$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd6962d-6229-3d29-b256-352a6f4711f5.roa File: bbd6962d-6229-3d29-b256-352a6f4711f5.roa (raw, json) Hash identifier: TZqI73R0PEj8gKoeIGwEoT6tGbP72BPkn4kpnIHp/Bk= Subject key identifier: 4F:62:73:ED:79:34:68:F8:C3:37:ED:43:F9:36:A7:A9:18:48:87:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6FA1B5C6EE3BF4557EF700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd6962d-6229-3d29-b256-352a6f4711f5.roa Signing time: Wed 18 Jun 2025 12:38:23 +0000 ROA not before: Wed 18 Jun 2025 12:38:23 +0000 ROA not after: Tue 16 Sep 2025 12:38:23 +0000 asID: 396587 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:a1:b5:c6:ee:3b:f4:55:7e:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:23 2025 GMT Not After : Sep 16 12:38:23 2025 GMT Subject: CN=c99f86f0-5ff5-419b-b004-9018b452fd3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:e8:54:cf:85:f7:03:9e:b1:d8:a4:76:fc: 64:ca:38:31:98:02:d3:e7:5f:ba:2e:f4:2d:2b:53: 1a:c0:7e:56:53:06:e4:31:a4:45:ae:49:b5:d7:59: ef:23:77:62:b3:01:f3:c3:3f:24:50:c9:45:71:01: 8c:cd:6a:d4:16:67:8f:29:70:46:b6:8e:53:82:56: 73:5f:a0:eb:95:55:eb:49:65:5c:ea:4f:ac:09:e8: 2b:cc:b6:2b:13:48:0f:38:b5:6a:9a:58:b0:12:e0: b4:cf:87:e7:6d:d1:05:a7:a1:87:8a:e3:88:a1:fc: d4:da:d5:70:b1:40:f0:d7:c0:43:42:b6:45:93:0f: ea:82:be:a8:ab:3c:ae:28:8f:47:ee:e8:a7:7b:ce: 67:e0:2e:a3:33:07:65:a0:5b:76:04:4d:07:58:8a: 71:a1:38:40:98:84:42:d8:a7:d4:96:1f:3b:e9:25: a8:4a:0d:37:b8:81:dc:d3:d9:a8:f7:13:8a:37:fd: 9f:f4:a1:93:b7:58:a8:22:e6:f7:a9:65:af:af:cd: cf:88:72:64:d5:85:ff:7e:4e:e1:26:56:26:34:1a: 99:8a:1c:56:55:47:24:17:17:aa:06:fc:4d:bd:c4: 41:b3:a1:ef:e5:5c:59:29:58:e4:19:ba:f8:27:51: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:62:73:ED:79:34:68:F8:C3:37:ED:43:F9:36:A7:A9:18:48:87:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd6962d-6229-3d29-b256-352a6f4711f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:61:f4:cc:25:9d:e9:da:a5:fb:be:a1:b7:0d:ea:b2:56:e2: d6:3a:f9:3a:21:80:1b:b8:ee:ce:32:c1:a1:2b:8f:e7:96:8d: 04:99:91:7d:c8:37:1c:ba:08:a2:f5:d9:92:5c:64:a2:d8:2a: 89:a1:16:5b:cd:bd:ee:3e:91:fa:58:3f:54:0f:93:09:79:93: aa:71:28:9b:d1:ca:e9:88:1b:c0:71:cb:bd:ad:48:a3:f0:41: b8:34:e7:48:db:83:f1:0b:22:75:7d:5e:22:7e:77:f7:de:19: 3e:35:9f:60:c0:a5:a0:d3:18:cb:d5:2a:d4:88:69:00:d5:bf: 4c:3b:86:24:04:4f:97:e8:38:80:d3:18:92:0d:a5:3e:a0:f2: 42:a0:52:37:86:db:bd:d1:1f:4b:68:d8:c6:7b:a9:d7:42:a7: ec:80:b4:a4:2c:14:be:08:b1:6c:0f:49:ef:bc:42:4b:ed:73: b0:65:66:bd:1b:ac:2d:c9:a2:7a:dd:a0:e6:ae:b1:bd:e3:5b: 65:f0:08:95:f9:39:63:ce:8c:a1:72:37:ed:94:7a:05:27:b3: a3:aa:2d:1d:80:79:bb:81:0f:4e:68:ba:7d:81:5b:9f:be:fe: 94:af:99:15:41:60:0d:3d:d4:3b:2e:cd:9e:68:e6:55:5c:32: d6:65:07:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b6G1xu479FV+9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyM1oXDTI1MDkxNjEyMzgyM1owLzEtMCsGA1UEAxMk Yzk5Zjg2ZjAtNWZmNS00MTliLWIwMDQtOTAxOGI0NTJmZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXboVM+F9wOesdikdvxkyjgxmALT51+6LvQt K1MawH5WUwbkMaRFrkm111nvI3diswHzwz8kUMlFcQGMzWrUFmePKXBGto5TglZz X6DrlVXrSWVc6k+sCegrzLYrE0gPOLVqmliwEuC0z4fnbdEFp6GHiuOIofzU2tVw sUDw18BDQrZFkw/qgr6oqzyuKI9H7uine85n4C6jMwdloFt2BE0HWIpxoThAmIRC 2KfUlh876SWoSg03uIHc09mo9xOKN/2f9KGTt1ioIub3qWWvr83PiHJk1YX/fk7h JlYmNBqZihxWVUckFxeqBvxNvcRBs6Hv5VxZKVjkGbr4J1FG5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9ic+15NGj4wzftQ/k2p6kYSIclMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkNjk2MmQtNjIyOS0z ZDI5LWIyNTYtMzUyYTZmNDcxMWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKph9Mwlnenapfu+obcN6rJW4tY6+TohgBu47s4ywaErj+eWjQSZ kX3INxy6CKL12ZJcZKLYKomhFlvNve4+kfpYP1QPkwl5k6pxKJvRyumIG8Bxy72t SKPwQbg050jbg/ELInV9XiJ+d/feGT41n2DApaDTGMvVKtSIaQDVv0w7hiQET5fo OIDTGJINpT6g8kKgUjeG273RH0to2MZ7qddCp+yAtKQsFL4IsWwPSe+8Qkvtc7Bl Zr0brC3JonrdoOausb3jW2XwCJX5OWPOjKFyN+2UegUns6OqLR2AebuBD05oun2B W5++/pSvmRVBYA091DsuzZ5o5lVcMtZlB70= -----END CERTIFICATE-----Generated at Mon Jun 30 11:25:16 2025 by rpki-client