$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/909f0525-b1f6-3c29-af53-fec2987a9bd1.roa File: 909f0525-b1f6-3c29-af53-fec2987a9bd1.roa (raw, json) Hash identifier: U/61UNVBoYQokteD3UDaIcMX0S3VfvlIKLWVJZu7lyE= Subject key identifier: 4F:DE:2D:F4:A2:8F:27:BC:80:33:76:63:A9:19:89:80:EB:E5:2B:1A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63AD4E9D21C1416781800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/909f0525-b1f6-3c29-af53-fec2987a9bd1.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396587 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3a:d4:e9:d2:1c:14:16:78:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=87b0907b-f6c6-49c8-b06e-49d32d6f009c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:f4:42:17:96:3b:47:88:94:ad:86:0d:55: 87:07:62:6e:22:b5:78:84:10:36:83:aa:df:42:02: 35:6b:93:6f:73:d2:74:56:ae:06:db:22:d0:22:72: 50:70:29:ea:ee:55:d9:54:7f:15:f7:b8:d6:0c:d4: c8:a8:a0:e6:f9:62:f1:22:80:f2:fc:67:7b:e2:1a: 73:e2:f5:0b:90:41:3d:8e:d2:a6:f9:19:ac:e7:54: 89:06:2e:6c:06:49:39:ed:7b:94:ff:26:48:59:5e: fb:d1:66:d7:3e:bc:04:2e:32:fc:87:0c:a4:be:93: 7a:f9:c9:76:83:8d:c6:35:74:02:e0:49:6b:e9:75: d3:19:66:93:1d:19:c3:40:66:21:06:30:b4:a8:ca: 04:68:d9:70:8e:1d:20:9d:0c:16:75:90:b6:1c:81: 8a:0c:a9:c7:df:52:72:ae:ab:f4:ba:8a:f7:16:30: 5b:c6:1f:cd:35:5b:a8:bc:3e:c8:24:6d:4e:36:2f: 6d:ca:bc:11:60:f7:99:5f:69:b0:db:2e:e5:41:4f: a3:66:95:18:1e:8f:d6:24:c2:3e:f8:8b:8d:9a:c7: ae:96:6f:9a:6f:06:bc:ff:23:e6:d6:d9:bd:7a:15: 1f:39:ca:23:77:bc:13:e6:67:1a:18:84:58:49:bc: 5e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:DE:2D:F4:A2:8F:27:BC:80:33:76:63:A9:19:89:80:EB:E5:2B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/909f0525-b1f6-3c29-af53-fec2987a9bd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:64:b4:28:a5:aa:3d:f2:3e:79:93:fb:d5:c9:3e:ad:0f:65: d5:20:c9:89:a4:fd:9e:fd:f3:ec:59:c6:25:ec:a8:47:9f:7f: 43:db:00:2f:18:33:5b:80:80:94:fa:35:3d:e9:d1:5d:ad:a3: 29:b8:62:d1:4d:0c:3f:8b:71:78:46:35:c5:07:07:9d:d7:60: 72:23:73:2a:e0:10:f2:9a:b4:6d:49:57:72:1b:27:5a:66:8e: 01:18:0a:e9:54:d4:f0:f6:7d:29:77:43:4d:52:ba:ca:9e:4a: d5:d7:9a:8d:0e:d4:7d:55:ce:02:c0:c4:42:f7:5f:c4:39:59: 53:7d:9b:45:83:bd:34:57:e4:e6:64:11:f8:98:d5:68:3b:02: 58:11:46:9f:03:3e:3a:9f:e7:d0:e2:4f:90:4f:4d:d0:ab:c5: b3:56:05:80:d1:36:05:13:b0:9f:d4:58:18:06:18:94:04:e3: ff:11:d9:99:1f:07:ca:3d:30:48:c7:c4:5b:6e:bf:e3:3c:cc: af:ab:9f:4b:2f:19:73:21:f2:8b:0e:b9:1e:2e:8b:3d:35:21: 9f:68:62:b7:ae:70:ce:17:ae:c4:c8:41:87:f8:fe:fd:a3:f5: 95:fc:be:ca:5f:15:19:c9:13:7e:4e:99:71:b8:c3:dc:88:27: bc:99:2d:96 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jrU6dIcFBZ4GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk ODdiMDkwN2ItZjZjNi00OWM4LWIwNmUtNDlkMzJkNmYwMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgn0QheWO0eIlK2GDVWHB2JuIrV4hBA2g6rf QgI1a5Nvc9J0Vq4G2yLQInJQcCnq7lXZVH8V97jWDNTIqKDm+WLxIoDy/Gd74hpz 4vULkEE9jtKm+Rms51SJBi5sBkk57XuU/yZIWV770WbXPrwELjL8hwykvpN6+cl2 g43GNXQC4Elr6XXTGWaTHRnDQGYhBjC0qMoEaNlwjh0gnQwWdZC2HIGKDKnH31Jy rqv0uor3FjBbxh/NNVuovD7IJG1ONi9tyrwRYPeZX2mw2y7lQU+jZpUYHo/WJMI+ +IuNmseulm+abwa8/yPm1tm9ehUfOcojd7wT5mcaGIRYSbxevQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE/eLfSijye8gDN2Y6kZiYDr5SsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTA5ZjA1MjUtYjFmNi0z YzI5LWFmNTMtZmVjMjk4N2E5YmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADZktCilqj3yPnmT+9XJPq0PZdUgyYmk/Z798+xZxiXsqEeff0Pb AC8YM1uAgJT6NT3p0V2toym4YtFNDD+LcXhGNcUHB53XYHIjcyrgEPKatG1JV3Ib J1pmjgEYCulU1PD2fSl3Q01SusqeStXXmo0O1H1VzgLAxEL3X8Q5WVN9m0WDvTRX 5OZkEfiY1Wg7AlgRRp8DPjqf59DiT5BPTdCrxbNWBYDRNgUTsJ/UWBgGGJQE4/8R 2ZkfB8o9MEjHxFtuv+M8zK+rn0svGXMh8osOuR4uiz01IZ9oYreucM4XrsTIQYf4 /v2j9ZX8vspfFRnJE35OmXG4w9yIJ7yZLZY= -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:49 2025 by rpki-client