$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a669f1b-e754-3c0e-9d14-7a4956bfd81a.roa File: 1a669f1b-e754-3c0e-9d14-7a4956bfd81a.roa (raw, json) Hash identifier: GzNOr5R3gONuPfCPdX2rcjvmIUlEAAYa4ww8RVpEJso= Subject key identifier: ED:68:D4:26:86:01:2A:06:20:5D:B5:25:6F:3F:62:6D:68:FF:90:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63F1CFEA66EB1DA22977E Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a669f1b-e754-3c0e-9d14-7a4956bfd81a.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396580 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3f:1c:fe:a6:6e:b1:da:22:97:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=25a8b8ec-ca17-43e4-a5e0-c8fee62a48c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:3b:70:47:4e:d2:7f:62:fa:da:26:26:31: 34:ed:a4:d5:e0:e1:ce:eb:2e:c4:1b:1d:77:aa:ed: f2:1f:c6:30:1a:b5:68:54:f0:05:94:94:aa:bc:59: 91:3e:86:65:e6:00:3a:8f:59:db:98:3a:59:9e:f7: 86:10:bc:9d:33:27:9c:9e:a8:ab:4b:5a:53:1e:73: 48:7d:34:1d:6f:66:11:56:2b:24:b2:3e:4a:c6:22: 43:b7:1e:17:fd:81:f9:03:bd:b2:31:f8:ec:bd:39: 71:bc:91:d9:b5:9b:1e:d5:61:18:71:00:ed:bc:37: ea:e3:af:64:9e:f2:7e:c1:9a:20:4d:e8:2d:8f:c8: 37:e2:74:c1:f9:50:75:8f:f0:47:de:b6:7e:54:80: f3:57:9f:ca:2b:37:97:1f:ae:99:58:95:6e:59:16: 23:c8:2a:30:78:ba:d9:f3:93:84:bc:19:03:d9:f8: 0c:67:83:e9:3b:f4:61:90:ee:39:4d:a5:3c:21:91: 08:b6:cc:b4:ce:13:18:b9:41:26:f5:85:3e:2b:0d: ae:eb:5d:0d:96:06:12:25:e1:6f:61:28:7d:9d:17: a7:b1:a9:c6:84:b9:09:5c:b9:9a:18:dc:2d:24:27: c8:12:59:f8:fa:12:d3:d5:dd:c3:ea:d2:69:9e:37: b7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:68:D4:26:86:01:2A:06:20:5D:B5:25:6F:3F:62:6D:68:FF:90:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a669f1b-e754-3c0e-9d14-7a4956bfd81a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:f2:32:3d:b0:f7:1b:d0:09:0c:ae:20:3a:81:83:a9:68:37: f5:e9:49:2c:e3:9b:e0:f8:1a:a5:11:1f:d1:d9:9d:26:57:0e: 99:30:f9:82:81:60:26:01:8b:91:5e:06:28:9b:a2:17:e1:9a: bb:85:5c:eb:d0:a3:36:9d:d7:12:26:bc:94:c0:b1:d1:ed:06: a3:d5:c0:ea:a0:8e:a8:22:23:43:76:72:0c:2c:9f:d4:b5:a5: f4:85:56:50:4d:bc:66:bf:28:27:34:14:be:e6:f0:38:4f:fb: 9b:c0:d4:8d:f2:b5:5f:bd:9b:9b:38:95:cd:4e:3f:66:6f:12: d4:3e:b3:9a:8d:34:6a:7a:dc:90:b1:de:b3:7a:7e:6d:97:fb: 36:7f:e1:86:4f:89:b3:82:9f:aa:e1:d7:79:23:68:b1:a5:c7: 10:8d:af:eb:39:32:4a:d9:95:90:f8:eb:f3:14:11:eb:51:85: a8:88:50:36:75:c9:78:5f:79:7e:d6:20:17:0c:aa:e3:b4:4d: 76:d1:07:25:8d:f3:b3:41:2f:99:24:d0:a3:b8:a1:35:0d:54: fe:a9:74:d4:62:f2:1f:e2:38:81:7f:4b:17:12:07:4b:dc:89: 5f:e8:e0:21:fa:fb:90:32:ab:eb:49:f3:12:18:88:ab:25:35: 05:df:15:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75j8c/qZusdoil34wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MjVhOGI4ZWMtY2ExNy00M2U0LWE1ZTAtYzhmZWU2MmE0OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsts7cEdO0n9i+tomJjE07aTV4OHO6y7EGx13 qu3yH8YwGrVoVPAFlJSqvFmRPoZl5gA6j1nbmDpZnveGELydMyecnqirS1pTHnNI fTQdb2YRVisksj5KxiJDtx4X/YH5A72yMfjsvTlxvJHZtZse1WEYcQDtvDfq469k nvJ+wZogTegtj8g34nTB+VB1j/BH3rZ+VIDzV5/KKzeXH66ZWJVuWRYjyCoweLrZ 85OEvBkD2fgMZ4PpO/RhkO45TaU8IZEItsy0zhMYuUEm9YU+Kw2u610NlgYSJeFv YSh9nRensanGhLkJXLmaGNwtJCfIEln4+hLT1d3D6tJpnje3cwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO1o1CaGASoGIF21JW8/Ym1o/5ChMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE2NjlmMWItZTc1NC0z YzBlLTlkMTQtN2E0OTU2YmZkODFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKbyMj2w9xvQCQyuIDqBg6loN/XpSSzjm+D4GqURH9HZnSZXDpkw +YKBYCYBi5FeBiibohfhmruFXOvQozad1xImvJTAsdHtBqPVwOqgjqgiI0N2cgws n9S1pfSFVlBNvGa/KCc0FL7m8DhP+5vA1I3ytV+9m5s4lc1OP2ZvEtQ+s5qNNGp6 3JCx3rN6fm2X+zZ/4YZPibOCn6rh13kjaLGlxxCNr+s5MkrZlZD46/MUEetRhaiI UDZ1yXhfeX7WIBcMquO0TXbRByWN87NBL5kk0KO4oTUNVP6pdNRi8h/iOIF/SxcS B0vciV/o4CH6+5Ayq+tJ8xIYiKslNQXfFTo= -----END CERTIFICATE-----Generated at Wed Aug 6 05:26:25 2025 by rpki-client