$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d7e8387-a53c-3267-a182-a02b3751e636.roa File: 8d7e8387-a53c-3267-a182-a02b3751e636.roa (raw, json) Hash identifier: IgN4dYCheRvCxwJUzdXLNj5Lxme+P6QNVIQOe3Eb194= Subject key identifier: 47:73:5B:DD:69:C4:99:51:D5:67:C3:47:DB:B4:52:50:0F:98:4E:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE638EA4A644FAAB12040C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d7e8387-a53c-3267-a182-a02b3751e636.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396572 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:38:ea:4a:64:4f:aa:b1:20:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=1a10fd5c-3a1f-4890-bc21-9ec4b209a169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:e4:06:21:e6:80:07:ca:e5:d2:fa:99:90: 0d:81:85:46:e8:6d:e6:d4:5a:1c:2d:ab:82:91:a9: 81:f8:ed:8b:86:e1:3f:f7:e7:c2:4a:08:cc:f7:24: c0:c4:7a:bf:b1:82:7c:a3:4d:fc:96:63:09:0c:3c: c2:c8:3f:46:0f:ab:d4:55:fc:e4:4b:de:b3:8e:c9: d6:76:b5:db:3b:bb:78:d5:b2:54:81:8e:02:59:3c: 8b:8b:9c:07:ac:70:8b:ef:17:cf:1e:39:95:01:37: 6e:5c:85:1c:c5:6e:42:22:7b:8b:19:5f:ad:06:b4: 8a:7e:88:a5:63:33:b6:c1:aa:02:39:b5:e0:81:66: 1c:7d:ab:6e:6c:9f:b3:00:64:fe:c0:28:05:67:7c: 05:4d:d1:28:d9:0a:ad:ca:24:37:02:6d:e7:f5:b9: 5a:ed:df:27:f6:10:b5:f5:74:25:db:9b:45:d0:38: cf:18:99:fc:59:73:b2:dd:1b:67:b9:82:fa:56:cb: ef:0c:bb:99:e0:d7:7b:5a:42:f1:15:ee:fb:22:5a: f7:5e:e9:02:6f:22:09:3d:f8:a5:a2:00:47:70:eb: 8d:25:35:8a:10:3e:82:41:18:62:aa:ae:ff:59:5b: 92:c9:0e:a2:e2:91:6b:a6:49:38:58:2a:54:0c:24: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:73:5B:DD:69:C4:99:51:D5:67:C3:47:DB:B4:52:50:0F:98:4E:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d7e8387-a53c-3267-a182-a02b3751e636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:41:1b:ba:b3:24:5f:a3:40:df:e8:16:62:31:44:2e:27:86: 14:4e:3f:da:69:47:ec:b5:8b:cb:a4:12:7e:a1:90:e7:3c:f8: 2e:98:65:97:c4:21:2a:59:2c:9e:5c:ee:8c:75:13:42:3f:13: 5e:c5:87:be:b3:ae:a0:99:9b:70:62:0c:15:4c:c7:68:4b:b2: a5:9a:0e:e4:69:22:5f:85:90:c3:cb:34:ba:f9:11:55:1d:04: 0b:5a:24:82:63:c6:c0:d6:96:20:ab:e4:e6:4f:4f:10:e4:9e: f0:e9:ea:f3:da:96:91:39:c0:44:6b:09:91:58:3f:d9:4c:38: 30:ac:2c:aa:4d:71:34:de:14:cc:cb:5b:95:fe:c7:f9:89:ac: eb:d7:9b:f4:41:2b:69:ba:d1:b0:47:ae:e5:a5:df:1c:11:95: f1:f5:d1:4c:8f:cc:e4:fb:79:a4:ac:9b:27:c7:9e:a6:d7:6f: 72:6f:d9:80:4d:fe:ba:14:d4:b3:f1:f4:c3:ed:2b:f7:0b:a3: 09:8e:d7:65:ad:a3:b1:91:17:2b:70:65:b9:c6:cb:e2:db:2e: 82:22:9e:c6:e1:f9:82:ad:ae:2e:7b:5a:21:37:9e:0a:3f:5e: 77:a4:dd:a5:8a:d5:af:a2:47:7f:2f:8f:56:20:42:be:b2:4c: 4c:ce:0d:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jjqSmRPqrEgQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MWExMGZkNWMtM2ExZi00ODkwLWJjMjEtOWVjNGIyMDlhMTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsDkBiHmgAfK5dL6mZANgYVG6G3m1FocLauC kamB+O2LhuE/9+fCSgjM9yTAxHq/sYJ8o038lmMJDDzCyD9GD6vUVfzkS96zjsnW drXbO7t41bJUgY4CWTyLi5wHrHCL7xfPHjmVATduXIUcxW5CInuLGV+tBrSKfoil YzO2waoCObXggWYcfatubJ+zAGT+wCgFZ3wFTdEo2QqtyiQ3Am3n9bla7d8n9hC1 9XQl25tF0DjPGJn8WXOy3RtnuYL6VsvvDLuZ4Nd7WkLxFe77Ilr3XukCbyIJPfil ogBHcOuNJTWKED6CQRhiqq7/WVuSyQ6i4pFrpkk4WCpUDCRAEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEdzW91pxJlR1WfDR9u0UlAPmE71MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGQ3ZTgzODctYTUzYy0z MjY3LWExODItYTAyYjM3NTFlNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACNBG7qzJF+jQN/oFmIxRC4nhhROP9ppR+y1i8ukEn6hkOc8+C6Y ZZfEISpZLJ5c7ox1E0I/E17Fh76zrqCZm3BiDBVMx2hLsqWaDuRpIl+FkMPLNLr5 EVUdBAtaJIJjxsDWliCr5OZPTxDknvDp6vPalpE5wERrCZFYP9lMODCsLKpNcTTe FMzLW5X+x/mJrOvXm/RBK2m60bBHruWl3xwRlfH10UyPzOT7eaSsmyfHnqbXb3Jv 2YBN/roU1LPx9MPtK/cLowmO12Wto7GRFytwZbnGy+LbLoIinsbh+YKtri57WiE3 ngo/Xnek3aWK1a+iR38vj1YgQr6yTEzODes= -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:18 2025 by rpki-client