$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64574f02-84c1-3da9-821a-a8f700aa7fe6.roa File: 64574f02-84c1-3da9-821a-a8f700aa7fe6.roa (raw, json) Hash identifier: 78JVNAsKgC8cbWfVb/ypY6u2ZSSx7pnwccVi2e6sh3s= Subject key identifier: 07:BD:D4:B9:E3:27:C2:86:9A:F1:A6:A5:1D:CF:A7:C8:76:1D:F7:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62A9B42284BCBF551BE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64574f02-84c1-3da9-821a-a8f700aa7fe6.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396573 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2a:9b:42:28:4b:cb:f5:51:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=5f76ccd0-1fac-4b04-87ce-510c75dd2e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:e1:a7:de:ab:d3:13:ad:65:ad:fe:c6:97: d5:3a:07:d0:71:5f:57:2f:77:b4:89:ab:15:69:97: 56:f5:a4:8c:4a:e7:c0:30:d5:db:68:8b:25:77:7c: b3:40:79:b8:7c:a9:4b:42:4e:3e:7b:53:61:ac:9c: bf:11:a0:71:a3:b3:ef:d3:7b:18:90:4f:41:84:f2: cd:a9:b8:74:3f:0a:1e:21:88:54:22:2f:a8:b4:78: 36:b0:54:b5:8a:ab:d4:b6:71:13:f1:a5:d9:d6:65: 28:d2:81:10:0a:07:de:60:79:a6:ab:e5:e2:3f:2d: ab:3d:09:bf:39:14:7d:47:73:4a:5d:06:74:ea:c1: 39:f4:0e:26:96:6e:51:27:85:d4:13:29:25:55:7a: 2c:d3:0d:92:ac:d0:b3:f9:90:93:42:67:62:86:7f: e5:41:53:5b:2b:48:fe:54:c1:f6:35:2d:11:0c:2a: 13:9e:fa:20:6f:9b:75:72:ae:3c:36:bc:7f:72:30: 98:30:f3:28:55:a2:de:f3:01:f9:a3:bf:5d:79:25: 59:6c:eb:2a:4b:d5:83:52:18:0c:5e:94:0d:0a:78: f7:b3:30:62:8d:9e:9f:c0:f5:13:22:7d:7a:1f:91: 71:78:98:4f:ed:d3:ef:07:7d:82:9b:83:0d:ca:18: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:D4:B9:E3:27:C2:86:9A:F1:A6:A5:1D:CF:A7:C8:76:1D:F7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64574f02-84c1-3da9-821a-a8f700aa7fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7f:75:c1:bb:a0:99:5e:d4:51:84:19:c0:9b:82:ce:69:14: 3a:14:fb:fb:98:3a:12:66:86:18:62:b2:50:87:e4:0e:1c:d2: 5c:eb:4a:47:e5:47:05:e8:9f:7a:20:6e:5f:d4:8f:87:09:dc: ad:74:73:72:d7:be:58:a8:ff:5a:80:0d:0f:b8:b5:0c:1d:b0: 2c:1d:d5:53:e1:5e:18:b6:97:67:13:94:36:b0:4c:c6:61:49: 6b:7d:2e:bc:83:49:3b:ac:77:54:18:a5:f2:d2:dd:e7:b8:6f: 2d:ce:e6:ee:93:cc:61:64:47:97:db:37:96:fe:cd:4e:28:d3: af:db:4e:85:c9:4f:d1:77:f8:c9:1c:a1:7b:d7:fa:4b:c4:c2: 86:19:3c:7f:63:f8:09:78:3c:e4:ed:fe:80:a4:01:ca:56:6a: b6:09:b1:d2:cf:68:91:9f:f5:8a:6c:ec:13:1e:c6:de:60:ee: 47:7f:72:a7:3f:fb:17:76:1f:cd:93:6b:01:42:fe:38:ae:d8: 78:4a:6a:43:e2:4e:58:2d:49:19:60:13:26:7e:2f:38:ea:b8: 59:39:26:13:46:a1:d6:0a:9f:bd:b5:62:84:c1:5a:9d:37:f1: a1:54:ea:05:59:7c:1a:e5:a6:cc:2b:4e:45:65:aa:69:73:95: 6a:1a:28:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiqbQihLy/VRvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NWY3NmNjZDAtMWZhYy00YjA0LTg3Y2UtNTEwYzc1ZGQyZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls3hp96r0xOtZa3+xpfVOgfQcV9XL3e0iasV aZdW9aSMSufAMNXbaIsld3yzQHm4fKlLQk4+e1NhrJy/EaBxo7Pv03sYkE9BhPLN qbh0PwoeIYhUIi+otHg2sFS1iqvUtnET8aXZ1mUo0oEQCgfeYHmmq+XiPy2rPQm/ ORR9R3NKXQZ06sE59A4mlm5RJ4XUEyklVXos0w2SrNCz+ZCTQmdihn/lQVNbK0j+ VMH2NS0RDCoTnvogb5t1cq48Nrx/cjCYMPMoVaLe8wH5o79deSVZbOsqS9WDUhgM XpQNCnj3szBijZ6fwPUTIn16H5FxeJhP7dPvB32Cm4MNyhgtKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAe91LnjJ8KGmvGmpR3Pp8h2HffzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ1NzRmMDItODRjMS0z ZGE5LTgyMWEtYThmNzAwYWE3ZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACx/dcG7oJle1FGEGcCbgs5pFDoU+/uYOhJmhhhislCH5A4c0lzr SkflRwXon3ogbl/Uj4cJ3K10c3LXvlio/1qADQ+4tQwdsCwd1VPhXhi2l2cTlDaw TMZhSWt9LryDSTusd1QYpfLS3ee4by3O5u6TzGFkR5fbN5b+zU4o06/bToXJT9F3 +MkcoXvX+kvEwoYZPH9j+Al4POTt/oCkAcpWarYJsdLPaJGf9Yps7BMext5g7kd/ cqc/+xd2H82TawFC/jiu2HhKakPiTlgtSRlgEyZ+LzjquFk5JhNGodYKn721YoTB Wp038aFU6gVZfBrlpswrTkVlqmlzlWoaKPg= -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:00 2025 by rpki-client