$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de58fc05-8c8e-3f06-aac8-21f5f6e1056a.roa File: de58fc05-8c8e-3f06-aac8-21f5f6e1056a.roa (raw, json) Hash identifier: OYaGAoQ2c+qBnk4wCs+q1GleqHfG9v+f9uQrnBn3UxM= Subject key identifier: 92:C7:EA:BA:1A:D9:56:8A:21:A6:F5:FD:6A:9F:42:D8:87:6A:E4:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A3B6F9CFA33F7F7480CB57380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de58fc05-8c8e-3f06-aac8-21f5f6e1056a.roa Signing time: Wed 18 Jun 2025 12:38:20 +0000 ROA not before: Wed 18 Jun 2025 12:38:20 +0000 ROA not after: Tue 16 Sep 2025 12:38:20 +0000 asID: 396576 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:6f:9c:fa:33:f7:f7:48:0c:b5:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 18 12:38:20 2025 GMT Not After : Sep 16 12:38:20 2025 GMT Subject: CN=f0b1c8a7-c875-4ccb-9434-b786ce6f8a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:7b:c2:77:4e:7d:3a:6c:1b:e3:22:b3:75: 5b:51:5c:09:2b:5b:63:37:d3:bb:2a:29:91:16:f3: 8e:31:4a:6d:09:65:61:b0:b3:24:cc:f2:99:aa:6e: b1:11:3c:60:29:81:49:13:09:f3:de:fe:5f:1b:ce: 9d:ed:cb:92:3b:d9:11:1b:8c:09:97:20:6c:9d:a8: d1:5f:4d:a0:a0:a0:00:5a:74:47:b1:52:90:13:65: 7b:f9:57:28:61:d7:82:d2:0a:33:24:c4:77:1a:22: c2:b2:a4:e2:91:b0:05:60:1f:df:29:59:4c:3b:52: bb:30:89:57:1e:fe:71:8c:a2:17:07:39:6b:a3:f3: cf:7f:48:c8:4e:31:27:6c:9a:24:5b:33:20:d6:c2: e1:25:6b:ee:74:b2:5a:ef:1f:ed:da:1c:6e:b6:ba: ad:51:3c:66:27:f6:ca:05:1a:b3:e2:83:af:3f:b5: b8:a7:02:af:99:e2:70:ac:4d:b8:dd:4f:0e:13:5a: 9b:ac:26:af:9f:2e:8f:d2:1f:2e:d0:bc:57:0b:f1: 2a:62:9c:b2:e2:a8:cd:3a:fd:f5:ad:c3:81:41:c3: 87:11:51:e6:05:dd:55:9e:30:78:f4:cc:8a:7d:2e: 18:87:36:6c:35:16:ad:b8:5e:ea:5e:59:81:62:c2: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C7:EA:BA:1A:D9:56:8A:21:A6:F5:FD:6A:9F:42:D8:87:6A:E4:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de58fc05-8c8e-3f06-aac8-21f5f6e1056a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:33:7a:dd:28:16:72:c7:b2:73:c5:43:84:9b:a5:d6:5f:b0: 75:25:81:a6:9b:ee:98:56:73:fd:e8:ea:77:96:2c:0a:a3:30: 0a:2f:f1:a5:66:f5:fe:09:33:6a:04:a6:c6:5a:04:36:5a:4a: 6c:ad:1c:33:fc:a1:64:b2:ca:3d:c5:8a:52:8a:6c:ac:5f:5f: 59:f6:65:84:d4:8f:7e:51:a9:68:59:6e:cc:e2:b6:f2:ff:74: 9d:49:33:ff:84:55:f1:4b:a3:40:d3:66:dc:de:0d:43:b7:4e: 70:d6:3c:43:9b:49:9b:11:0f:44:4f:81:fd:a2:ba:07:cd:07: 74:21:3b:cf:a2:0f:58:bd:23:c3:a7:23:e3:08:76:80:18:83: 1c:5e:9f:3c:64:5e:9d:d9:a2:2b:f9:c2:df:65:f9:26:95:5f: 44:d3:49:2c:74:2d:cd:f1:e5:23:17:99:b6:67:43:b0:bf:85: 37:04:b0:ca:d6:bf:a1:06:7b:db:e7:28:12:d2:c0:98:98:fd: 24:1c:b6:a5:54:88:52:aa:61:77:15:24:10:95:8c:58:09:04: 71:c6:20:e0:0c:a8:05:d6:9d:4b:38:a4:29:7d:8b:ec:40:9b: 9f:47:10:fd:7f:20:ef:c1:73:8c:57:c0:cf:05:76:42:d1:6e: 9c:02:65:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo7b5z6M/f3SAy1c4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDYxODEyMzgyMFoXDTI1MDkxNjEyMzgyMFowLzEtMCsGA1UEAxMk ZjBiMWM4YTctYzg3NS00Y2NiLTk0MzQtYjc4NmNlNmY4YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv57wndOfTpsG+Mis3VbUVwJK1tjN9O7KimR FvOOMUptCWVhsLMkzPKZqm6xETxgKYFJEwnz3v5fG86d7cuSO9kRG4wJlyBsnajR X02goKAAWnRHsVKQE2V7+VcoYdeC0gozJMR3GiLCsqTikbAFYB/fKVlMO1K7MIlX Hv5xjKIXBzlro/PPf0jITjEnbJokWzMg1sLhJWvudLJa7x/t2hxutrqtUTxmJ/bK BRqz4oOvP7W4pwKvmeJwrE243U8OE1qbrCavny6P0h8u0LxXC/EqYpyy4qjNOv31 rcOBQcOHEVHmBd1VnjB49MyKfS4YhzZsNRatuF7qXlmBYsKD8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJLH6roa2VaKIab1/WqfQtiHauRlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGU1OGZjMDUtOGM4ZS0z ZjA2LWFhYzgtMjFmNWY2ZTEwNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF0zet0oFnLHsnPFQ4SbpdZfsHUlgaab7phWc/3o6neWLAqjMAov 8aVm9f4JM2oEpsZaBDZaSmytHDP8oWSyyj3FilKKbKxfX1n2ZYTUj35RqWhZbszi tvL/dJ1JM/+EVfFLo0DTZtzeDUO3TnDWPEObSZsRD0RPgf2iugfNB3QhO8+iD1i9 I8OnI+MIdoAYgxxenzxkXp3Zoiv5wt9l+SaVX0TTSSx0Lc3x5SMXmbZnQ7C/hTcE sMrWv6EGe9vnKBLSwJiY/SQctqVUiFKqYXcVJBCVjFgJBHHGIOAMqAXWnUs4pCl9 i+xAm59HEP1/IO/Bc4xXwM8FdkLRbpwCZWQ= -----END CERTIFICATE-----Generated at Mon Jun 30 02:17:18 2025 by rpki-client