$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/177853da-a4ef-32d1-8095-0a97170d6504.roa File: 177853da-a4ef-32d1-8095-0a97170d6504.roa (raw, json) Hash identifier: FekbQ0jgCtfrWFCkGKrgSS+qHDd5X9k87K3bm9x8tDM= Subject key identifier: 1A:1F:97:15:6B:C3:73:06:CF:57:F0:20:B3:58:DB:DB:24:3C:32:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62B117099A2D91D2B7B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/177853da-a4ef-32d1-8095-0a97170d6504.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396574 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2b:11:70:99:a2:d9:1d:2b:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=f2a080a4-aa7c-4e8e-88f0-2f0452e0a5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:da:67:4d:81:6d:f5:ed:e1:5e:0d:b4:f0: ce:9b:96:a8:10:13:56:2b:c7:91:ae:30:0e:ae:ce: 39:22:80:1b:44:25:67:e2:26:30:f2:ef:93:97:5c: 95:02:e5:ba:30:6a:ee:76:20:6d:20:86:1d:fd:db: 27:98:85:55:cf:3a:1a:8e:62:25:ce:38:31:50:71: fa:84:b2:65:3d:5f:75:cc:6e:cd:82:7f:ee:8c:0a: 08:21:98:4b:c8:3a:b2:f0:1e:b5:2e:eb:44:f3:f0: 7d:c2:4d:6d:e5:55:1a:54:26:e3:2d:e2:37:e1:8f: e7:16:5d:53:7d:d5:51:60:02:e1:92:da:fe:ed:71: 56:ec:e3:5c:f1:b8:38:8f:f8:6b:6a:ae:0d:02:86: 68:49:5c:77:b2:f8:51:ab:09:e5:73:5d:ef:cb:ae: 84:d5:da:40:65:da:e0:4b:ff:3a:54:ea:77:90:70: ec:43:e9:23:65:db:56:83:ea:9b:27:a6:09:67:c1: 64:f6:0d:92:09:8b:61:92:35:5b:df:8f:6d:30:67: 60:2d:3c:60:f7:37:b2:43:a2:84:9b:f0:a9:e5:1d: aa:2f:e1:03:c7:8f:cf:8f:3d:ed:6d:2e:42:15:23: 13:94:be:5f:b9:08:e2:b2:46:54:91:0a:4d:7c:8f: 40:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1F:97:15:6B:C3:73:06:CF:57:F0:20:B3:58:DB:DB:24:3C:32:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/177853da-a4ef-32d1-8095-0a97170d6504.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3f:0e:73:da:00:43:eb:02:39:4d:89:2e:4c:7d:aa:54:59: 15:54:5b:94:5f:18:65:35:7a:19:95:ae:d1:fa:c4:fc:33:9a: d7:8c:49:0f:b7:bd:64:3d:4f:fc:4f:b2:e6:a1:ba:53:a2:1f: 0a:93:42:25:27:96:d7:8a:9d:23:3b:9d:25:ce:df:6c:6a:e6: e2:1f:47:9a:ad:8a:23:2b:ba:70:ab:a2:83:69:3a:aa:0c:71: 1c:21:39:7c:fa:f4:60:37:95:4a:f7:46:4e:90:87:19:bf:c7: ca:65:52:70:e6:67:ef:a1:6f:01:26:7f:0a:d3:72:9c:c3:b9: e1:98:b2:5c:18:56:44:91:8a:d1:f1:b4:a9:34:10:f7:ca:5a: 9c:d4:2e:25:21:89:dc:ab:30:a3:e3:6e:d8:58:9c:ba:21:b4: 64:74:ed:40:01:43:bc:84:bc:46:3e:9c:51:3f:76:94:95:a4: c2:02:e0:ed:e3:01:36:08:42:8e:9a:9f:a8:e8:a9:42:56:2b: 5e:fd:d3:aa:3d:ec:cd:9a:88:31:5e:0e:25:00:44:df:fa:69: 30:f3:43:24:68:70:8a:8d:29:b0:d6:8c:b3:ae:5a:40:9b:67: 80:cb:6a:af:79:b0:12:03:65:53:86:3a:e7:c3:42:ca:01:45: bd:23:ae:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tisRcJmi2R0rewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjJhMDgwYTQtYWE3Yy00ZThlLTg4ZjAtMmYwNDUyZTBhNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6DaZ02BbfXt4V4NtPDOm5aoEBNWK8eRrjAO rs45IoAbRCVn4iYw8u+Tl1yVAuW6MGrudiBtIIYd/dsnmIVVzzoajmIlzjgxUHH6 hLJlPV91zG7Ngn/ujAoIIZhLyDqy8B61LutE8/B9wk1t5VUaVCbjLeI34Y/nFl1T fdVRYALhktr+7XFW7ONc8bg4j/hraq4NAoZoSVx3svhRqwnlc13vy66E1dpAZdrg S/86VOp3kHDsQ+kjZdtWg+qbJ6YJZ8Fk9g2SCYthkjVb349tMGdgLTxg9zeyQ6KE m/Cp5R2qL+EDx4/Pjz3tbS5CFSMTlL5fuQjiskZUkQpNfI9AKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBoflxVrw3MGz1fwILNY29skPDKvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTc3ODUzZGEtYTRlZi0z MmQxLTgwOTUtMGE5NzE3MGQ2NTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEc/DnPaAEPrAjlNiS5MfapUWRVUW5RfGGU1ehmVrtH6xPwzmteM SQ+3vWQ9T/xPsuahulOiHwqTQiUnlteKnSM7nSXO32xq5uIfR5qtiiMrunCrooNp OqoMcRwhOXz69GA3lUr3Rk6Qhxm/x8plUnDmZ++hbwEmfwrTcpzDueGYslwYVkSR itHxtKk0EPfKWpzULiUhidyrMKPjbthYnLohtGR07UABQ7yEvEY+nFE/dpSVpMIC 4O3jATYIQo6an6joqUJWK17906o97M2aiDFeDiUARN/6aTDzQyRocIqNKbDWjLOu WkCbZ4DLaq95sBIDZVOGOufDQsoBRb0jrk0= -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:20 2025 by rpki-client