$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa File: 209c2afd-1ef7-350d-ac7f-66af5a91c679.roa (raw, json) Hash identifier: Lh+rT+B0sTA/GkOwQuQWkHdlj3yVpX/FT0KQQPrRMms= Subject key identifier: 79:15:10:72:03:5A:71:E9:8C:23:16:B2:5A:62:7E:8C:EA:AB:31:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62615DD1EF7BCE55C3F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 32651 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:26:15:dd:1e:f7:bc:e5:5c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=259ccf75-5682-4f83-ad63-5cd056dc7459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:8d:60:41:62:90:5d:8a:70:ad:2a:85:4c: b4:bb:46:fa:79:eb:35:6c:82:83:b9:c4:9d:68:c6: 47:3b:35:e0:7c:46:42:c4:7d:80:ac:9e:aa:78:92: b1:60:c0:87:e1:3d:5d:ac:36:a5:2f:d1:ab:36:8b: dd:ad:38:82:27:46:24:c1:69:68:ab:e8:6c:bb:60: a3:2f:d0:e9:48:d2:f6:66:0e:1d:48:3a:9c:8a:3d: 90:6b:59:1d:e6:af:a7:9d:2b:3a:1f:11:ea:93:ac: 7b:9a:9c:6b:91:0b:1d:c3:65:fe:ba:49:f1:5a:ea: 25:c6:0e:3d:c6:97:24:e2:ca:c9:10:57:47:4f:90: 64:7e:7d:45:04:6f:ff:34:dd:5a:b7:9e:53:c9:96: b8:1f:2c:39:cf:a3:5d:cb:af:38:a1:fa:a4:27:48: 15:ca:9d:64:01:5c:bf:65:13:d4:fd:ac:94:c4:e4: d7:d1:be:36:3a:0d:e6:fc:f0:48:58:f1:d1:11:9d: fd:62:54:b9:7b:37:93:fd:48:e1:1d:85:5c:e4:d1: bc:ab:f6:3b:a4:d7:d5:e5:79:06:ca:5d:45:eb:6c: 1f:ae:13:d0:44:4f:ea:72:63:7a:b0:ef:c0:8b:6f: d5:57:90:43:25:17:d4:12:9e:db:e0:3e:d1:31:4e: 9c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:15:10:72:03:5A:71:E9:8C:23:16:B2:5A:62:7E:8C:EA:AB:31:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209c2afd-1ef7-350d-ac7f-66af5a91c679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7d:88:c7:be:19:fc:ac:80:99:99:29:ad:58:1b:ad:d9:23: 4d:49:15:57:44:3b:1c:8a:ec:ab:80:08:f0:da:f4:a0:79:bc: cf:c8:0f:4a:42:a2:29:66:1b:93:c5:a8:62:37:45:a1:9c:3a: dc:b6:c2:91:46:59:30:66:3b:b5:57:1c:90:14:73:b9:2c:5f: d2:4b:60:fa:c2:37:2d:a8:62:83:f2:11:fc:13:ed:3b:3c:20: 73:19:40:a6:0e:8a:55:86:fa:1e:04:7e:08:64:14:98:4c:98: 43:14:77:95:81:c2:2a:bf:e4:78:3f:0b:e0:3a:4b:77:86:34: 14:cc:ea:1e:ad:92:fa:53:2a:13:7e:82:65:d9:0b:b4:b7:85: 22:7e:6e:1b:b4:5d:15:09:12:05:33:c0:52:8f:31:2f:87:c8: df:9f:fa:a1:57:92:77:18:be:2b:37:a2:e7:ee:95:53:76:0a: 4e:b3:ec:4d:b7:e9:78:df:de:76:f0:5b:fa:21:35:ca:18:36: f8:ba:a9:79:56:41:43:08:7b:54:72:fe:f4:79:68:d7:78:10: 18:65:b3:2d:30:42:39:05:cc:07:80:6d:18:67:df:f3:b0:76: db:e8:83:1a:dc:54:47:9b:40:6e:3e:a2:df:42:2c:b6:97:ad: 86:85:2f:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiYV3R73vOVcPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MjU5Y2NmNzUtNTY4Mi00ZjgzLWFkNjMtNWNkMDU2ZGM3NDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgiNYEFikF2KcK0qhUy0u0b6ees1bIKDucSd aMZHOzXgfEZCxH2ArJ6qeJKxYMCH4T1drDalL9GrNovdrTiCJ0YkwWloq+hsu2Cj L9DpSNL2Zg4dSDqcij2Qa1kd5q+nnSs6HxHqk6x7mpxrkQsdw2X+uknxWuolxg49 xpck4srJEFdHT5Bkfn1FBG//NN1at55TyZa4Hyw5z6Ndy684ofqkJ0gVyp1kAVy/ ZRPU/ayUxOTX0b42Og3m/PBIWPHREZ39YlS5ezeT/UjhHYVc5NG8q/Y7pNfV5XkG yl1F62wfrhPQRE/qcmN6sO/Ai2/VV5BDJRfUEp7b4D7RMU6c2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHkVEHIDWnHpjCMWslpifozqqzGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA5YzJhZmQtMWVmNy0z NTBkLWFjN2YtNjZhZjVhOTFjNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAId9iMe+GfysgJmZKa1YG63ZI01JFVdEOxyK7KuACPDa9KB5vM/I D0pCoilmG5PFqGI3RaGcOty2wpFGWTBmO7VXHJAUc7ksX9JLYPrCNy2oYoPyEfwT 7Ts8IHMZQKYOilWG+h4EfghkFJhMmEMUd5WBwiq/5Hg/C+A6S3eGNBTM6h6tkvpT KhN+gmXZC7S3hSJ+bhu0XRUJEgUzwFKPMS+HyN+f+qFXkncYvis3oufulVN2Ck6z 7E236Xjf3nbwW/ohNcoYNvi6qXlWQUMIe1Ry/vR5aNd4EBhlsy0wQjkFzAeAbRhn 3/OwdtvogxrcVEebQG4+ot9CLLaXrYaFLyA= -----END CERTIFICATE-----Generated at Wed Aug 6 13:13:21 2025 by rpki-client