$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeff4f7c-9410-3a7a-abff-2149f38dd24a.roa File: aeff4f7c-9410-3a7a-abff-2149f38dd24a.roa (raw, json) Hash identifier: B+7C8wnypvcr+0akSvrW2cpV2rCO68vcAg/J8iGdaNo= Subject key identifier: CD:32:A0:E7:9C:45:D8:39:77:AC:94:A2:00:91:60:18:25:40:82:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6FA2E6688DF23F57C9CD30 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeff4f7c-9410-3a7a-abff-2149f38dd24a.roa Signing time: Wed 18 Jun 2025 12:38:23 +0000 ROA not before: Wed 18 Jun 2025 12:38:23 +0000 ROA not after: Tue 16 Sep 2025 12:38:23 +0000 asID: 396606 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:a2:e6:68:8d:f2:3f:57:c9:cd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:23 2025 GMT Not After : Sep 16 12:38:23 2025 GMT Subject: CN=4af89cf1-84c2-4c5f-9cc2-be4cf78d16ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3d:a5:74:ed:62:04:3d:d9:be:c0:a9:a3:77: 23:3d:f0:c2:5d:26:e3:54:73:f6:37:57:6f:ad:88: 74:f7:2a:d7:36:22:f7:c2:b4:75:fe:0b:5e:c9:6e: 12:34:7f:ba:c9:1b:ba:d3:76:f3:18:a4:e4:92:97: 03:ad:ec:d2:3e:69:e5:17:aa:7f:9f:23:bd:60:42: cd:a1:d4:88:cc:50:25:95:6a:36:da:5a:58:af:87: 46:25:d5:40:6d:8d:c0:60:42:94:a9:08:37:a0:36: 79:81:fe:88:a3:ec:29:f1:c6:d5:75:37:2c:82:26: fb:24:4d:dc:6d:73:31:6c:4b:cb:f8:68:77:ab:c2: 08:32:81:26:7d:06:27:40:3b:ec:67:bd:15:0d:31: b6:86:d8:00:e5:4f:79:5c:b5:4c:01:56:0d:8e:f7: 4e:69:61:d9:e3:52:2f:cc:1f:fd:3b:aa:f8:95:29: be:01:18:12:01:99:f0:cb:09:e8:83:b9:c2:02:69: c6:86:72:9d:8f:3a:48:fd:db:57:56:79:35:ef:c1: 01:9a:6a:20:56:32:b2:b8:ca:3a:c0:1c:42:7f:2e: a7:5e:43:64:d7:b4:48:a7:04:a5:ff:3f:31:13:b6: 82:e7:0f:c7:9d:d7:ce:91:36:f0:c0:75:7a:e4:69: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:32:A0:E7:9C:45:D8:39:77:AC:94:A2:00:91:60:18:25:40:82:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeff4f7c-9410-3a7a-abff-2149f38dd24a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:31:b3:04:75:d3:75:4f:b0:c1:3f:69:f5:3f:7f:6b:80:53: 0d:ec:d6:39:85:1a:6c:85:d2:4f:20:6d:fb:cb:c0:55:fd:d8: 36:7c:ae:00:20:45:53:60:e6:3a:73:fb:fa:d9:39:ea:04:be: 04:2c:81:4e:2c:0b:35:50:c4:a7:5f:39:42:78:65:51:c1:7d: 4e:5c:32:8f:6f:98:38:78:ab:11:3d:bd:52:6a:b0:3a:1e:e4: b3:ce:bd:1c:5a:dc:4c:94:9d:0b:57:ec:62:f3:d4:5e:6e:a6: cb:a3:8b:90:a4:ec:88:14:f3:28:c2:0e:57:a2:07:d1:7d:82: e6:83:36:0e:fb:17:2e:ab:15:37:5a:22:9b:f2:bd:61:17:d8: 0c:ef:c2:f0:8a:b1:cf:e4:6a:b1:50:b6:97:b5:a8:71:52:11: 16:e2:39:7e:f7:bf:ba:3d:e0:d8:e8:4a:9a:a7:6a:b3:9d:53: 84:17:d6:7a:e1:04:5a:05:50:36:a1:76:44:1c:3b:19:77:17: 88:35:76:70:58:d5:44:67:3a:db:fe:7c:8c:23:e8:8a:80:71: 39:3e:74:ee:31:b4:6b:6f:95:f4:51:27:85:bb:12:26:78:2e: b4:7e:7f:36:e2:2c:a5:06:49:3f:f7:c5:c0:4b:63:18:4a:b6: d6:f8:ea:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b6LmaI3yP1fJzTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyM1oXDTI1MDkxNjEyMzgyM1owLzEtMCsGA1UEAxMk NGFmODljZjEtODRjMi00YzVmLTljYzItYmU0Y2Y3OGQxNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT2ldO1iBD3ZvsCpo3cjPfDCXSbjVHP2N1dv rYh09yrXNiL3wrR1/gteyW4SNH+6yRu603bzGKTkkpcDrezSPmnlF6p/nyO9YELN odSIzFAllWo22lpYr4dGJdVAbY3AYEKUqQg3oDZ5gf6Io+wp8cbVdTcsgib7JE3c bXMxbEvL+Gh3q8IIMoEmfQYnQDvsZ70VDTG2htgA5U95XLVMAVYNjvdOaWHZ41Iv zB/9O6r4lSm+ARgSAZnwywnog7nCAmnGhnKdjzpI/dtXVnk178EBmmogVjKyuMo6 wBxCfy6nXkNk17RIpwSl/z8xE7aC5w/HndfOkTbwwHV65GmIMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM0yoOecRdg5d6yUogCRYBglQIKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWVmZjRmN2MtOTQxMC0z YTdhLWFiZmYtMjE0OWYzOGRkMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHsxswR103VPsME/afU/f2uAUw3s1jmFGmyF0k8gbfvLwFX92DZ8 rgAgRVNg5jpz+/rZOeoEvgQsgU4sCzVQxKdfOUJ4ZVHBfU5cMo9vmDh4qxE9vVJq sDoe5LPOvRxa3EyUnQtX7GLz1F5upsuji5Ck7IgU8yjCDleiB9F9guaDNg77Fy6r FTdaIpvyvWEX2AzvwvCKsc/karFQtpe1qHFSERbiOX73v7o94NjoSpqnarOdU4QX 1nrhBFoFUDahdkQcOxl3F4g1dnBY1URnOtv+fIwj6IqAcTk+dO4xtGtvlfRRJ4W7 EiZ4LrR+fzbiLKUGST/3xcBLYxhKttb46mY= -----END CERTIFICATE-----Generated at Mon Jun 30 13:35:42 2025 by rpki-client