$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1996c20a-af01-39b1-8b70-d04263b1d335.roa File: 1996c20a-af01-39b1-8b70-d04263b1d335.roa (raw, json) Hash identifier: F65dXNUxLWhYBodk9Wag6pG/JOo/R+0gVs3lRFAdvx8= Subject key identifier: 5A:72:36:84:36:6E:01:42:A7:3A:FC:44:42:C0:3B:2A:E5:CE:98:E0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07CDB6D6C4F7C3F34B880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1996c20a-af01-39b1-8b70-d04263b1d335.roa Signing time: Thu 24 Jul 2025 12:38:51 +0000 ROA not before: Thu 24 Jul 2025 12:38:51 +0000 ROA not after: Wed 22 Oct 2025 12:38:51 +0000 asID: 396545 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7c:db:6d:6c:4f:7c:3f:34:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:51 2025 GMT Not After : Oct 22 12:38:51 2025 GMT Subject: CN=b291c511-9fe5-4d36-bd6a-00c7bed662ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7f:61:be:b9:3e:b3:d5:8a:5c:4d:ba:7c:b3: 34:d0:d6:dd:3f:fc:b9:9f:28:6e:ed:cd:cf:67:c2: 75:af:04:b0:34:98:95:3d:81:cc:03:42:c2:88:3c: 4e:12:6a:ce:53:f3:f5:a5:63:bf:20:8c:3c:f1:fc: 18:ab:45:eb:1a:db:b9:55:6f:77:84:31:84:09:38: a8:eb:46:af:44:47:9c:7a:3d:d7:09:a3:df:9d:95: 0b:72:90:b8:b8:5c:4b:bc:71:65:4f:10:9e:35:9b: fa:10:98:53:55:1f:00:f9:e4:d4:97:74:6e:63:cc: c3:5b:d5:0a:66:62:28:8b:e1:b1:b9:a6:8d:6e:f8: 21:2e:97:46:eb:06:fa:31:32:50:72:3e:b9:4b:86: fa:85:d8:74:17:48:fd:85:1b:81:77:2e:4e:81:b7: 63:ff:fa:9c:30:67:1b:00:58:47:76:40:30:53:79: 46:07:53:83:fe:75:81:42:1c:96:3d:c1:f5:3c:c2: 3f:57:3d:2a:bf:72:14:5a:fd:09:aa:bd:98:c5:5a: 10:dc:f7:0b:5e:11:51:85:35:9e:c7:1f:52:9a:5e: 70:9e:14:5e:9f:c8:f9:6d:54:c7:2a:f9:ed:bb:46: a2:c1:eb:59:73:d1:b0:7b:cf:9e:d3:7c:1f:38:e7: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:72:36:84:36:6E:01:42:A7:3A:FC:44:42:C0:3B:2A:E5:CE:98:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1996c20a-af01-39b1-8b70-d04263b1d335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:cb:a9:db:c9:f0:65:19:9e:d9:a2:34:e2:57:43:27:24:d6: f4:45:65:94:e7:e6:86:2a:28:5b:b4:bd:af:f0:9b:d6:94:7d: be:c3:1b:00:a8:f1:21:86:a2:9b:4d:62:f1:eb:1c:82:b7:ca: 07:38:dd:8c:3a:72:99:10:6b:59:fe:d9:9f:48:e1:45:89:63: c3:d6:39:5b:36:6c:11:f5:d4:b2:65:51:00:cd:09:92:07:1a: d4:75:b4:36:14:fa:71:7c:af:08:a3:e6:af:44:a7:c9:10:57: 77:7c:e6:24:b8:d2:64:0a:fe:f7:f8:b1:c7:14:75:e2:9f:5d: 89:63:a9:96:5f:dd:7d:51:ce:fa:64:12:de:cd:75:25:20:3b: 7d:3a:ae:c8:d1:b7:9b:e4:18:78:62:28:92:20:84:b6:5e:05: 3c:a1:8e:57:8d:96:79:dd:94:1b:b9:07:6a:47:7f:54:9d:33: d1:12:8d:31:e4:6c:ea:6c:c6:ef:20:8d:a8:b1:6d:bb:b3:21: bd:68:d1:b2:ea:19:9c:3d:fd:c4:47:9b:56:ab:4f:d4:9b:68: 45:76:b7:51:96:30:6d:12:0f:74:c6:0d:90:07:af:00:38:88: a2:aa:00:0a:0a:77:b6:00:ab:31:eb:27:38:d0:ad:6c:ca:3d: 4c:26:db:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8HzbbWxPfD80uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MVoXDTI1MTAyMjEyMzg1MVowLzEtMCsGA1UEAxMk YjI5MWM1MTEtOWZlNS00ZDM2LWJkNmEtMDBjN2JlZDY2MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX9hvrk+s9WKXE26fLM00NbdP/y5nyhu7c3P Z8J1rwSwNJiVPYHMA0LCiDxOEmrOU/P1pWO/IIw88fwYq0XrGtu5VW93hDGECTio 60avREecej3XCaPfnZULcpC4uFxLvHFlTxCeNZv6EJhTVR8A+eTUl3RuY8zDW9UK ZmIoi+GxuaaNbvghLpdG6wb6MTJQcj65S4b6hdh0F0j9hRuBdy5Ogbdj//qcMGcb AFhHdkAwU3lGB1OD/nWBQhyWPcH1PMI/Vz0qv3IUWv0Jqr2YxVoQ3PcLXhFRhTWe xx9Sml5wnhRen8j5bVTHKvntu0aiwetZc9Gwe8+e03wfOOcOCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFpyNoQ2bgFCpzr8RELAOyrlzpjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTk5NmMyMGEtYWYwMS0z OWIxLThiNzAtZDA0MjYzYjFkMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjLqdvJ8GUZntmiNOJXQyck1vRFZZTn5oYqKFu0va/wm9aUfb7D GwCo8SGGoptNYvHrHIK3ygc43Yw6cpkQa1n+2Z9I4UWJY8PWOVs2bBH11LJlUQDN CZIHGtR1tDYU+nF8rwij5q9Ep8kQV3d85iS40mQK/vf4sccUdeKfXYljqZZf3X1R zvpkEt7NdSUgO306rsjRt5vkGHhiKJIghLZeBTyhjleNlnndlBu5B2pHf1SdM9ES jTHkbOpsxu8gjaixbbuzIb1o0bLqGZw9/cRHm1arT9SbaEV2t1GWMG0SD3TGDZAH rwA4iKKqAAoKd7YAqzHrJzjQrWzKPUwm220= -----END CERTIFICATE-----Generated at Tue Aug 5 17:08:47 2025 by rpki-client