$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa File: 0a111577-ad49-3c3d-994c-2cb29a1212b8.roa (raw, json) Hash identifier: hbIk6dlJA3TDaMm9cSskpc73vYQEUyCpf5Tx7nhtPDI= Subject key identifier: 6C:7B:0A:57:CA:66:9C:69:5B:9E:6E:A9:DE:ED:1D:60:B1:D4:02:B5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B627B1D89A7D72F3FB8B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 397196 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:27:b1:d8:9a:7d:72:f3:fb:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=89e9892b-0ad3-4aa9-9eaa-7ddc1f67416b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:b0:a6:6c:07:87:57:3c:0a:01:29:97:ea: 20:0b:ff:97:b4:ed:71:ab:9b:4b:67:a7:b3:87:d2: 3f:9f:5f:4c:82:a1:d8:9d:20:74:8f:e6:6b:e6:5e: 90:ea:46:7f:37:15:97:aa:4d:96:88:a9:51:53:f3: 43:ea:b9:0b:c2:86:96:94:20:b5:20:81:10:9f:70: 63:15:8d:dd:d7:92:5c:9e:7d:aa:46:d0:8e:fa:1b: 31:cc:0f:3c:76:54:1c:88:93:1c:b0:d4:bb:db:b2: 54:93:26:00:34:fd:62:78:29:7a:1e:14:e0:86:4b: ea:bb:51:45:6d:92:42:bb:9a:88:7a:f7:ab:62:c1: a3:a5:75:ed:75:6e:16:e4:b2:0e:e7:1b:1b:56:e7: 76:89:0c:f2:2d:34:c7:cd:31:75:38:a6:cd:e6:3d: 7a:5e:61:a7:3b:fc:36:a7:0a:c3:f0:cf:0e:d1:6b: e7:10:a3:59:62:d3:ac:1b:ea:fb:8b:fe:b6:5e:1c: 84:d4:d4:a7:c9:a7:9b:60:12:07:3b:e1:68:a9:8f: 66:01:13:04:ae:3d:e2:99:a4:b4:56:a7:b9:16:0c: 0d:cd:43:28:6b:1c:7e:e6:dd:df:f1:b1:8c:37:0c: 5e:c0:12:f1:c0:df:5d:9f:a7:b6:30:4a:0a:16:1f: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:0A:57:CA:66:9C:69:5B:9E:6E:A9:DE:ED:1D:60:B1:D4:02:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a111577-ad49-3c3d-994c-2cb29a1212b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d1:fe:62:cf:44:fa:2d:c5:bb:9c:b0:a3:2d:a3:d0:08:93: 03:e5:0d:f3:35:7b:98:81:54:90:88:c0:24:4c:1f:d6:aa:bf: f7:bf:40:ed:6a:e7:8b:9e:7b:67:bb:18:86:b8:63:0b:25:3f: 3b:4b:ac:dd:e2:f8:da:25:cc:30:1b:1a:8c:5f:fc:70:94:1b: e0:97:72:ec:38:8c:b4:15:ea:48:0e:99:54:74:4b:54:2c:65: a5:b5:b4:14:ea:b0:f1:45:4b:d3:0a:37:77:b6:c6:a4:9f:1e: 90:ce:c3:56:19:dd:42:c8:83:35:3f:c5:ca:fc:fd:aa:5f:2a: ea:d3:85:23:49:13:82:b1:c8:8e:3e:1e:9a:36:0f:da:48:b4: 11:38:82:35:0d:f6:92:1b:2b:79:a1:e8:13:51:42:e0:64:e5: f4:e2:19:11:b3:c8:54:ee:99:bf:dd:8f:29:57:8b:17:bb:93: 87:60:90:58:61:19:74:74:96:45:be:ac:cb:6c:4a:3a:c3:71: 87:dd:03:82:90:8d:47:a2:f2:08:a9:a2:40:5d:20:d5:09:77: 9f:91:4e:67:b6:83:44:32:af:7d:1a:01:ff:13:1c:17:2e:51: 66:cd:76:08:f5:0c:01:af:39:35:fc:df:76:e5:e7:17:97:ec: d4:26:bd:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiex2Jp9cvP7i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ODllOTg5MmItMGFkMy00YWE5LTllYWEtN2RkYzFmNjc0MTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiWwpmwHh1c8CgEpl+ogC/+XtO1xq5tLZ6ez h9I/n19MgqHYnSB0j+Zr5l6Q6kZ/NxWXqk2WiKlRU/ND6rkLwoaWlCC1IIEQn3Bj FY3d15Jcnn2qRtCO+hsxzA88dlQciJMcsNS727JUkyYANP1ieCl6HhTghkvqu1FF bZJCu5qIeverYsGjpXXtdW4W5LIO5xsbVud2iQzyLTTHzTF1OKbN5j16XmGnO/w2 pwrD8M8O0WvnEKNZYtOsG+r7i/62XhyE1NSnyaebYBIHO+FoqY9mARMErj3imaS0 Vqe5FgwNzUMoaxx+5t3f8bGMNwxewBLxwN9dn6e2MEoKFh/mxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGx7ClfKZpxpW55uqd7tHWCx1AK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGExMTE1NzctYWQ0OS0z YzNkLTk5NGMtMmNiMjlhMTIxMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbR/mLPRPotxbucsKMto9AIkwPlDfM1e5iBVJCIwCRMH9aqv/e/ QO1q54uee2e7GIa4YwslPztLrN3i+NolzDAbGoxf/HCUG+CXcuw4jLQV6kgOmVR0 S1QsZaW1tBTqsPFFS9MKN3e2xqSfHpDOw1YZ3ULIgzU/xcr8/apfKurThSNJE4Kx yI4+Hpo2D9pItBE4gjUN9pIbK3mh6BNRQuBk5fTiGRGzyFTumb/djylXixe7k4dg kFhhGXR0lkW+rMtsSjrDcYfdA4KQjUei8gipokBdINUJd5+RTme2g0Qyr30aAf8T HBcuUWbNdgj1DAGvOTX833bl5xeX7NQmvbQ= -----END CERTIFICATE-----Generated at Wed Aug 6 07:50:43 2025 by rpki-client