$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33ebdada-7596-32a2-ae9f-6cbc2d1dfacc.roa File: 33ebdada-7596-32a2-ae9f-6cbc2d1dfacc.roa (raw, json) Hash identifier: Lgegz82WQZT/Hn3UhxyeLDb+VLkIoO9P6cyN6kAoKzs= Subject key identifier: FD:82:B4:68:54:A1:13:3B:F2:6D:15:7B:88:1B:CF:D4:D7:BF:65:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62EE3E29BA39EBB1FB2EC Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33ebdada-7596-32a2-ae9f-6cbc2d1dfacc.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 36624 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2e:e3:e2:9b:a3:9e:bb:1f:b2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=5f8747e4-6f34-45f8-9b8d-d07f14dec07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:3d:74:46:33:1c:ae:f8:26:e6:da:ee:27: 6e:dd:24:80:9d:e5:dd:72:f9:33:1f:b8:88:ab:73: b8:e9:a0:71:4d:c8:89:18:7c:0c:73:89:bd:e1:a5: da:61:f6:42:ad:7d:62:6a:8b:a5:04:60:14:54:c6: 72:e7:ab:75:15:ff:45:41:e2:93:4f:80:91:67:0f: 39:22:13:65:fc:2c:4c:9e:41:6a:e5:60:60:8d:67: fa:70:ad:53:45:c4:d3:32:a1:68:72:60:76:71:9b: 3a:34:9f:1b:0f:c7:6c:03:a1:d1:0b:aa:68:8e:89: df:9b:00:86:01:ad:84:03:d6:48:33:88:22:70:fa: 2d:6f:17:0f:5a:51:61:fd:f8:bd:c7:e0:93:80:30: 2b:ec:95:c0:12:fb:92:10:cf:6f:b6:9f:5a:2e:07: 7e:c4:d9:a8:73:ed:0f:45:75:62:f2:d5:50:8c:b5: d0:62:dd:55:96:fc:3c:1b:ec:1b:3c:6e:d3:cd:79: d7:4d:4d:72:88:6c:d7:c2:dc:8b:fb:ff:3e:cd:cd: 4c:49:84:08:71:7f:80:d0:b4:c8:89:d3:07:e2:75: 61:ca:f9:99:43:25:a8:e4:57:cf:ed:e2:cd:6e:9e: 79:b8:ae:54:99:e8:64:df:c5:3e:07:c1:4b:fe:0b: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:82:B4:68:54:A1:13:3B:F2:6D:15:7B:88:1B:CF:D4:D7:BF:65:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33ebdada-7596-32a2-ae9f-6cbc2d1dfacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:1c:5f:6e:d4:c5:0c:71:fb:6b:b3:a5:c1:a5:e3:10:2b: 04:28:5d:95:5a:dc:77:3e:e1:ca:b2:ad:be:b7:12:ef:01:6b: af:83:d4:fe:45:a4:87:28:fe:ea:8b:e4:00:8b:ce:ca:b9:59: 5d:b6:30:12:3f:79:27:0a:45:f5:70:9e:48:f3:c9:9a:26:3f: bf:01:4d:f3:e7:11:ee:e7:15:28:ed:d8:aa:44:16:2d:9f:77: c1:e2:b2:34:fa:98:56:37:52:27:62:18:5a:54:0c:b3:34:28: 42:98:a6:80:70:4e:44:c9:e3:49:3d:fc:98:95:1f:53:81:94: 3b:0e:5f:a5:45:a8:23:15:e4:46:c2:1b:45:7e:3c:c7:f5:4b: 7c:6e:3b:9e:e5:79:16:62:31:9d:cb:40:dd:14:43:e5:86:70: 7f:76:e3:e5:0d:70:b3:06:b0:4f:4a:c6:0d:cb:95:fa:8e:16: 5b:42:ac:62:22:a5:87:cb:8e:13:51:94:7a:04:f2:26:1d:8e: f5:67:cf:4c:9e:94:b5:22:09:ed:9c:13:27:13:20:f6:88:72: cd:51:e9:b5:ce:07:37:99:44:94:ab:cf:64:82:b2:5a:14:d7: ea:1d:59:49:1f:8d:9b:48:88:4c:8b:d4:e4:7b:ea:73:8d:d3: bb:c9:47:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3ti7j4pujnrsfsuwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NWY4NzQ3ZTQtNmYzNC00NWY4LTliOGQtZDA3ZjE0ZGVjMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq589dEYzHK74Juba7idu3SSAneXdcvkzH7iI q3O46aBxTciJGHwMc4m94aXaYfZCrX1iaoulBGAUVMZy56t1Ff9FQeKTT4CRZw85 IhNl/CxMnkFq5WBgjWf6cK1TRcTTMqFocmB2cZs6NJ8bD8dsA6HRC6pojonfmwCG Aa2EA9ZIM4gicPotbxcPWlFh/fi9x+CTgDAr7JXAEvuSEM9vtp9aLgd+xNmoc+0P RXVi8tVQjLXQYt1Vlvw8G+wbPG7TzXnXTU1yiGzXwtyL+/8+zc1MSYQIcX+A0LTI idMH4nVhyvmZQyWo5FfP7eLNbp55uK5Umehk38U+B8FL/gtoxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP2CtGhUoRM78m0Ve4gbz9TXv2VrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzNlYmRhZGEtNzU5Ni0z MmEyLWFlOWYtNmNiYzJkMWRmYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9uHF9u1MUMcftrs6XBpeMQKwQoXZVa3Hc+4cqyrb63Eu8Ba6+D 1P5FpIco/uqL5ACLzsq5WV22MBI/eScKRfVwnkjzyZomP78BTfPnEe7nFSjt2KpE Fi2fd8HisjT6mFY3UidiGFpUDLM0KEKYpoBwTkTJ40k9/JiVH1OBlDsOX6VFqCMV 5EbCG0V+PMf1S3xuO57leRZiMZ3LQN0UQ+WGcH924+UNcLMGsE9Kxg3LlfqOFltC rGIipYfLjhNRlHoE8iYdjvVnz0yelLUiCe2cEycTIPaIcs1R6bXOBzeZRJSrz2SC sloU1+odWUkfjZtIiEyL1OR76nON07vJR7U= -----END CERTIFICATE-----Generated at Wed Aug 6 16:18:15 2025 by rpki-client