$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31606bb3-58e1-3e10-926f-2ea7299c3b1e.roa File: 31606bb3-58e1-3e10-926f-2ea7299c3b1e.roa (raw, json) Hash identifier: AqY4G1XvzlmO10LjGsJ8vtmClgXpCyWMtnWoAG8a50k= Subject key identifier: 72:36:B9:FE:74:65:10:82:66:8B:9A:E7:DC:A3:1D:65:2A:9A:B0:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08BE3D40F05C3D1606900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31606bb3-58e1-3e10-926f-2ea7299c3b1e.roa Signing time: Thu 24 Jul 2025 12:38:58 +0000 ROA not before: Thu 24 Jul 2025 12:38:58 +0000 ROA not after: Wed 22 Oct 2025 12:38:58 +0000 asID: 397204 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:8b:e3:d4:0f:05:c3:d1:60:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:58 2025 GMT Not After : Oct 22 12:38:58 2025 GMT Subject: CN=4315acf1-fb25-45d2-a943-d0e091b1f120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:22:3a:c9:8c:44:82:8b:ae:4f:93:81:ab: 35:18:7d:7b:17:15:f6:1f:88:d8:97:e3:2c:66:74: 2f:d3:72:58:92:1c:0e:60:e2:a7:bc:6f:d3:71:6b: 0d:9c:07:b9:d4:3c:19:c9:44:29:10:06:19:b6:99: d6:b8:ac:e0:1e:4c:d3:7c:a8:ce:44:2f:6f:66:97: 00:98:bb:e7:4e:98:5b:fa:86:01:aa:be:1f:32:82: 52:55:4c:db:ec:e0:51:f3:67:ff:67:56:ed:b8:ed: 4b:0d:4a:37:9f:55:7a:05:ed:4c:69:99:a3:19:dd: 38:4d:ac:37:1f:25:75:2f:86:39:f5:7b:8b:f8:b8: cf:33:01:32:9e:4e:59:43:9a:12:d1:24:74:3e:b7: 40:41:46:0d:b2:1f:8b:ef:a3:9e:49:eb:78:97:f0: 5e:46:e8:18:3e:8f:d0:5f:10:fb:14:a8:2c:bd:a3: 74:e4:1c:75:29:7c:97:79:4e:66:5d:05:4a:e1:dd: ee:2f:ed:d5:c4:07:a8:c9:87:71:47:39:49:a8:23: a8:47:4f:88:20:1a:0c:3c:03:7e:27:1b:e9:7f:7c: a1:9b:49:6f:88:22:f1:2a:33:30:73:bc:f8:90:70: a5:4b:a7:3f:e9:df:d1:84:f0:58:3f:ee:6d:24:99: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:36:B9:FE:74:65:10:82:66:8B:9A:E7:DC:A3:1D:65:2A:9A:B0:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31606bb3-58e1-3e10-926f-2ea7299c3b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:a3:3f:af:4c:b6:8a:18:1b:77:b6:c9:36:e1:5f:c1:a6:3a: 60:18:4a:7e:5e:b5:4b:5b:03:ee:cb:c6:07:c3:1a:0d:16:76: 23:47:51:9b:b8:e5:21:ad:24:9b:a5:16:2b:0a:c6:d7:88:e1: 63:5d:a0:34:92:ab:75:27:3e:f5:e4:05:14:c2:4f:05:fa:1b: 6b:53:e4:cf:4b:dc:93:e1:04:b1:8b:96:98:f1:51:2d:42:15: b9:4d:ee:12:47:d8:c9:b7:42:7d:ed:9c:b5:00:01:5a:b7:68: 9a:27:de:13:fa:17:fe:af:c9:67:0f:ec:6c:9d:cd:35:0b:e4: 4b:a6:83:5d:a8:ac:df:e1:ca:48:2d:fd:7a:61:c0:d5:f6:93: 10:f8:24:c1:6d:11:a5:c8:79:52:62:81:d8:0e:b1:e1:ce:e0: 39:21:79:0b:72:cc:b0:c4:bc:a9:1a:b9:72:a1:05:5d:92:28: 31:a2:33:25:84:33:99:42:86:f6:36:c8:a0:fa:a7:7a:d9:ec: a7:06:6c:f0:0a:69:39:a9:ff:96:49:98:b8:4b:f0:30:ef:9a: d9:2c:83:6d:c7:d6:e9:c5:83:62:eb:03:e0:a2:17:67:3d:56: 60:45:f2:68:84:60:6b:85:c6:e1:69:f2:55:0e:7e:f1:93:ab: 94:35:d8:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8Ivj1A8Fw9FgaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1OFoXDTI1MTAyMjEyMzg1OFowLzEtMCsGA1UEAxMk NDMxNWFjZjEtZmIyNS00NWQyLWE5NDMtZDBlMDkxYjFmMTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOkiOsmMRIKLrk+Tgas1GH17FxX2H4jYl+Ms ZnQv03JYkhwOYOKnvG/TcWsNnAe51DwZyUQpEAYZtpnWuKzgHkzTfKjORC9vZpcA mLvnTphb+oYBqr4fMoJSVUzb7OBR82f/Z1btuO1LDUo3n1V6Be1MaZmjGd04Taw3 HyV1L4Y59XuL+LjPMwEynk5ZQ5oS0SR0PrdAQUYNsh+L76OeSet4l/BeRugYPo/Q XxD7FKgsvaN05Bx1KXyXeU5mXQVK4d3uL+3VxAeoyYdxRzlJqCOoR0+IIBoMPAN+ Jxvpf3yhm0lviCLxKjMwc7z4kHClS6c/6d/RhPBYP+5tJJmbPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHI2uf50ZRCCZoua59yjHWUqmrBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzE2MDZiYjMtNThlMS0z ZTEwLTkyNmYtMmVhNzI5OWMzYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFKjP69MtooYG3e2yTbhX8GmOmAYSn5etUtbA+7LxgfDGg0WdiNH UZu45SGtJJulFisKxteI4WNdoDSSq3UnPvXkBRTCTwX6G2tT5M9L3JPhBLGLlpjx US1CFblN7hJH2Mm3Qn3tnLUAAVq3aJon3hP6F/6vyWcP7GydzTUL5Eumg12orN/h ykgt/XphwNX2kxD4JMFtEaXIeVJigdgOseHO4DkheQtyzLDEvKkauXKhBV2SKDGi MyWEM5lChvY2yKD6p3rZ7KcGbPAKaTmp/5ZJmLhL8DDvmtksg23H1unFg2LrA+Ci F2c9VmBF8miEYGuFxuFp8lUOfvGTq5Q12P0= -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:32 2025 by rpki-client