$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fdaeb72-13ba-3bf6-b915-c1b0128c4e0d.roa File: 4fdaeb72-13ba-3bf6-b915-c1b0128c4e0d.roa (raw, json) Hash identifier: 2bQejn5OtSCW+SbeYkANt7yhH+Mk6mthXkQPKYhtGgo= Subject key identifier: 3E:E9:11:73:A8:13:08:9E:3F:CA:8E:F7:60:20:0A:0F:98:3E:81:1A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63A4F8E5DB305B03B0C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fdaeb72-13ba-3bf6-b915-c1b0128c4e0d.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396581 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3a:4f:8e:5d:b3:05:b0:3b:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=96a82957-30d7-4bb7-aa54-a817f438cc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:9d:34:e2:1a:92:88:a1:26:1f:ef:d5:3d: 50:ef:c8:02:de:90:cf:e6:3e:21:62:6b:ed:ce:ec: 3c:dd:28:1f:62:6a:cb:8e:85:5d:42:66:d8:d3:ca: 07:25:17:ec:82:96:c9:b3:b6:81:e4:c0:7c:84:d1: ce:73:5a:2e:0a:96:e8:74:5b:f0:99:51:ae:ef:23: 7f:74:47:48:5b:f2:34:bb:e7:5d:2c:e7:5a:1c:00: 2a:2c:94:9c:08:ad:0f:62:ee:cc:f3:3e:fb:7a:73: 49:a0:83:8f:df:91:ca:a3:3e:f6:ac:d7:39:b5:39: d1:33:81:32:b4:3f:e5:af:a9:e7:73:34:ee:9e:81: 21:ea:b0:63:b0:37:d9:19:28:de:a0:be:27:d6:c9: 4e:92:fd:00:ef:d2:34:a1:81:13:89:04:06:25:73: cf:e8:54:e3:88:88:6e:05:89:07:00:ed:9e:97:5c: f0:67:27:e5:89:c9:f2:15:b4:4c:5d:2e:4f:8d:6e: 56:df:25:96:1b:52:31:9e:85:ae:e0:2f:c1:4e:6e: 55:75:c1:13:4c:15:14:91:0c:05:01:9b:59:5b:94: 71:bc:c0:97:fd:73:86:7c:9c:81:3a:a9:ca:3d:5c: af:dc:70:aa:34:11:f3:a6:02:56:42:6e:85:6a:b6: 82:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:11:73:A8:13:08:9E:3F:CA:8E:F7:60:20:0A:0F:98:3E:81:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fdaeb72-13ba-3bf6-b915-c1b0128c4e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2c:21:5e:0c:60:f6:08:39:d6:3b:8e:6b:02:a9:7b:80:3c: ff:84:be:04:c5:d5:74:01:02:3c:29:30:00:aa:58:35:6c:18: c8:0c:36:81:27:70:b8:89:f5:43:f4:92:a4:74:26:1f:35:49: a0:86:de:4c:75:63:f4:d3:51:57:16:a2:3c:8e:2f:a6:fa:07: c5:30:45:a4:62:55:92:b5:e3:a1:93:21:53:d9:4f:41:88:66: bd:c4:61:fd:22:b1:de:94:92:60:1d:0c:8e:eb:b8:36:32:df: f7:da:6a:9b:ba:af:29:3d:24:ad:a0:53:03:14:8b:3c:4e:97: d1:0c:f2:80:56:6f:a5:5d:67:6a:1c:ad:a1:96:31:0c:ac:2b: fb:40:48:fc:4f:d7:2d:a4:91:2d:33:bd:5e:59:d1:5d:e5:f9: f5:31:3d:52:21:7b:7e:b0:2e:51:81:89:6a:7b:89:71:57:d4: 50:72:c4:3c:41:6b:97:f9:83:07:cd:79:bf:a9:28:87:4c:3a: 8e:0c:40:fb:06:06:cb:89:03:e9:69:8f:27:f9:84:36:3b:7f: bc:86:5a:18:a3:e0:cb:db:df:b6:56:04:69:58:1a:24:7a:85: cb:7d:79:08:4f:ae:7a:44:16:2b:43:a2:27:07:66:1e:b7:fb: b1:1e:d5:0a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jpPjl2zBbA7DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk OTZhODI5NTctMzBkNy00YmI3LWFhNTQtYTgxN2Y0MzhjYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygOdNOIakoihJh/v1T1Q78gC3pDP5j4hYmvt zuw83SgfYmrLjoVdQmbY08oHJRfsgpbJs7aB5MB8hNHOc1ouCpbodFvwmVGu7yN/ dEdIW/I0u+ddLOdaHAAqLJScCK0PYu7M8z77enNJoIOP35HKoz72rNc5tTnRM4Ey tD/lr6nnczTunoEh6rBjsDfZGSjeoL4n1slOkv0A79I0oYETiQQGJXPP6FTjiIhu BYkHAO2el1zwZyflicnyFbRMXS5PjW5W3yWWG1IxnoWu4C/BTm5VdcETTBUUkQwF AZtZW5RxvMCX/XOGfJyBOqnKPVyv3HCqNBHzpgJWQm6FaraCnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD7pEXOoEwieP8qO92AgCg+YPoEaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGZkYWViNzItMTNiYS0z YmY2LWI5MTUtYzFiMDEyOGM0ZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKIsIV4MYPYIOdY7jmsCqXuAPP+EvgTF1XQBAjwpMACqWDVsGMgM NoEncLiJ9UP0kqR0Jh81SaCG3kx1Y/TTUVcWojyOL6b6B8UwRaRiVZK146GTIVPZ T0GIZr3EYf0isd6UkmAdDI7ruDYy3/faapu6ryk9JK2gUwMUizxOl9EM8oBWb6Vd Z2ocraGWMQysK/tASPxP1y2kkS0zvV5Z0V3l+fUxPVIhe36wLlGBiWp7iXFX1FBy xDxBa5f5gwfNeb+pKIdMOo4MQPsGBsuJA+lpjyf5hDY7f7yGWhij4Mvb37ZWBGlY GiR6hct9eQhPrnpEFitDoicHZh63+7Ee1Qo= -----END CERTIFICATE-----Generated at Wed Aug 6 12:37:30 2025 by rpki-client