$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fc042d1-61af-34ef-8fb7-9167b98a1f66.roa File: 4fc042d1-61af-34ef-8fb7-9167b98a1f66.roa (raw, json) Hash identifier: MAM1HgTJyYrdRlY/EvzcXf0f8hoNDU+SXSwHwTLY8EE= Subject key identifier: 38:82:D1:F8:4C:ED:C3:FD:51:E0:37:A5:05:F9:FF:FD:3F:29:02:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B6285EC65F357C4044CF40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fc042d1-61af-34ef-8fb7-9167b98a1f66.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 397204 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:28:5e:c6:5f:35:7c:40:44:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=af273bae-01c0-4068-9969-324d7f040bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:02:65:24:7c:0f:5d:23:15:dd:e1:62:29:e2: 8b:09:e9:f2:2c:03:7c:c9:8b:e2:18:9b:0b:81:49: a4:88:8c:3a:76:38:3f:1b:24:20:a2:2d:b2:04:d3: 0f:ba:b1:e9:88:db:c5:e7:24:5c:28:4e:0d:29:55: cb:d5:f1:8f:71:36:e6:e2:80:c7:7f:21:87:65:87: b8:0b:ce:d8:7a:9e:08:ec:a1:f4:62:87:52:b2:dc: 64:54:9b:fd:e0:c7:40:16:dd:88:47:51:93:66:e3: f3:f5:50:43:58:e5:b5:e4:71:3a:0a:61:c6:52:a9: 5a:69:47:54:2f:fb:a0:80:76:90:e1:2f:aa:8e:09: f4:93:f6:b9:9c:3c:af:91:0d:d0:dc:a5:fe:9b:ad: ee:f7:e4:ef:3d:da:38:df:c2:96:e3:62:00:76:c9: fd:2a:51:e1:d4:94:d7:b8:7b:97:93:63:6f:6b:26: cb:33:be:f4:8d:0a:ba:0a:b2:95:04:03:78:59:64: 3b:0e:ae:77:91:5c:ba:13:94:cb:80:ab:60:49:e8: 1c:0c:91:c8:60:71:de:33:5a:ab:65:bf:29:6b:a5: 27:b6:41:07:fd:6a:be:c1:fc:02:79:54:28:be:a2: 5e:27:2b:0d:6a:5a:a5:39:f3:6f:5c:05:bb:c1:9b: 6e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:82:D1:F8:4C:ED:C3:FD:51:E0:37:A5:05:F9:FF:FD:3F:29:02:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fc042d1-61af-34ef-8fb7-9167b98a1f66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:44:20:f7:94:0f:94:2b:08:3b:19:21:54:5a:ef:0c:27:4f: a3:ad:a1:03:3a:d0:85:db:19:d1:14:d1:a2:7e:04:cb:1c:c0: a6:7b:fa:46:5a:22:5c:c2:4d:d4:a1:88:ac:97:61:17:ce:f0: c4:a7:6e:0e:2e:97:1b:58:96:c5:b8:3f:4d:f1:77:59:54:37: 81:d2:44:f1:f1:19:da:99:95:d3:ac:a9:6f:5e:7b:7e:98:12: c2:dd:ce:c9:05:30:5f:b4:32:87:15:4e:5d:f7:4c:12:d7:12: 54:e3:aa:63:39:34:74:9d:fa:65:0e:eb:2d:be:02:d6:18:eb: ff:1c:f5:f1:0f:f9:cd:55:b1:3a:3e:ed:55:25:c2:8f:97:ce: 95:f5:c8:ea:bb:ba:b8:94:d3:96:3e:c9:72:f1:23:44:46:a7: 95:58:7f:ee:55:04:69:dc:42:c0:22:21:fc:8b:a4:0c:e9:f2: 7a:37:cb:43:fc:99:5a:01:e4:6a:08:61:db:8d:5f:27:78:6b: 66:8d:49:11:9e:31:aa:39:02:d2:1a:9a:ee:98:51:a9:b0:64: ad:4f:46:ae:2b:1a:dd:7b:a4:a8:b8:65:e0:82:16:ef:b3:77: a0:ba:78:05:84:c8:0e:b8:d0:7c:40:61:b1:d7:4b:46:1b:70: 5a:8c:a3:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tihexl81fEBEz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk YWYyNzNiYWUtMDFjMC00MDY4LTk5NjktMzI0ZDdmMDQwYmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgJlJHwPXSMV3eFiKeKLCenyLAN8yYviGJsL gUmkiIw6djg/GyQgoi2yBNMPurHpiNvF5yRcKE4NKVXL1fGPcTbm4oDHfyGHZYe4 C87Yep4I7KH0YodSstxkVJv94MdAFt2IR1GTZuPz9VBDWOW15HE6CmHGUqlaaUdU L/uggHaQ4S+qjgn0k/a5nDyvkQ3Q3KX+m63u9+TvPdo438KW42IAdsn9KlHh1JTX uHuXk2NvaybLM770jQq6CrKVBAN4WWQ7Dq53kVy6E5TLgKtgSegcDJHIYHHeM1qr Zb8pa6UntkEH/Wq+wfwCeVQovqJeJysNalqlOfNvXAW7wZtujQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDiC0fhM7cP9UeA3pQX5//0/KQIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGZjMDQyZDEtNjFhZi0z NGVmLThmYjctOTE2N2I5OGExZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABBEIPeUD5QrCDsZIVRa7wwnT6OtoQM60IXbGdEU0aJ+BMscwKZ7 +kZaIlzCTdShiKyXYRfO8MSnbg4ulxtYlsW4P03xd1lUN4HSRPHxGdqZldOsqW9e e36YEsLdzskFMF+0MocVTl33TBLXElTjqmM5NHSd+mUO6y2+AtYY6/8c9fEP+c1V sTo+7VUlwo+XzpX1yOq7uriU05Y+yXLxI0RGp5VYf+5VBGncQsAiIfyLpAzp8no3 y0P8mVoB5GoIYduNXyd4a2aNSRGeMao5AtIamu6YUamwZK1PRq4rGt17pKi4ZeCC Fu+zd6C6eAWEyA640HxAYbHXS0YbcFqMoyU= -----END CERTIFICATE-----Generated at Wed Aug 6 09:36:14 2025 by rpki-client