$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328f2b4a-0640-3ef9-bca5-9bf6a8a41079.roa File: 328f2b4a-0640-3ef9-bca5-9bf6a8a41079.roa (raw, json) Hash identifier: CpFpDZ90sdEV5i+xPtStDq82deG3BqBe6Yza56W+GzI= Subject key identifier: E2:A7:62:23:39:BC:A8:4B:3E:D5:B0:9E:20:07:97:A2:AE:45:1A:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08A92985071F44C312B8C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328f2b4a-0640-3ef9-bca5-9bf6a8a41079.roa Signing time: Thu 24 Jul 2025 12:38:57 +0000 ROA not before: Thu 24 Jul 2025 12:38:57 +0000 ROA not after: Wed 22 Oct 2025 12:38:57 +0000 asID: 396610 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:8a:92:98:50:71:f4:4c:31:2b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:57 2025 GMT Not After : Oct 22 12:38:57 2025 GMT Subject: CN=c69d2e5e-7149-44b7-afff-b9dfa3140ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fb:1c:8a:e2:18:c1:13:df:f4:e8:56:f6:b8: 0d:0f:56:ba:73:80:71:aa:56:bd:40:88:89:da:95: d5:7e:fa:2f:91:7f:f5:d3:7d:87:6b:93:f5:c1:5b: 59:2e:92:62:75:f6:20:88:4b:5c:13:e9:6c:e2:74: 09:3d:ca:f9:bf:ed:26:0f:4c:da:65:ef:c6:74:b6: 33:93:8a:a4:ad:69:0e:a8:a4:41:a4:f7:7b:56:67: bc:c1:c6:f3:c7:38:3f:4f:49:7a:67:21:b6:c7:95: ba:2e:84:0a:89:08:88:09:0f:aa:98:db:27:c0:d6: e6:19:a1:4c:82:29:95:fe:52:79:83:b6:df:9f:99: 4c:d7:e0:78:3f:af:3d:68:1d:93:52:34:2f:85:50: d4:eb:c5:28:a3:1f:ae:cc:c3:98:91:a1:ec:c0:e6: 1c:d3:38:bb:96:4f:67:8a:51:9e:63:71:74:06:07: cc:b0:4c:7e:c9:ba:2a:e9:99:c0:d5:08:2c:7c:1b: 90:21:b1:73:d7:73:43:6d:d5:4c:36:c7:8f:a7:85: 58:eb:43:79:c9:01:1e:25:c5:e8:1b:9d:31:45:f0: a7:c5:1e:a6:08:6b:98:cb:a4:aa:24:2e:18:50:7a: c4:ce:73:06:fe:e2:42:e6:1b:dd:5a:63:a8:c0:9e: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:62:23:39:BC:A8:4B:3E:D5:B0:9E:20:07:97:A2:AE:45:1A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/328f2b4a-0640-3ef9-bca5-9bf6a8a41079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:71:5b:87:d9:fd:4e:f4:b3:77:cb:59:8a:4a:38:00:16:84: ab:97:e1:dc:a4:23:3e:08:05:3e:78:5d:a4:67:a2:e0:23:cd: ac:ab:36:8f:db:f2:b2:8d:89:2f:88:c3:0a:78:38:ae:c1:70: f6:45:77:f5:b9:36:0b:ba:ba:c4:16:6b:1d:69:0a:5d:0a:f0: 28:29:04:c1:b5:2a:f9:1a:0f:fc:95:68:5a:c2:03:46:54:8b: 0d:c0:be:50:07:83:f2:a8:6b:b8:71:be:95:fe:84:c8:47:5c: f9:65:a2:80:8a:6f:ef:28:8e:e2:21:8d:99:4d:c9:65:d3:83: db:2f:21:f7:09:01:0c:6d:7c:d8:05:40:b2:8d:a8:b6:71:39: 69:66:59:26:ad:98:8e:00:dd:b4:5b:95:d9:2f:d5:0e:79:95: 44:35:8c:3f:ea:4d:0b:6c:0a:6e:51:d2:d8:01:03:9a:78:73: d8:b9:78:f3:13:5b:0d:c1:49:1c:8f:77:b7:46:e8:58:ba:22: df:0a:5d:53:01:14:61:e9:4f:bf:90:ac:2c:0e:a2:44:8a:18: 2d:3e:74:e1:f0:fe:3c:de:03:d1:52:5c:c8:c9:3c:2e:ae:e6: 33:63:5b:a9:b0:10:bc:9e:eb:57:f3:bd:3c:da:cd:b1:74:43: 81:63:71:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8IqSmFBx9EwxK4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1N1oXDTI1MTAyMjEyMzg1N1owLzEtMCsGA1UEAxMk YzY5ZDJlNWUtNzE0OS00NGI3LWFmZmYtYjlkZmEzMTQwZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/sciuIYwRPf9OhW9rgND1a6c4Bxqla9QIiJ 2pXVfvovkX/1032Ha5P1wVtZLpJidfYgiEtcE+ls4nQJPcr5v+0mD0zaZe/GdLYz k4qkrWkOqKRBpPd7Vme8wcbzxzg/T0l6ZyG2x5W6LoQKiQiICQ+qmNsnwNbmGaFM gimV/lJ5g7bfn5lM1+B4P689aB2TUjQvhVDU68Uoox+uzMOYkaHswOYc0zi7lk9n ilGeY3F0BgfMsEx+yboq6ZnA1QgsfBuQIbFz13NDbdVMNsePp4VY60N5yQEeJcXo G50xRfCnxR6mCGuYy6SqJC4YUHrEznMG/uJC5hvdWmOowJ4X1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOKnYiM5vKhLPtWwniAHl6KuRRpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI4ZjJiNGEtMDY0MC0z ZWY5LWJjYTUtOWJmNmE4YTQxMDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACNxW4fZ/U70s3fLWYpKOAAWhKuX4dykIz4IBT54XaRnouAjzayr No/b8rKNiS+Iwwp4OK7BcPZFd/W5Ngu6usQWax1pCl0K8CgpBMG1KvkaD/yVaFrC A0ZUiw3AvlAHg/Koa7hxvpX+hMhHXPllooCKb+8ojuIhjZlNyWXTg9svIfcJAQxt fNgFQLKNqLZxOWlmWSatmI4A3bRbldkv1Q55lUQ1jD/qTQtsCm5R0tgBA5p4c9i5 ePMTWw3BSRyPd7dG6Fi6It8KXVMBFGHpT7+QrCwOokSKGC0+dOHw/jzeA9FSXMjJ PC6u5jNjW6mwELye61fzvTzazbF0Q4FjcYs= -----END CERTIFICATE-----Generated at Thu Aug 7 01:23:10 2025 by rpki-client