$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c622ec00-2fc4-33a7-844b-b16c1cab25d5.roa File: c622ec00-2fc4-33a7-844b-b16c1cab25d5.roa (raw, json) Hash identifier: FqTKW660bthoZ2ZQYEpeEqNg0D2B1s2mJvrPcYoYAcM= Subject key identifier: 00:17:69:AC:FF:D8:A6:23:3D:84:C2:9D:C4:8F:20:9F:15:57:40:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A38A41C2808EA2E9B68944470 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c622ec00-2fc4-33a7-844b-b16c1cab25d5.roa Signing time: Tue 17 Jun 2025 12:36:41 +0000 ROA not before: Tue 17 Jun 2025 12:36:41 +0000 ROA not after: Mon 15 Sep 2025 12:36:41 +0000 asID: 396606 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:38:a4:1c:28:08:ea:2e:9b:68:94:44:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 17 12:36:41 2025 GMT Not After : Sep 15 12:36:41 2025 GMT Subject: CN=bb8242dd-dcce-485d-b81c-5578feaae490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:f0:4d:b7:f1:dc:ad:b3:4e:95:e1:21:d9: 17:83:24:11:81:89:51:bc:ea:4c:23:6f:4a:9e:7c: e2:d3:9e:c6:2c:31:ad:6c:d9:ff:f5:6e:9b:13:45: 1f:35:5d:e3:9f:3d:57:9f:16:7f:13:60:4d:58:24: 01:44:93:e2:d9:b4:f7:01:ca:be:95:16:7a:b8:10: 93:75:b5:b7:62:19:3e:e5:9e:f8:da:a5:ee:be:33: b7:9c:3c:31:f6:98:0d:55:1b:39:c9:3d:29:9c:50: a7:ea:43:8f:e8:37:b7:98:91:f1:34:49:f6:25:f7: 92:5f:0e:41:ba:c7:b0:83:6d:d5:1a:b1:41:94:06: 34:4a:77:0f:c4:a8:75:97:18:3d:41:89:5a:40:4d: b3:8f:08:23:6b:e4:c5:07:9b:17:ed:a8:5d:ff:c5: f8:9c:2c:13:78:5f:49:c9:44:bc:2f:87:8d:a3:d7: 7c:0a:2d:7f:d7:e7:3e:25:dd:fd:2c:73:13:ef:67: f2:27:c3:b7:6c:33:8f:61:d4:94:d1:9b:52:9d:1a: 8a:93:5c:35:9f:f1:23:8b:3c:96:46:ae:d0:a3:dc: 65:fe:ee:a0:ae:62:d8:3c:e5:45:25:bc:60:9c:6f: ef:a4:68:aa:a4:43:de:09:2b:9c:f3:77:bb:6b:15: 10:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:17:69:AC:FF:D8:A6:23:3D:84:C2:9D:C4:8F:20:9F:15:57:40:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c622ec00-2fc4-33a7-844b-b16c1cab25d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:10:ec:2f:a6:8c:57:85:2f:63:d4:c2:99:6e:52:67:d1:c1: 69:cb:b1:dc:a1:c9:68:31:46:f7:04:ea:28:ca:de:9c:93:6d: 37:d5:93:48:9d:6b:b1:37:3c:74:7b:08:8a:59:84:4a:64:c9: 54:2e:54:e7:20:70:dd:76:bf:7d:e3:36:47:54:ab:f3:8d:6d: 95:82:a4:ce:4b:49:57:a1:28:eb:fe:7a:aa:d2:99:1e:1c:4c: b8:ce:ee:35:6f:ae:03:7b:43:83:ad:10:ad:43:91:e6:3a:ab: ce:17:3f:b3:37:12:ab:78:e3:10:1b:27:eb:1c:22:5d:5b:46: d9:96:7f:20:dd:7b:4a:b6:a7:d7:10:e0:20:a4:87:49:ae:28: 53:54:b9:87:8f:bf:c6:67:2d:37:40:cb:76:30:fa:4f:0e:28: 45:86:b4:95:75:e6:14:74:05:cf:4c:d3:f1:13:b0:60:d1:90: 86:d1:b0:d1:26:7e:3c:56:3a:6c:46:e6:d8:d4:70:eb:f8:88: eb:ee:14:17:93:83:11:76:1b:97:59:53:03:29:af:ba:49:58: 45:13:66:64:20:4d:c7:cc:86:39:c5:cc:97:7d:1f:f3:46:25: 8c:71:dc:c2:b3:31:dd:63:47:fb:de:f1:95:e1:6d:eb:28:0c: 28:26:94:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pBwoCOoum2iURHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxNzEyMzY0MVoXDTI1MDkxNTEyMzY0MVowLzEtMCsGA1UEAxMk YmI4MjQyZGQtZGNjZS00ODVkLWI4MWMtNTU3OGZlYWFlNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPbwTbfx3K2zTpXhIdkXgyQRgYlRvOpMI29K nnzi057GLDGtbNn/9W6bE0UfNV3jnz1XnxZ/E2BNWCQBRJPi2bT3Acq+lRZ6uBCT dbW3Yhk+5Z742qXuvjO3nDwx9pgNVRs5yT0pnFCn6kOP6De3mJHxNEn2JfeSXw5B usewg23VGrFBlAY0SncPxKh1lxg9QYlaQE2zjwgja+TFB5sX7ahd/8X4nCwTeF9J yUS8L4eNo9d8Ci1/1+c+Jd39LHMT72fyJ8O3bDOPYdSU0ZtSnRqKk1w1n/EjizyW Rq7Qo9xl/u6grmLYPOVFJbxgnG/vpGiqpEPeCSuc83e7axUQXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAXaaz/2KYjPYTCncSPIJ8VV0BVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzYyMmVjMDAtMmZjNC0z M2E3LTg0NGItYjE2YzFjYWIyNWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwQ7C+mjFeFL2PUwpluUmfRwWnLsdyhyWgxRvcE6ijK3pyTbTfV k0ida7E3PHR7CIpZhEpkyVQuVOcgcN12v33jNkdUq/ONbZWCpM5LSVehKOv+eqrS mR4cTLjO7jVvrgN7Q4OtEK1DkeY6q84XP7M3Eqt44xAbJ+scIl1bRtmWfyDde0q2 p9cQ4CCkh0muKFNUuYePv8ZnLTdAy3Yw+k8OKEWGtJV15hR0Bc9M0/ETsGDRkIbR sNEmfjxWOmxG5tjUcOv4iOvuFBeTgxF2G5dZUwMpr7pJWEUTZmQgTcfMhjnFzJd9 H/NGJYxx3MKzMd1jR/ve8ZXhbesoDCgmlEQ= -----END CERTIFICATE-----Generated at Mon Jun 30 14:48:24 2025 by rpki-client