$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c2dc0e4-df18-35aa-8f8c-a4b81a232876.roa File: 8c2dc0e4-df18-35aa-8f8c-a4b81a232876.roa (raw, json) Hash identifier: Ahd3I3TFRVVA3Sa32gWXS7AEvfisdRSY24RjrbEM8jM= Subject key identifier: B3:C1:39:99:B6:30:48:4A:B6:58:CC:AC:AC:45:A4:19:97:A9:C2:24 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62A8841E26E1F97103D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c2dc0e4-df18-35aa-8f8c-a4b81a232876.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 40647 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2a:88:41:e2:6e:1f:97:10:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=f53ece93-42fa-48ea-928f-dfe47d0459dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:ac:bd:b2:cc:b2:6b:f5:74:6a:34:fd:49: f7:93:29:bc:58:f3:0e:ac:39:c8:01:70:95:2a:be: b4:89:f6:14:13:90:6e:af:27:42:c9:37:18:0f:ae: 6f:a1:89:87:1a:d3:7b:26:10:df:4a:22:5e:a9:13: f5:95:c8:8e:0e:05:44:5e:1e:dd:e0:96:eb:4e:4e: 00:34:b1:e5:39:47:dd:81:97:37:06:a0:10:70:af: 5c:df:79:62:2a:41:5a:ee:4f:5d:3e:02:14:f1:5e: 32:c2:10:3a:26:d1:25:d0:68:23:09:cc:62:7a:87: 73:aa:79:bc:b2:20:58:3f:dc:38:34:9b:3e:a1:67: 62:cf:aa:7d:34:2e:eb:aa:dd:77:bc:30:24:8b:36: 0c:e2:81:4d:f9:fa:87:4d:20:f3:74:cb:e1:1f:17: 75:dd:b6:ad:60:ef:59:bc:35:e3:06:f7:c3:db:f8: e5:57:1c:d2:85:56:61:01:76:a8:a3:85:94:d4:8e: 58:85:03:76:a2:0c:dc:7c:ff:d4:93:bb:17:9b:63: 61:ac:fa:43:e3:53:b5:d1:3f:88:2f:e2:3d:c5:cf: 6a:d5:9e:eb:f3:01:03:85:b5:01:83:7b:72:31:7c: 9f:30:2d:a2:77:35:ad:7c:35:a4:b3:6c:2d:d2:09: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C1:39:99:B6:30:48:4A:B6:58:CC:AC:AC:45:A4:19:97:A9:C2:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c2dc0e4-df18-35aa-8f8c-a4b81a232876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d5:d6:cc:48:5e:d6:54:78:c0:e9:37:7d:72:b9:f3:34:f9: b2:f2:47:6d:dc:19:52:20:e3:39:51:3f:9d:a8:9c:73:f2:95: f5:1a:5f:e1:7c:e0:7b:93:7d:01:83:55:41:00:67:a4:d3:74: f0:32:46:fb:af:2a:d0:25:ed:a4:ea:ac:a0:50:89:37:69:f2: 80:a0:06:9a:70:08:e1:89:f0:4c:92:e0:b0:62:35:71:f4:e2: 3c:82:c7:d5:95:d6:22:cf:71:36:53:c5:62:76:72:d4:b7:af: 3c:b1:a8:3c:7d:96:c8:e1:58:cc:37:dd:90:b7:93:28:ee:b4: e1:54:37:c1:b0:37:5a:da:5f:9d:e7:14:ca:4e:07:db:6c:80: c4:93:e1:3a:df:ab:14:8e:0f:cb:c5:87:72:53:f2:54:04:18: 4d:99:14:fe:1e:75:07:a4:15:54:c7:00:fa:53:1f:48:a6:bc: 75:00:40:27:22:84:f9:b3:22:57:e8:9d:36:a3:a1:81:af:c0: ee:60:0f:2d:39:99:a7:9a:88:c7:50:a4:3b:7c:a4:1b:8b:3f: e1:64:41:16:6a:a6:41:12:27:79:86:39:01:ca:15:7a:23:d1: b2:0f:0b:ec:ad:25:8a:59:72:e6:49:2e:d1:de:51:d7:82:76: 33:b1:69:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiqIQeJuH5cQPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjUzZWNlOTMtNDJmYS00OGVhLTkyOGYtZGZlNDdkMDQ1OWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7usvbLMsmv1dGo0/Un3kym8WPMOrDnIAXCV Kr60ifYUE5BurydCyTcYD65voYmHGtN7JhDfSiJeqRP1lciODgVEXh7d4JbrTk4A NLHlOUfdgZc3BqAQcK9c33liKkFa7k9dPgIU8V4ywhA6JtEl0GgjCcxieodzqnm8 siBYP9w4NJs+oWdiz6p9NC7rqt13vDAkizYM4oFN+fqHTSDzdMvhHxd13batYO9Z vDXjBvfD2/jlVxzShVZhAXaoo4WU1I5YhQN2ogzcfP/Uk7sXm2NhrPpD41O10T+I L+I9xc9q1Z7r8wEDhbUBg3tyMXyfMC2idzWtfDWks2wt0gln8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLPBOZm2MEhKtljMrKxFpBmXqcIkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGMyZGMwZTQtZGYxOC0z NWFhLThmOGMtYTRiODFhMjMyODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAnV1sxIXtZUeMDpN31yufM0+bLyR23cGVIg4zlRP52onHPylfUa X+F84HuTfQGDVUEAZ6TTdPAyRvuvKtAl7aTqrKBQiTdp8oCgBppwCOGJ8EyS4LBi NXH04jyCx9WV1iLPcTZTxWJ2ctS3rzyxqDx9lsjhWMw33ZC3kyjutOFUN8GwN1ra X53nFMpOB9tsgMST4TrfqxSOD8vFh3JT8lQEGE2ZFP4edQekFVTHAPpTH0imvHUA QCcihPmzIlfonTajoYGvwO5gDy05maeaiMdQpDt8pBuLP+FkQRZqpkESJ3mGOQHK FXoj0bIPC+ytJYpZcuZJLtHeUdeCdjOxafQ= -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:37 2025 by rpki-client