$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa0ba1-f185-3261-8724-dffe10a9803c.roa File: 80aa0ba1-f185-3261-8724-dffe10a9803c.roa (raw, json) Hash identifier: w5V+UwnH9FzhImSLJw9TA6bO9QpCS5oG/f92V5ahrYs= Subject key identifier: 34:C7:D0:A5:5E:05:A6:A3:21:16:62:E4:15:E1:BD:C2:E4:C0:0A:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63E04357F52705EFDA8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa0ba1-f185-3261-8724-dffe10a9803c.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396550 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3e:04:35:7f:52:70:5e:fd:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=1cf5703c-2e06-427a-bc62-752c8e7deb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:db:50:60:36:3a:d7:4b:9b:bb:46:c9:95: c5:39:55:8d:7e:62:84:ac:db:38:61:f5:e6:5b:a9: 24:b7:58:a7:94:3f:6c:b4:32:5f:da:bb:f5:d7:bd: 4a:37:3a:f0:45:9f:1e:3f:7e:cd:04:a8:7e:b1:29: 26:a0:6a:3d:96:e8:85:c9:b6:cd:3f:88:25:14:90: 49:cb:ed:f3:0d:59:b3:44:0b:bc:86:bb:16:24:1a: c2:01:e3:fc:b0:85:a8:d2:46:69:63:82:65:d7:16: 75:6b:a9:20:c9:5c:f9:37:79:86:44:41:22:79:7f: c9:f4:3e:97:28:25:78:8f:37:63:58:46:1c:21:d7: 79:62:bd:da:6e:34:da:5b:4d:1f:3b:c5:cc:74:71: 43:24:b1:a4:02:f9:1f:f8:94:9d:97:2f:f6:31:06: 75:82:89:cf:63:48:e1:68:c6:9f:f6:20:4d:0d:02: 65:f8:c2:97:02:6a:c9:7a:ab:71:c9:c4:d6:31:bb: e5:1f:91:6b:71:69:63:e8:33:2a:fd:b7:a5:5e:d8: c6:6e:5b:fe:e1:a2:5b:61:a8:7f:75:9e:ef:04:35: c0:53:d6:3b:ee:5a:90:bf:95:85:7d:b9:27:8f:9a: c9:b3:cd:ec:69:1d:13:3f:22:e7:0e:85:65:8b:f5: 91:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C7:D0:A5:5E:05:A6:A3:21:16:62:E4:15:E1:BD:C2:E4:C0:0A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80aa0ba1-f185-3261-8724-dffe10a9803c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:09:ff:e3:a4:a4:96:bc:74:a6:8f:54:82:b3:b6:27:f6:0f: a9:01:2d:52:df:95:9a:a9:0c:48:54:40:7b:e6:3a:5b:bc:d7: a0:21:e6:72:6f:9f:8e:3d:16:21:61:0f:ef:73:ba:24:fb:97: 80:51:c9:6b:1a:23:53:20:47:f4:d2:f8:29:ed:ee:75:a4:9c: 71:d5:8d:f8:64:70:bd:74:02:93:90:42:44:42:16:c9:b8:01: 3f:09:86:8a:0c:77:f6:51:29:63:97:64:cf:66:ce:e3:00:e4: 10:87:79:35:96:f8:d3:85:13:97:c7:68:23:c4:c2:e2:ba:99: e2:e9:f3:37:8d:26:d3:2a:d0:dd:4c:cb:1c:4f:a6:95:84:ac: 2d:20:15:4d:7e:2b:08:19:26:68:0c:44:a9:d7:ad:3e:a1:53: 40:cb:ad:d9:3e:ff:c1:9b:0d:89:6b:b9:43:de:90:94:04:13: f9:0d:37:a8:b1:71:f5:bc:a6:16:91:8b:92:2c:a4:d7:bc:23: b2:1b:9c:48:1d:7c:62:d9:65:3d:ed:d2:bc:1c:7a:fc:b0:03: 0f:0f:b4:5f:fb:dd:d1:06:f9:b5:e8:e3:ba:0f:70:92:db:3f: f6:26:8f:be:5e:f2:03:10:5b:d8:65:88:62:1a:c6:78:f9:d9: f5:c9:40:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75j4ENX9ScF79qMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MWNmNTcwM2MtMmUwNi00MjdhLWJjNjItNzUyYzhlN2RlYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg77bUGA2OtdLm7tGyZXFOVWNfmKErNs4YfXm W6kkt1inlD9stDJf2rv1171KNzrwRZ8eP37NBKh+sSkmoGo9luiFybbNP4glFJBJ y+3zDVmzRAu8hrsWJBrCAeP8sIWo0kZpY4Jl1xZ1a6kgyVz5N3mGREEieX/J9D6X KCV4jzdjWEYcIdd5Yr3abjTaW00fO8XMdHFDJLGkAvkf+JSdly/2MQZ1gonPY0jh aMaf9iBNDQJl+MKXAmrJeqtxycTWMbvlH5FrcWlj6DMq/belXtjGblv+4aJbYah/ dZ7vBDXAU9Y77lqQv5WFfbknj5rJs83saR0TPyLnDoVli/WRAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDTH0KVeBaajIRZi5BXhvcLkwAojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODBhYTBiYTEtZjE4NS0z MjYxLTg3MjQtZGZmZTEwYTk4MDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACUJ/+OkpJa8dKaPVIKztif2D6kBLVLflZqpDEhUQHvmOlu816Ah 5nJvn449FiFhD+9zuiT7l4BRyWsaI1MgR/TS+Cnt7nWknHHVjfhkcL10ApOQQkRC Fsm4AT8JhooMd/ZRKWOXZM9mzuMA5BCHeTWW+NOFE5fHaCPEwuK6meLp8zeNJtMq 0N1MyxxPppWErC0gFU1+KwgZJmgMRKnXrT6hU0DLrdk+/8GbDYlruUPekJQEE/kN N6ixcfW8phaRi5IspNe8I7IbnEgdfGLZZT3t0rwcevywAw8PtF/73dEG+bXo47oP cJLbP/Ymj75e8gMQW9hliGIaxnj52fXJQPw= -----END CERTIFICATE-----Generated at Wed Aug 6 09:39:04 2025 by rpki-client