$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52c6f7f1-7542-3e09-80fa-886395e34633.roa File: 52c6f7f1-7542-3e09-80fa-886395e34633.roa (raw, json) Hash identifier: YZ0TI/KQisdPfscMadzgXD/GSEcrnVBhqLyJO29veWo= Subject key identifier: DD:D7:24:2E:75:22:7E:44:59:08:A8:58:03:2F:46:E6:04:B4:05:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63DCCF19064D58F4F9E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52c6f7f1-7542-3e09-80fa-886395e34633.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396609 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3d:cc:f1:90:64:d5:8f:4f:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=d706d50c-1e8b-401b-97a7-b318b738672e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:a5:d3:6f:b9:89:c9:af:bd:6a:14:2a:3d: f2:21:a2:5d:4f:8d:15:02:47:51:ec:8f:a3:27:1d: 12:e4:b0:58:c9:a8:fa:0b:cc:ca:54:a7:f0:d2:0f: ea:2c:d2:27:b5:05:db:95:49:b5:d2:b1:2c:a4:84: 4f:fa:06:78:b2:be:af:37:d5:e0:dc:92:4f:f7:14: 3d:28:3e:ec:86:cd:52:f0:04:1f:37:6b:74:e7:b2: f0:31:9e:12:2e:d8:b3:a8:23:ed:df:10:5c:d0:c0: 50:34:38:67:c7:50:d4:06:8b:bc:ad:53:03:5c:5e: f3:f5:14:15:bc:20:9f:de:e4:7a:78:52:cf:e7:98: d1:7f:7a:71:38:05:d2:24:60:50:d5:d6:78:e2:03: 61:2b:a7:12:a3:74:fc:b8:c5:fb:c2:e7:dd:c3:ea: f1:e8:32:a1:75:c2:6c:ca:09:fa:e5:df:57:19:08: 77:a7:fc:91:b4:c2:c2:1f:80:52:bf:75:1b:19:ba: 7b:a2:2e:94:24:03:7d:dd:00:ec:4e:b4:d0:f9:4d: e4:ca:54:e0:78:b9:5e:a8:23:82:3e:bd:58:60:d1: a9:2d:5e:93:ee:dc:30:6d:97:60:c1:9f:7b:7f:6f: 18:52:4c:b4:ce:8e:e1:63:29:7e:c7:e1:8d:2c:65: eb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D7:24:2E:75:22:7E:44:59:08:A8:58:03:2F:46:E6:04:B4:05:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52c6f7f1-7542-3e09-80fa-886395e34633.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:ec:59:8d:80:e3:ac:f3:f3:b0:c2:7f:6f:38:d9:09:56:cf: 97:66:0a:a4:40:32:41:26:52:8d:74:c4:0a:18:4f:7f:c2:f1: 50:1a:28:f4:6a:63:09:51:d3:bd:61:b5:98:05:4f:e4:43:c0: 81:70:d6:8a:e9:c8:92:27:66:4c:f2:53:d2:5f:71:ed:ed:68: 21:c4:72:62:f6:f2:d1:7f:37:d2:5b:58:0c:1d:1c:5a:5c:38: da:2d:95:24:0d:6b:c3:94:de:13:3f:5f:79:b5:89:1c:22:2e: ba:24:1e:e0:56:9a:33:5e:22:7c:30:cb:3c:dc:75:64:b4:98: 34:4b:7d:af:3d:c0:24:88:1c:39:93:e4:88:68:27:68:43:08: 1c:68:4a:0d:da:73:cc:f0:58:a4:dd:d1:74:a6:e4:c8:f8:89: cc:c9:d3:8e:52:23:f7:16:37:2d:45:b4:12:52:69:d5:e7:15: ca:73:c7:0a:2e:96:fc:57:a8:72:d2:82:05:36:75:c6:81:40: 76:81:37:2f:e3:6b:d5:d4:cc:bf:1d:34:d3:f8:fc:7f:a5:2f: cc:b7:75:7d:c6:f6:7a:2c:84:3b:0c:c1:5d:6a:ba:ef:e4:41: 2c:c0:5d:aa:73:21:76:ee:78:df:d8:fe:a0:a6:90:29:dc:25: 0e:8c:bf:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75j3M8ZBk1Y9PnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDcwNmQ1MGMtMWU4Yi00MDFiLTk3YTctYjMxOGI3Mzg2NzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAWl02+5icmvvWoUKj3yIaJdT40VAkdR7I+j Jx0S5LBYyaj6C8zKVKfw0g/qLNIntQXblUm10rEspIRP+gZ4sr6vN9Xg3JJP9xQ9 KD7shs1S8AQfN2t057LwMZ4SLtizqCPt3xBc0MBQNDhnx1DUBou8rVMDXF7z9RQV vCCf3uR6eFLP55jRf3pxOAXSJGBQ1dZ44gNhK6cSo3T8uMX7wufdw+rx6DKhdcJs ygn65d9XGQh3p/yRtMLCH4BSv3UbGbp7oi6UJAN93QDsTrTQ+U3kylTgeLleqCOC Pr1YYNGpLV6T7twwbZdgwZ97f28YUky0zo7hYyl+x+GNLGXrfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN3XJC51In5EWQioWAMvRuYEtAUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTJjNmY3ZjEtNzU0Mi0z ZTA5LTgwZmEtODg2Mzk1ZTM0NjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXsWY2A46zz87DCf2842QlWz5dmCqRAMkEmUo10xAoYT3/C8VAa KPRqYwlR071htZgFT+RDwIFw1orpyJInZkzyU9Jfce3taCHEcmL28tF/N9JbWAwd HFpcONotlSQNa8OU3hM/X3m1iRwiLrokHuBWmjNeInwwyzzcdWS0mDRLfa89wCSI HDmT5IhoJ2hDCBxoSg3ac8zwWKTd0XSm5Mj4iczJ045SI/cWNy1FtBJSadXnFcpz xwoulvxXqHLSggU2dcaBQHaBNy/ja9XUzL8dNNP4/H+lL8y3dX3G9noshDsMwV1q uu/kQSzAXapzIXbueN/Y/qCmkCncJQ6Mv9o= -----END CERTIFICATE-----Generated at Thu Aug 7 02:08:28 2025 by rpki-client