: bb:28:be:1f:87:64:b7:23:f4:9b:66:75:55:bb:55:49:42:86: 2c:55:ed:82:be:44:12:4e:28:21:a8:79:51:d5:d1:fb:ee:32: b4:d1:70:2c:10:2d:3b:de:ed:26:fa:3f:58:05:15:ee:42:e3: 00:55:42:2c:ea:8e:b8:88:c2:ea:4d:f3:2b:6d:1b:46:8d:4e: e9:30:95:c6:96:66:30:aa:80:c5:5b:70:0a:e3:ee:9b:56:d0: 05:1d:07:43:02:97:4b:4e:9e:ae:83:6a:c5:2e:37:62:e2:dd: a2:46:da:80:3c:a8:fb:0f:9f:1c:4e:67:2b:d5:35:d0:00:60: 55:af:9a:bb:a7:6f:09:79:c0:ba:fb:34:c3:86:0f:90:48:84: 59:4c:c6:b3:52:94:b0:b3:5b:ea:29:a8:66:50:1f:78:d1:bc: 6c:bd:82:1d:a6:e7:e8:44:92:ad:f3:f0:b9:80:bb:dc:1e:2b: 35:3b:1b:65:75:0d:c0:3f:40:05:b1:8f:2f:d9:45:c7:e7:21: 3a:f9:75:f8:fb:48:ef:73:0a:de:91:e4:0c:59:6f:d8:49:e0: fb:69:69:bf:ef:f4:24:2c:86:1c:f1:1e:e4:0f:fc:91:b3:51: f6:2a:93:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b5+IfSGeBgjVXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyMloXDTI1MDkxNjEyMzgyMlowLzEtMCsGA1UEAxMk Y2JkMmIxZGQtMjZiOS00NjhhLWJkNjMtNWQ1NWVjZjllYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCJuF1fAIEYjKf3zSNHLsBwUlyvwx4/MFgss aJRWX4Bxkz4V/CwE4bBOF7hHrgJ+q2ZxA0oXpvng0Z+GuUpJ8aGuMsbQn9cwkFUo U8w2OEO4zrKX8kI8pZEL2xa3ZzSzv+TnPnp7cYV45DVrTK84rp9l6RSCeW9WlY8S lDv/umh9jzChb6LweiD2JHLYq+J1ce5W2qlsXMPzQV53OoOAUBurrepVoMQ6a7iQ X2wilxBoEhfH8ZU7b+aM6Cw4Pg5T2pEgIS6oJZZCD3Gstrnhx6rSDoeL4qqI7J7q XSt/X5ohuagKxZ8+g0WrX5K3hlnlnnv+NTMWNzjtHxuJlJFQEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNojpAGOm3cw/R+6Ht3bw/6S8sGbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGQ5N2Q0MDItODE5ZC0z YzI4LTllZTQtNWI0YjRjNWFhMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALMzN7wzGgtj+r3v+Cb8vow327sovh+HZLcj9JtmdVW7VUlChixV 7YK+RBJOKCGoeVHV0fvuMrTRcCwQLTve7Sb6P1gFFe5C4wBVQizqjriIwupN8ytt G0aNTukwlcaWZjCqgMVbcArj7ptW0AUdB0MCl0tOnq6DasUuN2Li3aJG2oA8qPsP nxxOZyvVNdAAYFWvmrunbwl5wLr7NMOGD5BIhFlMxrNSlLCzW+opqGZQH3jRvGy9 gh2m5+hEkq3z8LmAu9weKzU7G2V1DcA/QAWxjy/ZRcfnITr5dfj7SO9zCt6R5AxZ b9hJ4Ptpab/v9CQshhzxHuQP/JGzUfYqkyk= -----END CERTIFICATE-----Generated at Mon Jun 30 11:31:58 2025 by rpki-client