$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435dd662-6c54-3076-9bf3-f90d5669c892.roa File: 435dd662-6c54-3076-9bf3-f90d5669c892.roa (raw, json) Hash identifier: JK+IvZbnx4CI783bJYyHS040HIePYd5m42yyyU1ANnY= Subject key identifier: F3:81:A7:52:C0:7B:B9:1A:99:3F:FD:27:1D:41:E5:0E:A4:59:17:24 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62C1F5DFC013A29131BA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435dd662-6c54-3076-9bf3-f90d5669c892.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396617 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2c:1f:5d:fc:01:3a:29:13:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=fd43ef86-9821-4858-bd27-478a36067f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2a:d4:37:13:25:b4:50:d7:2f:55:bf:7b:69: aa:d6:9a:40:7d:07:19:c8:f9:a2:ae:7c:a4:05:cc: 86:5f:5f:87:2b:b6:3a:c0:35:1a:b5:b9:53:ff:83: 0b:4a:ba:ff:00:69:49:b8:2a:62:44:8d:ec:c5:96: b7:43:72:a8:c2:f8:4c:37:ef:0f:81:30:7c:7c:54: 04:c6:3d:b0:4f:7f:34:f2:9f:06:2a:f0:f2:df:93: c8:fd:26:94:b4:15:51:95:a0:ea:11:96:f8:44:8d: 6a:2e:68:14:b7:c9:8c:25:a6:a9:9b:7e:4a:ce:3e: 3c:73:24:bc:22:4f:62:2d:94:81:c4:7b:0c:15:b4: 74:4a:cb:aa:47:d1:a3:3a:b8:90:26:7d:3b:86:4a: df:3e:6b:82:a5:6e:df:8f:2d:d1:1f:6f:f2:37:66: 47:93:68:f6:31:6e:f1:28:f2:e4:91:48:b5:f1:06: e4:dd:7f:cf:7c:75:a1:be:bb:22:0d:84:71:56:92: 35:45:f2:e2:86:df:b8:8e:54:c3:ef:76:3e:f9:ba: eb:29:32:71:3b:00:4f:c5:9e:c3:96:dd:7e:2d:7d: d1:27:2f:23:fa:02:d9:69:c1:53:12:66:26:24:44: 9f:95:7f:ea:53:05:45:e6:86:ba:23:10:96:dc:51: f0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:81:A7:52:C0:7B:B9:1A:99:3F:FD:27:1D:41:E5:0E:A4:59:17:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/435dd662-6c54-3076-9bf3-f90d5669c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:dc:e0:24:08:7e:58:06:51:de:b8:21:28:4f:ec:b6:a9:be: e5:7b:51:55:b3:fa:a5:d1:09:e2:c0:2b:c1:9a:c3:38:50:06: 63:46:64:9d:09:f2:e2:aa:82:20:99:bb:84:b8:24:1a:60:34: 97:6f:d7:ab:e6:1a:ad:99:f0:a4:ff:b4:82:e3:bf:35:6f:64: 81:29:cf:37:bc:46:f2:f6:4e:da:6e:7c:bb:00:54:94:d6:67: d8:9a:b8:ef:9b:c0:da:7b:cb:b7:5c:7c:a5:ec:a6:ef:9d:a9: 03:b6:40:b1:8d:b5:f2:38:ef:06:bf:96:e1:22:4f:1b:aa:f8: c8:4c:d6:e1:c3:d6:1f:7f:c3:02:d9:aa:a0:20:ad:b7:09:bf: 5d:ca:9f:10:0d:df:e2:06:60:b8:6a:12:b5:cd:84:65:da:dd: e2:52:80:bd:b3:05:c1:22:20:50:31:7a:91:ca:5a:17:d5:a6: 3d:2f:67:84:f2:29:75:45:38:04:c0:28:cd:5b:69:8e:e0:3c: a0:35:90:3e:67:56:5d:2d:8d:f5:43:0d:a2:53:46:0f:d2:06: 5d:64:76:64:66:a2:3c:28:af:08:b9:da:f1:53:a6:10:4c:35: cb:d7:af:63:00:a7:a2:92:7f:e2:27:a3:53:75:20:77:48:35: f8:b5:ec:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiwfXfwBOikTG6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZmQ0M2VmODYtOTgyMS00ODU4LWJkMjctNDc4YTM2MDY3ZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyrUNxMltFDXL1W/e2mq1ppAfQcZyPmirnyk BcyGX1+HK7Y6wDUatblT/4MLSrr/AGlJuCpiRI3sxZa3Q3KowvhMN+8PgTB8fFQE xj2wT3808p8GKvDy35PI/SaUtBVRlaDqEZb4RI1qLmgUt8mMJaapm35Kzj48cyS8 Ik9iLZSBxHsMFbR0SsuqR9GjOriQJn07hkrfPmuCpW7fjy3RH2/yN2ZHk2j2MW7x KPLkkUi18Qbk3X/PfHWhvrsiDYRxVpI1RfLiht+4jlTD73Y++brrKTJxOwBPxZ7D lt1+LX3RJy8j+gLZacFTEmYmJESflX/qUwVF5oa6IxCW3FHwFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOBp1LAe7kamT/9Jx1B5Q6kWRckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM1ZGQ2NjItNmM1NC0z MDc2LTliZjMtZjkwZDU2NjljODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA3c4CQIflgGUd64IShP7LapvuV7UVWz+qXRCeLAK8GawzhQBmNG ZJ0J8uKqgiCZu4S4JBpgNJdv16vmGq2Z8KT/tILjvzVvZIEpzze8RvL2TtpufLsA VJTWZ9iauO+bwNp7y7dcfKXspu+dqQO2QLGNtfI47wa/luEiTxuq+MhM1uHD1h9/ wwLZqqAgrbcJv13KnxAN3+IGYLhqErXNhGXa3eJSgL2zBcEiIFAxepHKWhfVpj0v Z4TyKXVFOATAKM1baY7gPKA1kD5nVl0tjfVDDaJTRg/SBl1kdmRmojworwi52vFT phBMNcvXr2MAp6KSf+Ino1N1IHdINfi17F8= -----END CERTIFICATE-----Generated at Thu Aug 7 04:43:54 2025 by rpki-client