$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48343987-2ea4-3f49-afd5-67540b320866.roa File: 48343987-2ea4-3f49-afd5-67540b320866.roa (raw, json) Hash identifier: ElnwqlnYW0Ho9PYEWY9CMCv8h5S6D7PrN5Pjof+pa2o= Subject key identifier: B2:36:EC:13:BB:87:FE:06:E8:93:19:7B:4C:C2:BE:25:E2:91:A8:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63BBCEEDDF481E7850F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48343987-2ea4-3f49-afd5-67540b320866.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 397196 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3b:bc:ee:dd:f4:81:e7:85:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=7ebfb950-dd80-4e56-a8f1-804a97fb58cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:67:0b:99:db:8e:86:db:93:3d:c1:db:fb:a0: 2f:a2:ac:66:6f:8d:e8:0c:3b:4b:46:a0:88:d3:d1: 5d:c5:6e:b7:1e:10:61:46:ec:bc:bc:c5:56:e7:ff: e6:81:92:08:7d:5e:0a:87:96:c2:f1:dc:b6:78:a9: b1:c3:84:ab:82:84:a0:07:e2:84:99:70:39:74:05: 0a:b2:0e:0c:b9:e0:36:fa:b6:b2:d4:fa:dd:7b:ac: db:f4:e4:32:53:1c:d3:4b:de:59:c3:94:1c:6c:b2: 77:bd:93:0c:6d:63:28:68:dd:61:52:21:93:86:4e: 84:e6:6d:54:c7:8b:26:d2:d0:7a:34:32:d7:af:09: 8a:b0:bf:8b:90:93:34:fc:c7:05:f0:40:fc:6b:b3: ee:56:08:59:af:a1:ce:53:a6:02:6e:3c:5a:c2:48: 73:a9:de:86:a2:f7:d7:3e:1c:dc:8c:05:bd:fe:fe: 51:d4:8a:85:0a:2a:d4:e5:e4:59:91:61:cf:25:cb: ef:08:a8:2d:c5:57:84:05:5e:51:ca:ce:27:72:9a: 80:b6:e5:98:20:f0:4c:2e:09:b0:5e:a6:a9:49:ca: 1e:b4:b4:3e:f6:73:93:d3:12:f4:0c:15:ac:b6:7c: b8:cb:67:d0:3e:39:a0:92:5a:db:cd:87:d9:2d:47: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:36:EC:13:BB:87:FE:06:E8:93:19:7B:4C:C2:BE:25:E2:91:A8:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48343987-2ea4-3f49-afd5-67540b320866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:1b:4a:4d:55:7b:98:db:4c:02:4d:f3:0b:f6:a0:4b:c9:53: 63:f6:d1:c2:ed:3e:bc:33:9f:eb:49:5c:66:71:8b:fd:e6:a0: 81:23:61:be:36:29:d0:e1:68:e9:e5:91:b3:51:b5:1c:19:06: 35:a3:5f:76:a1:86:47:d9:e8:7f:9a:81:b1:b9:e2:cb:07:70: ca:41:09:ec:57:d1:6f:d6:e2:99:2e:28:74:ac:0a:36:b0:9b: 94:96:0c:f7:5e:c1:ec:4e:32:41:f2:f5:b2:12:23:01:93:67: e1:41:33:5e:de:8e:1e:e4:b7:4b:63:fd:64:c8:95:ed:0d:30: 44:48:a2:41:58:28:9e:73:24:91:cc:de:43:b6:44:db:d7:5e: db:0e:ea:93:b5:1a:77:18:40:c1:81:54:e9:00:a5:11:76:10: 58:3b:62:fe:a7:3a:b7:6a:61:31:39:a9:ae:a4:07:ee:84:86: 09:39:ea:02:c9:02:a2:2e:a0:b1:fe:27:76:89:a2:ba:39:fe: 29:b1:41:49:b4:67:e5:25:2d:e1:59:e3:f0:45:d2:0c:32:76: 04:ab:2f:70:65:00:b5:fd:3b:31:f6:c4:57:5f:74:fd:8c:60: e2:e6:0b:69:01:93:12:58:b5:ef:29:c6:30:40:10:b9:cb:be: 4a:f3:36:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75ju87t30geeFD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk N2ViZmI5NTAtZGQ4MC00ZTU2LWE4ZjEtODA0YTk3ZmI1OGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmcLmduOhtuTPcHb+6Avoqxmb43oDDtLRqCI 09FdxW63HhBhRuy8vMVW5//mgZIIfV4Kh5bC8dy2eKmxw4SrgoSgB+KEmXA5dAUK sg4MueA2+ray1Prde6zb9OQyUxzTS95Zw5QcbLJ3vZMMbWMoaN1hUiGThk6E5m1U x4sm0tB6NDLXrwmKsL+LkJM0/McF8ED8a7PuVghZr6HOU6YCbjxawkhzqd6GovfX PhzcjAW9/v5R1IqFCirU5eRZkWHPJcvvCKgtxVeEBV5Rys4ncpqAtuWYIPBMLgmw XqapScoetLQ+9nOT0xL0DBWstny4y2fQPjmgklrbzYfZLUf3TQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLI27BO7h/4G6JMZe0zCviXikajwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDgzNDM5ODctMmVhNC0z ZjQ5LWFmZDUtNjc1NDBiMzIwODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGIbSk1Ve5jbTAJN8wv2oEvJU2P20cLtPrwzn+tJXGZxi/3moIEj Yb42KdDhaOnlkbNRtRwZBjWjX3ahhkfZ6H+agbG54ssHcMpBCexX0W/W4pkuKHSs Cjawm5SWDPdewexOMkHy9bISIwGTZ+FBM17ejh7kt0tj/WTIle0NMERIokFYKJ5z JJHM3kO2RNvXXtsO6pO1GncYQMGBVOkApRF2EFg7Yv6nOrdqYTE5qa6kB+6Ehgk5 6gLJAqIuoLH+J3aJoro5/imxQUm0Z+UlLeFZ4/BF0gwydgSrL3BlALX9OzH2xFdf dP2MYOLmC2kBkxJYte8pxjBAELnLvkrzNg0= -----END CERTIFICATE-----Generated at Fri Aug 8 19:36:57 2025 by rpki-client