$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43059a8a-ee23-3b94-8aa0-db590024a80b.roa File: 43059a8a-ee23-3b94-8aa0-db590024a80b.roa (raw, json) Hash identifier: lD/vIUsK6laIC3Uvx48VLKGhDJzr2k+3zWxHyz6ofKQ= Subject key identifier: 1A:F5:37:39:E4:B1:61:BE:B4:10:F7:94:91:24:4E:01:F8:8B:B4:78 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB22179D420FC11DAFAF3AA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43059a8a-ee23-3b94-8aa0-db590024a80b.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 0 IP address blocks: 2001:500:4431::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:79:d4:20:fc:11:da:fa:f3:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=d0d1715e-3a58-42c4-8cf9-416e783939be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3e:07:43:12:a2:43:20:6f:93:88:e8:ba:80: ff:99:5f:f8:2b:a4:da:eb:e4:a6:9e:ec:3c:7c:ff: 5a:79:6b:25:d5:a2:3d:e4:f4:76:95:66:d5:5e:e3: 10:32:c9:6b:6b:50:15:90:e6:e8:8e:c1:0d:86:23: 34:8a:9f:f4:fa:d0:27:f7:21:3d:9b:93:87:81:6d: 0f:26:7f:49:e2:e3:a3:a2:8f:b0:5c:ca:48:0f:96: dd:75:a2:21:41:3a:27:5d:30:b6:e8:6f:d7:99:5c: 07:71:7e:e0:95:68:aa:eb:29:51:3b:4e:65:15:ff: be:01:d7:23:9b:60:33:5a:10:ea:ea:c3:33:e6:15: 23:f8:a1:0b:d7:9b:ae:8d:ee:01:47:5c:b6:e6:c5: 6a:db:bf:90:e9:6e:48:39:4b:5a:c9:eb:98:72:eb: ac:b5:a4:0f:fc:e1:54:fd:b5:17:62:f5:df:db:d1: 97:6e:99:ca:5d:a0:bf:65:95:4e:49:c9:6f:89:ed: dd:dd:f3:8a:a6:7d:fc:b2:b2:cf:74:b3:0c:89:10: f4:29:8f:45:92:b5:71:c2:f8:df:8a:fe:b9:09:1a: f0:0d:d6:86:66:ea:6b:61:9e:87:7e:ec:ca:fb:4e: a5:0c:75:8f:c1:81:ef:78:29:03:81:e5:83:00:0b: 24:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F5:37:39:E4:B1:61:BE:B4:10:F7:94:91:24:4E:01:F8:8B:B4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43059a8a-ee23-3b94-8aa0-db590024a80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:4431::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:60:c8:9e:ae:ec:55:bc:0f:60:92:0c:9d:5f:b5:4a:50:d0: 28:d9:1b:7e:56:5e:e4:73:ff:aa:e2:7a:ab:63:31:69:a9:39: ea:51:1f:9c:fc:2e:50:5c:12:c3:bf:e4:9e:7e:a9:b4:06:6f: 1a:dc:93:81:c3:b7:d0:70:26:10:93:31:c0:00:b7:11:87:cf: 32:dc:22:36:b3:a5:b8:ab:15:db:1c:bf:2d:f9:1f:18:2d:ae: ea:63:b0:c9:78:5a:b8:1a:c2:59:10:a4:81:80:e1:9a:a7:d7: f9:0c:cf:e7:db:63:de:40:3c:b5:a5:c1:98:66:f4:9c:cc:06: c5:89:50:bd:57:c8:b4:97:d5:95:75:0c:cd:d2:c7:70:7f:78: eb:97:17:7f:68:8e:f7:d0:14:e6:e3:e7:b5:41:30:41:3f:77: 7d:c0:9a:e9:01:8f:df:61:6c:8e:ff:a4:06:44:8a:9b:83:91: e7:8b:b6:53:15:45:3e:f2:f6:75:94:3f:ff:3a:fa:64:12:06: 97:d1:4e:08:b2:99:da:bc:28:9f:f8:1e:1c:4c:b9:d6:88:14: 7a:e2:0a:27:81:f7:a5:2c:72:74:f8:aa:e0:62:29:1d:8e:ab: 0c:ed:01:db:1b:8e:0f:ae:7d:ee:65:19:09:3c:26:65:05:3e: 67:6d:cc:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqyIXnUIPwR2vrzqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDBkMTcxNWUtM2E1OC00MmM0LThjZjktNDE2ZTc4MzkzOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT4HQxKiQyBvk4jouoD/mV/4K6Ta6+Smnuw8 fP9aeWsl1aI95PR2lWbVXuMQMslra1AVkObojsENhiM0ip/0+tAn9yE9m5OHgW0P Jn9J4uOjoo+wXMpID5bddaIhQTonXTC26G/XmVwHcX7glWiq6ylRO05lFf++Adcj m2AzWhDq6sMz5hUj+KEL15uuje4BR1y25sVq27+Q6W5IOUtayeuYcuustaQP/OFU /bUXYvXf29GXbpnKXaC/ZZVOSclvie3d3fOKpn38srLPdLMMiRD0KY9FkrVxwvjf iv65CRrwDdaGZuprYZ6HfuzK+06lDHWPwYHveCkDgeWDAAskdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBr1NznksWG+tBD3lJEkTgH4i7R4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDMwNTlhOGEtZWUyMy0z Yjk0LThhYTAtZGI1OTAwMjRhODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAEQx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJgyJ6u7FW8D2CSDJ1ftUpQ0CjZG35WXuRz/6rieqtjMWmpOepR H5z8LlBcEsO/5J5+qbQGbxrck4HDt9BwJhCTMcAAtxGHzzLcIjazpbirFdscvy35 HxgtrupjsMl4WrgawlkQpIGA4Zqn1/kMz+fbY95APLWlwZhm9JzMBsWJUL1XyLSX 1ZV1DM3Sx3B/eOuXF39ojvfQFObj57VBMEE/d33AmukBj99hbI7/pAZEipuDkeeL tlMVRT7y9nWUP/86+mQSBpfRTgiymdq8KJ/4HhxMudaIFHriCieB96UscnT4quBi KR2OqwztAdsbjg+ufe5lGQk8JmUFPmdtzBg= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:41 2025 by rpki-client