$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a94e1934-998f-3574-8046-fcc6f58804b3.roa File: a94e1934-998f-3574-8046-fcc6f58804b3.roa (raw, json) Hash identifier: kWOPNFXB96A5UbfLjGA8Jg5C943xxyfIfmI3dhfxJ44= Subject key identifier: D2:BC:F7:22:36:AC:BA:98:80:A5:39:76:2D:97:0A:9C:21:72:B1:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A1726448B65F8231023742D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a94e1934-998f-3574-8046-fcc6f58804b3.roa Signing time: Thu 05 Jun 2025 12:41:28 +0000 ROA not before: Thu 05 Jun 2025 12:41:28 +0000 ROA not after: Wed 03 Sep 2025 12:41:28 +0000 asID: 396584 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:26:44:8b:65:f8:23:10:23:74:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 5 12:41:28 2025 GMT Not After : Sep 3 12:41:28 2025 GMT Subject: CN=b943422f-44b4-4839-9b4b-84e484523dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:b8:d6:a4:9d:c7:32:88:b7:47:cd:ce:37: dc:2f:4c:15:cf:f1:42:4a:be:e7:a9:22:2d:e4:92: 9c:4e:70:bd:d1:fd:1c:40:c7:6a:ab:67:7e:1f:84: 94:d9:c4:0b:c6:7e:1b:22:1f:9a:c2:f8:31:97:f3: 22:69:ed:1d:6c:30:85:4b:47:b4:39:a9:33:25:8d: cc:de:76:a3:7d:18:bd:ef:c8:e4:e7:f6:7d:e8:28: 33:65:e9:a1:c4:fe:10:a6:4a:44:73:d2:73:14:f6: 06:99:72:ec:de:06:9c:92:49:5b:a0:21:6b:2a:04: 9d:6c:0a:8b:15:6d:65:e1:c0:b1:fd:0b:ab:34:0b: ed:1b:dd:51:ee:19:36:dd:e8:7d:ba:0d:96:d8:7b: c6:05:ab:85:7b:9f:22:46:4a:12:6c:df:7c:76:67: 17:6d:34:f5:38:52:3e:0c:84:b4:59:77:7c:02:43: 45:36:96:ea:b4:4e:19:71:a3:26:e2:34:99:1b:1b: ca:65:aa:35:7c:16:f1:0f:20:a4:2c:05:ea:fe:9d: 66:71:10:7f:d4:cc:d6:e4:aa:01:ba:f9:25:ef:2c: 92:e5:ba:52:4a:5a:f5:77:ba:48:3b:1b:88:30:89: 34:0a:92:12:79:99:5b:7d:6e:ae:a5:31:7a:c0:de: 02:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:BC:F7:22:36:AC:BA:98:80:A5:39:76:2D:97:0A:9C:21:72:B1:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a94e1934-998f-3574-8046-fcc6f58804b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b1:8d:a2:9b:b9:b6:18:58:06:d4:8f:5f:6a:93:d1:8b:8d: c6:f1:52:9d:a9:5f:6b:52:4a:bc:f6:4a:36:0d:5a:99:f8:d5: 6b:21:1f:f3:be:ad:35:42:a4:51:42:1d:4f:a2:86:0b:28:f0: 9d:ca:ef:3b:48:2b:44:c0:18:01:c4:ab:83:aa:d7:89:61:71: 4b:47:ab:60:ec:b1:8b:96:b5:4b:c4:ff:4a:7b:98:4a:f9:cc: 46:80:b9:7f:fb:4b:94:e5:fd:d4:88:1e:6d:96:cd:3b:76:33: 78:71:b9:cc:ff:8d:2e:66:80:ca:b3:2d:a1:d2:3c:eb:d9:f6: 94:06:86:7d:45:58:89:60:c6:4f:fe:0d:ed:f1:04:c2:01:1c: 7b:01:c0:c4:d9:29:36:6e:28:12:ab:8b:b1:7d:40:3f:cb:a8: d6:35:64:10:2e:c6:5f:6e:71:dc:d0:00:da:82:fa:e3:21:71: eb:07:a9:a6:1a:17:dd:06:b9:c2:4c:d5:0d:14:b4:ed:f4:84: 67:09:10:e9:43:3b:05:21:10:13:ca:0a:e7:02:3e:91:45:7f: 38:dd:61:54:44:90:4d:0a:a0:5c:d3:7b:17:61:31:f8:6e:f3: f0:e1:7b:51:d5:da:a7:2a:8a:25:bf:4e:b1:d1:7e:d4:ee:26: 45:69:3b:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEoXJkSLZfgjECN0LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYwNTEyNDEyOFoXDTI1MDkwMzEyNDEyOFowLzEtMCsGA1UEAxMk Yjk0MzQyMmYtNDRiNC00ODM5LTliNGItODRlNDg0NTIzZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0241qSdxzKIt0fNzjfcL0wVz/FCSr7nqSIt 5JKcTnC90f0cQMdqq2d+H4SU2cQLxn4bIh+awvgxl/Miae0dbDCFS0e0OakzJY3M 3najfRi978jk5/Z96CgzZemhxP4QpkpEc9JzFPYGmXLs3gackklboCFrKgSdbAqL FW1l4cCx/QurNAvtG91R7hk23eh9ug2W2HvGBauFe58iRkoSbN98dmcXbTT1OFI+ DIS0WXd8AkNFNpbqtE4ZcaMm4jSZGxvKZao1fBbxDyCkLAXq/p1mcRB/1MzW5KoB uvkl7yyS5bpSSlr1d7pIOxuIMIk0CpISeZlbfW6upTF6wN4CLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNK89yI2rLqYgKU5di2XCpwhcrFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk0ZTE5MzQtOTk4Zi0z NTc0LTgwNDYtZmNjNmY1ODgwNGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIGxjaKbubYYWAbUj19qk9GLjcbxUp2pX2tSSrz2SjYNWpn41Wsh H/O+rTVCpFFCHU+ihgso8J3K7ztIK0TAGAHEq4Oq14lhcUtHq2DssYuWtUvE/0p7 mEr5zEaAuX/7S5Tl/dSIHm2WzTt2M3hxucz/jS5mgMqzLaHSPOvZ9pQGhn1FWIlg xk/+De3xBMIBHHsBwMTZKTZuKBKri7F9QD/LqNY1ZBAuxl9ucdzQANqC+uMhcesH qaYaF90GucJM1Q0UtO30hGcJEOlDOwUhEBPKCucCPpFFfzjdYVREkE0KoFzTexdh Mfhu8/Dhe1HV2qcqiiW/TrHRftTuJkVpOzo= -----END CERTIFICATE-----Generated at Mon Jun 30 15:52:57 2025 by rpki-client