$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa File: 3f1b0596-2674-340b-844e-d508a34d5971.roa (raw, json) Hash identifier: A/r+0SgC9vLoMRQ0A2tYAJ/tHuHMQpP2KdHhUqJOm+U= Subject key identifier: 99:76:34:C7:4D:7F:9B:3C:F6:4A:38:C2:15:C8:0B:69:66:B3:27:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62E954DA4DC4014231340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396608 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2e:95:4d:a4:dc:40:14:23:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=2d051c4b-49db-4f7a-ae3c-97cb55102ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:ff:06:6e:85:ae:7f:7e:77:ba:b1:71:1a: ba:f1:07:f6:8c:58:d6:16:4a:1c:c4:dd:7b:ac:b0: a0:49:63:64:35:b8:a0:c8:5b:14:e4:25:46:39:18: 01:87:63:55:b9:b6:6c:22:70:8a:4d:91:cc:99:02: d9:71:36:c7:19:b5:14:70:55:59:46:3b:5b:7e:37: 62:85:1a:91:ee:07:87:86:5e:50:56:e7:da:58:e2: 69:f1:e9:f7:32:bf:63:7d:54:fc:86:66:25:e9:87: 18:b8:83:5d:51:4f:97:8b:4e:9f:36:c2:32:c0:5c: ed:01:9a:4c:3c:84:fd:78:02:a0:bd:e0:11:a0:32: 25:ca:25:ac:0f:8a:8f:5b:02:0e:29:1b:0a:c6:5a: 70:7b:08:ff:17:af:72:a9:85:26:8c:91:10:44:a5: c0:bf:5c:4d:03:13:c4:1e:f4:a8:01:e1:1f:5a:5d: d3:b1:73:78:9a:b3:3f:d0:66:76:a5:e3:35:30:91: 98:32:8e:64:46:0a:52:63:0e:b5:12:0f:26:ef:86: f9:d4:15:d0:00:c3:28:db:0e:52:5b:0c:e4:83:14: ca:62:9e:88:be:f5:0d:dd:74:c5:f2:50:31:b7:b0: f7:c8:26:0d:cb:1c:da:31:1e:af:0e:08:74:79:e9: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:76:34:C7:4D:7F:9B:3C:F6:4A:38:C2:15:C8:0B:69:66:B3:27:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a4:a6:2d:d6:09:17:f1:2d:8c:dd:02:ff:6e:88:ff:1a:44: c8:9c:51:f4:66:fe:99:1d:c7:6d:54:e7:77:24:05:02:ca:d8: 5a:98:9c:bd:ee:66:94:d5:d6:7c:58:be:ad:30:82:9d:2a:ab: b5:9d:db:34:46:f4:e3:8e:ac:71:65:f6:dd:98:a5:f2:32:8c: 54:24:0b:9d:e1:07:26:02:29:fc:c5:6f:d9:0d:35:f8:c7:26: ee:7e:b9:1a:18:87:49:27:0b:a3:06:d6:ab:00:07:7a:f7:52: ad:a9:3d:0e:03:35:01:8c:7a:fd:b1:ed:0d:06:20:10:ef:2f: 50:0e:70:4e:53:f6:46:68:01:f5:1f:69:a5:3d:a2:8c:7d:43: 18:43:07:96:61:c2:1f:64:06:8e:4d:13:07:de:06:06:9c:8b: 5f:10:67:be:5a:a0:39:6c:59:34:c5:b4:e5:82:e3:7b:0f:45: 9a:21:86:92:b4:e6:8e:49:60:81:6f:7e:b2:0e:20:f8:5b:e9: d1:29:93:02:c9:f2:46:57:29:5f:bd:4f:50:a0:2c:a5:92:27: 1d:31:47:11:62:a5:91:1f:9b:b0:e3:45:a9:f2:86:11:80:d9: 5b:fa:0d:44:b8:02:9c:6c:b6:2a:70:83:eb:99:d8:eb:30:58: 55:47:6f:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3ti6VTaTcQBQjE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MmQwNTFjNGItNDlkYi00ZjdhLWFlM2MtOTdjYjU1MTAyZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzL/Bm6Frn9+d7qxcRq68Qf2jFjWFkocxN17 rLCgSWNkNbigyFsU5CVGORgBh2NVubZsInCKTZHMmQLZcTbHGbUUcFVZRjtbfjdi hRqR7geHhl5QVufaWOJp8en3Mr9jfVT8hmYl6YcYuINdUU+Xi06fNsIywFztAZpM PIT9eAKgveARoDIlyiWsD4qPWwIOKRsKxlpwewj/F69yqYUmjJEQRKXAv1xNAxPE HvSoAeEfWl3TsXN4mrM/0GZ2peM1MJGYMo5kRgpSYw61Eg8m74b51BXQAMMo2w5S WwzkgxTKYp6IvvUN3XTF8lAxt7D3yCYNyxzaMR6vDgh0eekosQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJl2NMdNf5s89ko4whXIC2lmsycxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YxYjA1OTYtMjY3NC0z NDBiLTg0NGUtZDUwOGEzNGQ1OTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACakpi3WCRfxLYzdAv9uiP8aRMicUfRm/pkdx21U53ckBQLK2FqY nL3uZpTV1nxYvq0wgp0qq7Wd2zRG9OOOrHFl9t2YpfIyjFQkC53hByYCKfzFb9kN NfjHJu5+uRoYh0knC6MG1qsAB3r3Uq2pPQ4DNQGMev2x7Q0GIBDvL1AOcE5T9kZo AfUfaaU9oox9QxhDB5Zhwh9kBo5NEwfeBgaci18QZ75aoDlsWTTFtOWC43sPRZoh hpK05o5JYIFvfrIOIPhb6dEpkwLJ8kZXKV+9T1CgLKWSJx0xRxFipZEfm7DjRany hhGA2Vv6DUS4Apxstipwg+uZ2OswWFVHbxw= -----END CERTIFICATE-----Generated at Wed Aug 6 16:18:42 2025 by rpki-client