$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c0ae1fe-b1ba-3538-a1e7-052fae5447de.roa File: 7c0ae1fe-b1ba-3538-a1e7-052fae5447de.roa (raw, json) Hash identifier: RsqMR+GBLRL6ll9gxbq3RZU/7JjE8j3dCKpRXJDQAkI= Subject key identifier: 5F:3A:D3:0A:0F:B6:89:6E:9F:67:06:EB:A7:E7:4F:4B:84:F4:02:82 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A38A4206440FB76285874C2C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c0ae1fe-b1ba-3538-a1e7-052fae5447de.roa Signing time: Tue 17 Jun 2025 12:36:43 +0000 ROA not before: Tue 17 Jun 2025 12:36:43 +0000 ROA not after: Mon 15 Sep 2025 12:36:43 +0000 asID: 396826 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:a4:20:64:40:fb:76:28:58:74:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 17 12:36:43 2025 GMT Not After : Sep 15 12:36:43 2025 GMT Subject: CN=507e0291-250d-4c49-897d-753ace488638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:c6:a4:f8:fe:71:99:3c:74:e2:1a:89:b9: 9b:16:66:95:af:11:55:4d:6e:67:4b:e9:5b:55:08: 1c:28:59:e9:e6:d5:17:3f:19:c7:fd:0a:b4:9e:e2: 39:6f:39:37:8b:d5:07:93:24:30:e6:7a:bb:34:3c: f6:8e:e4:30:db:a4:d1:62:98:0c:48:d2:ed:dd:5e: 8a:ac:c7:cb:27:2a:c8:b3:8f:21:b0:76:ce:28:92: c4:b6:00:89:ce:5b:c0:87:30:b7:20:e3:b6:56:76: 8f:aa:2a:89:c4:7a:79:64:cb:b5:44:dd:06:47:59: 03:62:ea:21:d5:9d:0b:31:7c:44:ba:e0:e1:44:94: a4:d0:bb:a7:fe:7e:40:c3:ca:e7:0f:3c:eb:58:27: 44:1a:f4:6b:38:d7:1a:f2:05:0b:ad:14:05:be:9f: 77:2e:2d:81:d8:0d:89:08:93:43:cf:4d:ce:2e:97: b9:e3:15:5b:86:9d:ed:41:4b:45:cf:52:5f:59:2f: 4d:c9:a9:5e:41:ae:32:30:8a:44:02:9e:c1:46:9a: dc:17:50:2a:fe:f6:89:bf:0d:69:b3:ce:c8:fc:15: ad:86:eb:4d:24:19:77:e8:6f:db:6a:ad:ec:cd:e0: b1:1f:58:51:ba:a7:28:a1:4e:82:1e:1d:ef:16:37: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3A:D3:0A:0F:B6:89:6E:9F:67:06:EB:A7:E7:4F:4B:84:F4:02:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c0ae1fe-b1ba-3538-a1e7-052fae5447de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:f8:42:15:cc:bc:7c:12:0e:69:4c:45:4c:40:91:42:bb:a2: 14:94:3c:d6:65:a9:31:a0:65:f0:d7:6d:2b:f1:14:b8:f3:08: f0:5f:f2:c6:f7:28:06:62:1c:75:e6:be:8b:fa:b8:84:9a:ad: 08:c6:36:7b:30:fc:3b:ba:e2:6e:22:d0:1c:f7:02:34:82:1c: 7a:e9:4c:df:e4:1b:62:aa:e5:42:e4:2b:07:b9:00:a0:13:b4: da:f7:fe:62:04:8e:34:03:92:81:88:b1:4f:66:08:d4:fd:f1: a2:f3:f2:45:fc:be:8a:9f:0e:e9:ec:98:8d:ae:33:dd:44:84: be:32:90:3d:93:d6:75:6d:8c:28:9e:26:cb:3c:14:7e:8c:2f: e7:5b:6d:96:51:cc:76:c8:ce:d4:5a:21:09:5a:ab:d5:84:9d: 30:8e:03:70:b1:00:3a:74:e7:9f:69:70:f6:d0:24:32:99:80: b4:96:32:c5:df:41:8e:42:19:e3:82:0c:41:3b:e5:f7:87:4f: 68:83:ac:6e:84:67:59:4c:59:c2:9b:5e:db:cf:4e:65:18:73: 90:c1:cc:f9:f9:67:39:80:9c:e6:f7:c4:1c:e8:2f:c7:3a:94: 22:9c:8a:28:c0:b3:53:8e:51:17:6e:d7:5f:e5:06:0c:f6:f0: a2:02:1e:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pCBkQPt2KFh0wsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxNzEyMzY0M1oXDTI1MDkxNTEyMzY0M1owLzEtMCsGA1UEAxMk NTA3ZTAyOTEtMjUwZC00YzQ5LTg5N2QtNzUzYWNlNDg4NjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNHGpPj+cZk8dOIaibmbFmaVrxFVTW5nS+lb VQgcKFnp5tUXPxnH/Qq0nuI5bzk3i9UHkyQw5nq7NDz2juQw26TRYpgMSNLt3V6K rMfLJyrIs48hsHbOKJLEtgCJzlvAhzC3IOO2VnaPqiqJxHp5ZMu1RN0GR1kDYuoh 1Z0LMXxEuuDhRJSk0Lun/n5Aw8rnDzzrWCdEGvRrONca8gULrRQFvp93Li2B2A2J CJNDz03OLpe54xVbhp3tQUtFz1JfWS9NyaleQa4yMIpEAp7BRprcF1Aq/vaJvw1p s87I/BWthutNJBl36G/baq3szeCxH1hRuqcooU6CHh3vFjc91wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF860woPtolun2cG66fnT0uE9AKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2MwYWUxZmUtYjFiYS0z NTM4LWExZTctMDUyZmFlNTQ0N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALX4QhXMvHwSDmlMRUxAkUK7ohSUPNZlqTGgZfDXbSvxFLjzCPBf 8sb3KAZiHHXmvov6uISarQjGNnsw/Du64m4i0Bz3AjSCHHrpTN/kG2Kq5ULkKwe5 AKATtNr3/mIEjjQDkoGIsU9mCNT98aLz8kX8voqfDunsmI2uM91EhL4ykD2T1nVt jCieJss8FH6ML+dbbZZRzHbIztRaIQlaq9WEnTCOA3CxADp0559pcPbQJDKZgLSW MsXfQY5CGeOCDEE75feHT2iDrG6EZ1lMWcKbXtvPTmUYc5DBzPn5ZzmAnOb3xBzo L8c6lCKciijAs1OOURdu11/lBgz28KICHjI= -----END CERTIFICATE-----Generated at Mon Jun 30 14:43:56 2025 by rpki-client