$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/452e80e9-6ab1-3fba-97f2-22c2d0f4a57b.roa File: 452e80e9-6ab1-3fba-97f2-22c2d0f4a57b.roa (raw, json) Hash identifier: KXhRlMx1FU+cCWUq+PY/nW5jKh3Jtsic2XAP7i0oLC8= Subject key identifier: 22:BE:8B:BB:9E:C8:1F:2B:3D:1B:5B:1B:01:20:63:59:3E:1A:4E:E3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B629EB9E381F6832F1B780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/452e80e9-6ab1-3fba-97f2-22c2d0f4a57b.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396611 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:29:eb:9e:38:1f:68:32:f1:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=f911e2f2-125f-4bcf-a573-56156a2a4bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:15:57:75:cd:49:63:26:89:19:e0:02:96:1d: ce:74:08:22:65:b6:36:9c:76:24:6b:32:23:11:12: 47:59:e1:f3:77:cd:6a:9e:57:23:82:e7:27:3a:4a: 0b:06:e8:0a:ce:2d:86:25:57:c0:23:9f:07:e1:13: b8:b5:81:3a:81:43:2d:93:03:ab:ab:5d:28:44:df: be:aa:8b:07:75:83:67:9a:67:e9:51:5a:0e:59:eb: 00:8d:e9:23:24:f0:ff:a1:1e:12:5d:50:89:80:98: e3:b7:6a:03:85:83:b7:56:86:0d:fe:cb:83:53:a3: ae:8e:a4:c0:b2:7c:02:68:75:cc:93:d4:b9:bd:cb: 10:56:ae:96:fc:30:76:03:85:3e:08:7a:5c:d3:d8: 27:60:31:27:03:14:0b:7c:79:ea:50:a9:51:3b:d2: 1a:a0:7d:cb:87:84:4e:1b:2f:68:a0:a6:dc:39:fb: 17:7d:b4:ee:46:da:27:4f:6e:e8:d0:33:83:c3:65: 6c:82:2b:10:56:b5:e4:a3:8e:06:df:92:37:e7:28: 73:e3:b4:4e:60:5f:ad:e6:5c:40:d5:4a:90:1d:48: 18:65:79:57:b3:5e:94:51:5a:d8:5d:29:57:28:5c: d5:d3:bc:7a:5c:d6:6c:0a:b4:25:aa:8d:e0:31:31: 65:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BE:8B:BB:9E:C8:1F:2B:3D:1B:5B:1B:01:20:63:59:3E:1A:4E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/452e80e9-6ab1-3fba-97f2-22c2d0f4a57b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:7f:35:25:f8:64:ef:1f:5f:0a:6c:df:07:29:00:13:c9:f4: ac:26:0e:27:58:15:33:a8:c4:2b:0e:27:bc:8b:23:2c:15:39: a4:58:a9:09:ae:6d:8a:a3:d6:38:f1:6f:a1:12:0a:a9:ba:53: 20:ec:5f:4e:c3:f2:59:62:c3:03:fd:be:b2:cb:73:4f:47:7b: 39:41:cb:7a:6c:c4:08:6b:dd:37:0d:12:7a:ac:7d:6d:ec:99: 4c:bd:00:1b:04:3a:f3:23:f1:19:14:ca:d0:ef:fd:89:6e:c4: 4d:f8:e6:45:97:50:de:3a:e9:90:90:74:f3:a5:e4:6d:24:08: e5:9f:de:56:67:00:59:e8:6d:88:88:0a:0a:67:b2:7e:fa:70: 29:18:eb:9b:3f:4a:c8:59:57:82:2e:bc:e4:0b:fa:28:b2:00: fa:22:d9:c7:54:cd:d0:97:ea:49:ed:6b:bf:26:46:c3:7a:cb: e1:7c:db:05:6c:bb:97:f7:bc:6e:61:97:40:5b:a0:9c:58:e5: 3a:59:8b:e5:c1:96:5d:a7:3d:e8:a3:34:87:fa:da:ba:0d:4a: cd:14:4a:a1:85:a8:eb:0e:a6:d0:0f:cd:65:79:7c:69:ff:8a: a0:54:ef:cb:08:d3:96:cf:ba:ed:77:9a:85:a5:39:18:01:2c: 94:66:9b:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tinrnjgfaDLxt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjkxMWUyZjItMTI1Zi00YmNmLWE1NzMtNTYxNTZhMmE0YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhVXdc1JYyaJGeAClh3OdAgiZbY2nHYkazIj ERJHWeHzd81qnlcjgucnOkoLBugKzi2GJVfAI58H4RO4tYE6gUMtkwOrq10oRN++ qosHdYNnmmfpUVoOWesAjekjJPD/oR4SXVCJgJjjt2oDhYO3VoYN/suDU6OujqTA snwCaHXMk9S5vcsQVq6W/DB2A4U+CHpc09gnYDEnAxQLfHnqUKlRO9IaoH3Lh4RO Gy9ooKbcOfsXfbTuRtonT27o0DODw2VsgisQVrXko44G35I35yhz47ROYF+t5lxA 1UqQHUgYZXlXs16UUVrYXSlXKFzV07x6XNZsCrQlqo3gMTFlwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCK+i7ueyB8rPRtbGwEgY1k+Gk7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDUyZTgwZTktNmFiMS0z ZmJhLTk3ZjItMjJjMmQwZjRhNTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK5/NSX4ZO8fXwps3wcpABPJ9KwmDidYFTOoxCsOJ7yLIywVOaRY qQmubYqj1jjxb6ESCqm6UyDsX07D8lliwwP9vrLLc09HezlBy3psxAhr3TcNEnqs fW3smUy9ABsEOvMj8RkUytDv/YluxE345kWXUN466ZCQdPOl5G0kCOWf3lZnAFno bYiICgpnsn76cCkY65s/SshZV4IuvOQL+iiyAPoi2cdUzdCX6knta78mRsN6y+F8 2wVsu5f3vG5hl0BboJxY5TpZi+XBll2nPeijNIf62roNSs0USqGFqOsOptAPzWV5 fGn/iqBU78sI05bPuu13moWlORgBLJRmm3g= -----END CERTIFICATE-----Generated at Mon Aug 4 22:25:44 2025 by rpki-client