$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b59c8f7-20c4-3052-a642-1395a6870f68.roa File: 0b59c8f7-20c4-3052-a642-1395a6870f68.roa (raw, json) Hash identifier: qUiQ3kCb7OH9R0c41LrY9g12grNjM14alckYg3cr4HY= Subject key identifier: 45:F9:9A:58:91:22:EC:7A:03:DE:2B:E4:EE:3F:19:71:56:26:59:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63F4528A6C8BC002E5C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b59c8f7-20c4-3052-a642-1395a6870f68.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396563 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3f:45:28:a6:c8:bc:00:2e:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=af0c0420-b9a9-4717-9b2e-ff17f67a8ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ac:1b:87:df:ad:81:4c:4e:75:13:67:47:97: 4d:8b:47:fe:e1:0a:fa:bd:96:64:55:0d:e1:14:bb: b5:6a:cc:58:d7:56:23:6f:3e:2d:7e:0e:50:3c:19: 68:02:df:bf:d9:c2:7f:71:d4:b3:bd:fc:22:2c:22: 7b:ec:f9:f6:ab:97:47:a9:47:fe:08:b4:58:77:93: 3a:eb:be:18:65:a4:ab:05:94:2d:c4:bf:d6:de:65: d4:5e:f3:d5:af:21:3a:4e:f8:76:d5:87:b2:e8:1f: 10:29:be:22:c1:3e:f2:e4:df:d4:91:98:c6:74:98: b8:ab:f1:02:e9:fb:0e:e4:98:25:e5:92:d3:d5:5c: 2d:c0:a6:a0:c3:41:d4:24:29:2f:c5:d4:65:74:ed: 0d:0d:2c:b8:04:d6:c8:84:31:94:47:a7:f8:30:5b: 52:d7:d0:1f:a7:e1:96:ba:87:7e:ac:b2:38:33:ad: 01:43:67:26:ca:f7:eb:fb:93:bb:39:01:5d:7e:23: 15:38:1e:87:e6:63:d1:3d:b5:70:13:82:09:fc:13: 1d:28:ff:d9:f4:56:15:10:87:b2:a8:68:96:10:3e: 08:f3:d0:87:60:7e:ae:ae:21:5f:01:6d:1b:b7:e8: c9:94:b6:48:c4:0b:81:5e:e6:80:f7:45:c8:0e:0a: 1b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F9:9A:58:91:22:EC:7A:03:DE:2B:E4:EE:3F:19:71:56:26:59:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b59c8f7-20c4-3052-a642-1395a6870f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ba:58:3a:ef:2c:cd:14:c6:5c:fe:6e:5c:d1:c4:99:60:60: 11:f4:f7:cf:eb:80:a8:3c:b7:cc:89:c9:06:18:7d:8d:32:3c: de:4e:60:32:95:a1:a1:01:2f:aa:48:71:32:44:38:e6:af:4a: d7:9e:31:f9:33:3a:66:1d:2a:40:9d:a0:21:20:7e:15:3c:a2: 24:83:ec:47:2e:cf:b9:bd:29:3c:47:74:68:1c:52:9a:44:2a: a8:cf:19:80:9b:24:ef:4c:b9:28:c3:44:72:ca:7f:2f:0e:33: a6:2d:85:84:0f:9d:f9:4d:f6:80:d9:97:03:8c:fe:cd:76:58: b9:13:6a:b0:fc:c3:b7:3d:b2:2f:9e:23:ce:b6:25:1e:33:ba: f8:1f:bd:97:24:d7:0b:b5:05:f1:7c:da:4e:2f:bf:d1:44:d1: 88:d8:c6:a1:5e:f9:7b:5c:f1:f9:62:e3:63:78:b9:42:63:eb: 91:75:cf:67:1a:b1:98:c3:c3:b5:e9:18:0c:70:90:52:00:9f: 7d:f7:77:10:8c:02:15:92:9e:b9:55:cf:db:dd:c3:17:8b:83: 19:8f:d0:16:57:8c:a0:63:c6:30:23:48:a1:cf:8d:2d:57:d5: a0:36:e7:6b:08:c9:9a:27:0f:94:86:1e:78:4a:97:fd:f3:32: e9:b7:ad:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75j9FKKbIvAAuXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk YWYwYzA0MjAtYjlhOS00NzE3LTliMmUtZmYxN2Y2N2E4YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqwbh9+tgUxOdRNnR5dNi0f+4Qr6vZZkVQ3h FLu1asxY11Yjbz4tfg5QPBloAt+/2cJ/cdSzvfwiLCJ77Pn2q5dHqUf+CLRYd5M6 674YZaSrBZQtxL/W3mXUXvPVryE6Tvh21Yey6B8QKb4iwT7y5N/UkZjGdJi4q/EC 6fsO5Jgl5ZLT1VwtwKagw0HUJCkvxdRldO0NDSy4BNbIhDGUR6f4MFtS19Afp+GW uod+rLI4M60BQ2cmyvfr+5O7OQFdfiMVOB6H5mPRPbVwE4IJ/BMdKP/Z9FYVEIey qGiWED4I89CHYH6uriFfAW0bt+jJlLZIxAuBXuaA90XIDgobCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEX5mliRIux6A94r5O4/GXFWJlkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI1OWM4ZjctMjBjNC0z MDUyLWE2NDItMTM5NWE2ODcwZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABm6WDrvLM0Uxlz+blzRxJlgYBH098/rgKg8t8yJyQYYfY0yPN5O YDKVoaEBL6pIcTJEOOavSteeMfkzOmYdKkCdoCEgfhU8oiSD7Ecuz7m9KTxHdGgc UppEKqjPGYCbJO9MuSjDRHLKfy8OM6YthYQPnflN9oDZlwOM/s12WLkTarD8w7c9 si+eI862JR4zuvgfvZck1wu1BfF82k4vv9FE0YjYxqFe+Xtc8fli42N4uUJj65F1 z2casZjDw7XpGAxwkFIAn333dxCMAhWSnrlVz9vdwxeLgxmP0BZXjKBjxjAjSKHP jS1X1aA252sIyZonD5SGHnhKl/3zMum3rf0= -----END CERTIFICATE-----Generated at Wed Aug 6 10:59:33 2025 by rpki-client