$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ab766f-a0fe-3722-a40d-5fcf1c76a276.roa File: 32ab766f-a0fe-3722-a40d-5fcf1c76a276.roa (raw, json) Hash identifier: R1nzMsd/RBXOzxAbA/9bz5i9A5ZSaX+OvVcSV/6/E4A= Subject key identifier: BC:4E:45:04:93:0B:96:A1:AF:3D:F1:A0:7F:73:CD:41:22:A2:44:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF0812304ABA58F478B1700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ab766f-a0fe-3722-a40d-5fcf1c76a276.roa Signing time: Thu 24 Jul 2025 12:38:53 +0000 ROA not before: Thu 24 Jul 2025 12:38:53 +0000 ROA not after: Wed 22 Oct 2025 12:38:53 +0000 asID: 397193 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:81:23:04:ab:a5:8f:47:8b:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:53 2025 GMT Not After : Oct 22 12:38:53 2025 GMT Subject: CN=92f07507-c682-4bc7-baae-805e0a584856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f0:c4:76:30:a9:9f:18:1d:af:8a:b5:c0:85: db:65:aa:fb:e7:4a:de:3b:72:32:99:7d:3c:91:14: 31:f8:a3:8f:f1:fc:c0:01:33:c7:11:38:a7:b8:90: 86:f3:e2:32:fd:d7:ba:d1:03:f9:34:4f:28:eb:f7: 36:1f:15:6d:8f:7e:44:75:6c:fb:00:24:7c:40:e7: 90:2d:36:5d:6f:9c:df:48:1b:d1:08:26:08:71:69: 5a:26:a9:33:53:3a:55:30:db:b9:b3:09:62:6c:c8: 7b:19:1a:98:54:25:46:8a:83:fa:23:64:af:a3:30: 80:4b:81:98:96:a4:76:87:9b:b1:8b:8b:4f:f1:af: b8:b1:32:04:4f:b5:4b:17:47:2f:7c:dd:f0:65:c9: 4e:f7:b6:b9:d2:7f:9e:f0:80:ac:86:e9:3a:54:a1: 35:d3:4a:fe:cf:4e:7d:b1:3b:6a:48:2b:0f:54:aa: 96:15:dc:49:6a:10:04:19:92:66:f6:51:b9:87:a9: 01:28:1c:ce:48:88:81:da:dd:67:57:ea:da:09:94: 72:58:af:b0:b2:b5:d4:d3:3e:cc:9b:34:75:56:c2: f0:06:7c:b9:ce:48:f6:fe:bd:6e:68:7b:6a:87:b2: 48:6d:d8:77:39:f4:1c:32:6e:2a:43:73:d2:f7:83: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4E:45:04:93:0B:96:A1:AF:3D:F1:A0:7F:73:CD:41:22:A2:44:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ab766f-a0fe-3722-a40d-5fcf1c76a276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d0:3a:f8:27:07:0b:e0:51:20:75:e8:9a:dd:d0:c1:13:bc: d3:3d:98:db:e0:11:47:47:fc:bc:f2:62:df:16:00:ca:04:50: 69:18:b4:d2:5c:81:da:11:d1:57:6d:61:45:47:e2:a1:41:5f: ee:56:8e:dd:d3:a7:0b:6b:a4:c8:06:6b:b5:65:0c:da:ed:c4: 2b:44:3a:42:9c:7e:55:86:d4:9c:5c:f7:a5:2d:a4:43:42:02: 9e:c8:15:63:4b:4f:e2:0d:b0:10:81:5c:96:11:2e:eb:47:3b: af:70:0b:30:69:2b:c9:cb:77:e3:31:91:4a:92:ab:1c:04:32: 8e:d6:7c:39:8d:f6:da:db:2f:92:8a:ea:88:11:13:ac:64:75: 00:65:c5:13:18:de:68:f4:73:c2:6d:87:98:b4:87:67:57:7a: b3:9e:76:fb:7c:3d:6e:de:53:fd:ed:90:85:fc:4d:e6:d7:81: ae:e1:e1:a1:c6:ab:e1:e8:76:b2:36:e1:c3:58:22:8c:d4:34: 80:55:06:63:86:ae:ae:eb:a3:a9:52:df:b6:fe:cc:53:d8:2b: 6b:d8:d8:a8:12:43:d7:c2:83:03:12:58:f6:9c:b2:51:b4:7e: f4:0f:27:4a:f4:86:e1:e9:39:ee:88:a7:de:26:16:ac:96:8d: b1:35:d9:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8IEjBKulj0eLFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk OTJmMDc1MDctYzY4Mi00YmM3LWJhYWUtODA1ZTBhNTg0ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vDEdjCpnxgdr4q1wIXbZar750reO3IymX08 kRQx+KOP8fzAATPHETinuJCG8+Iy/de60QP5NE8o6/c2HxVtj35EdWz7ACR8QOeQ LTZdb5zfSBvRCCYIcWlaJqkzUzpVMNu5swlibMh7GRqYVCVGioP6I2SvozCAS4GY lqR2h5uxi4tP8a+4sTIET7VLF0cvfN3wZclO97a50n+e8ICshuk6VKE100r+z059 sTtqSCsPVKqWFdxJahAEGZJm9lG5h6kBKBzOSIiB2t1nV+raCZRyWK+wsrXU0z7M mzR1VsLwBny5zkj2/r1uaHtqh7JIbdh3OfQcMm4qQ3PS94NewwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLxORQSTC5ahrz3xoH9zzUEiokT1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJhYjc2NmYtYTBmZS0z NzIyLWE0MGQtNWZjZjFjNzZhMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTQOvgnBwvgUSB16Jrd0METvNM9mNvgEUdH/LzyYt8WAMoEUGkY tNJcgdoR0VdtYUVH4qFBX+5Wjt3TpwtrpMgGa7VlDNrtxCtEOkKcflWG1Jxc96Ut pENCAp7IFWNLT+INsBCBXJYRLutHO69wCzBpK8nLd+MxkUqSqxwEMo7WfDmN9trb L5KK6ogRE6xkdQBlxRMY3mj0c8Jth5i0h2dXerOedvt8PW7eU/3tkIX8TebXga7h 4aHGq+HodrI24cNYIozUNIBVBmOGrq7ro6lS37b+zFPYK2vY2KgSQ9fCgwMSWPac slG0fvQPJ0r0huHpOe6Ip94mFqyWjbE12bM= -----END CERTIFICATE-----Generated at Mon Aug 4 22:14:36 2025 by rpki-client