$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa File: 3344fa1c-b4cc-371f-b8b0-6c587e326185.roa (raw, json) Hash identifier: MGoTQ6hzE2gM2dFnOF43bUnsIUOsR13HV6R8t7iYu5k= Subject key identifier: 62:5B:CA:F8:11:E4:DF:A1:F9:E1:C7:A7:C9:B8:46:0D:79:88:8A:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63DAD7FD4A1B655C7B500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 36618 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3d:ad:7f:d4:a1:b6:55:c7:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=7d44458e-18b4-4fc9-883a-985b286b4011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ca:5e:f9:58:ea:f8:3f:ab:bf:de:ed:22:73: 32:e2:fb:9a:53:5e:f9:cf:ca:06:7e:6a:e0:ad:68: 80:a3:a7:34:4d:1d:6b:b2:ec:10:0d:f5:3a:f2:6c: 17:ba:b4:bc:18:83:85:37:b3:a9:a6:a9:4c:d0:5d: b2:bf:f4:13:42:91:fc:83:52:bc:c6:80:dd:a7:9f: f4:f2:46:be:bc:de:45:fb:ef:fc:a2:5e:ee:fd:3b: 7d:10:b9:08:5e:9d:dd:ca:01:2b:02:f7:f8:9f:d9: f5:65:49:10:d4:9f:fe:99:ac:76:b6:23:ee:02:98: 66:b5:04:b2:e0:a8:bb:41:45:ac:9b:12:36:3a:96: 0d:3d:3f:d0:8b:ee:09:3a:e8:ec:2c:1f:3b:09:3a: 9b:ed:2e:30:94:9c:84:fc:4c:50:60:b2:51:c8:56: b5:ae:ba:45:67:a7:c0:85:f7:98:f9:5c:37:0b:17: 2a:11:4a:18:7d:07:3b:25:1e:6f:f8:81:0c:fb:0b: 84:09:ae:8a:61:d7:41:4f:2a:b5:d4:e9:8c:0c:01: cb:00:3a:ce:e8:9d:cf:0c:ff:ce:28:08:54:33:18: 47:5d:4b:26:5c:92:48:8b:45:66:ed:df:ae:93:2a: f9:cf:0a:3c:3a:f9:19:7f:8d:b6:93:3e:9f:79:0f: 72:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5B:CA:F8:11:E4:DF:A1:F9:E1:C7:A7:C9:B8:46:0D:79:88:8A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3344fa1c-b4cc-371f-b8b0-6c587e326185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:07:26:fa:80:2c:b4:20:64:01:62:75:ab:b1:c1:08:36:04: 8d:4b:dc:7d:9b:46:ee:9d:3d:a8:ac:fd:45:73:57:42:12:e0: 0a:b1:bb:1b:35:8b:41:94:09:12:92:80:2c:3e:64:50:23:79: 3d:39:d7:39:9b:1b:f5:59:0c:d9:4e:7b:88:1a:c5:84:ed:d1: 87:95:7c:0f:b8:4f:a3:10:7b:fa:57:78:cf:05:57:db:a3:35: 36:58:a7:3f:9e:97:a3:d9:a5:2c:98:05:5f:78:74:17:3d:33: 8a:95:15:e8:c4:52:2a:0a:34:78:b5:6b:fd:36:94:a7:bf:a4: 38:ac:d6:73:8c:d1:1e:a7:d4:c9:95:7f:25:52:2c:57:1b:8e: 91:ce:e3:ea:0b:e9:4e:36:27:3c:9d:38:ba:83:53:cf:a0:46: ce:35:44:fb:ac:e1:7e:5d:b9:49:5d:1f:6f:cf:38:5d:65:37: 32:9e:b5:e3:29:3d:12:35:4f:d1:ed:46:6e:6d:05:c1:30:c6: a8:a3:9a:a9:ad:83:4e:51:db:5c:90:e5:0b:5d:8f:af:b1:57: c4:af:2f:83:86:84:85:26:14:45:12:95:4c:5d:cc:bd:e4:8d: a0:a0:3a:ad:ce:aa:c3:09:8d:09:95:4b:d6:2e:e9:5c:eb:ec: 57:46:de:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75j2tf9ShtlXHtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk N2Q0NDQ1OGUtMThiNC00ZmM5LTg4M2EtOTg1YjI4NmI0MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8pe+Vjq+D+rv97tInMy4vuaU175z8oGfmrg rWiAo6c0TR1rsuwQDfU68mwXurS8GIOFN7OppqlM0F2yv/QTQpH8g1K8xoDdp5/0 8ka+vN5F++/8ol7u/Tt9ELkIXp3dygErAvf4n9n1ZUkQ1J/+max2tiPuAphmtQSy 4Ki7QUWsmxI2OpYNPT/Qi+4JOujsLB87CTqb7S4wlJyE/ExQYLJRyFa1rrpFZ6fA hfeY+Vw3CxcqEUoYfQc7JR5v+IEM+wuECa6KYddBTyq11OmMDAHLADrO6J3PDP/O KAhUMxhHXUsmXJJIi0Vm7d+ukyr5zwo8OvkZf422kz6feQ9yEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGJbyvgR5N+h+eHHp8m4Rg15iIomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM0NGZhMWMtYjRjYy0z NzFmLWI4YjAtNmM1ODdlMzI2MTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL4HJvqALLQgZAFidauxwQg2BI1L3H2bRu6dPais/UVzV0IS4Aqx uxs1i0GUCRKSgCw+ZFAjeT051zmbG/VZDNlOe4gaxYTt0YeVfA+4T6MQe/pXeM8F V9ujNTZYpz+el6PZpSyYBV94dBc9M4qVFejEUioKNHi1a/02lKe/pDis1nOM0R6n 1MmVfyVSLFcbjpHO4+oL6U42JzydOLqDU8+gRs41RPus4X5duUldH2/POF1lNzKe teMpPRI1T9HtRm5tBcEwxqijmqmtg05R21yQ5Qtdj6+xV8SvL4OGhIUmFEUSlUxd zL3kjaCgOq3OqsMJjQmVS9Yu6Vzr7FdG3m4= -----END CERTIFICATE-----Generated at Wed Aug 6 10:14:05 2025 by rpki-client