$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93b2ca63-5fbf-3144-80e9-1a4b6007539b.roa File: 93b2ca63-5fbf-3144-80e9-1a4b6007539b.roa (raw, json) Hash identifier: HD9ADH4nqYhF4U0dJERpdxBmFty9wNso/0yUuruZrBw= Subject key identifier: 53:75:12:CE:6B:1C:7F:D4:96:C2:85:B1:6E:35:C3:CD:05:E4:46:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63B49F9004388C1C879E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93b2ca63-5fbf-3144-80e9-1a4b6007539b.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396554 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3b:49:f9:00:43:88:c1:c8:79:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=b85f8bd8-007f-4a68-801a-e9f764d33bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:91:6e:79:c8:fb:11:3d:bf:ec:57:cc:0e: a6:24:ac:f7:dd:75:bf:da:db:01:2b:9f:d3:36:28: 2e:a9:0b:f6:15:31:4d:b4:39:28:33:ee:44:7a:c1: af:4d:ab:7e:67:a0:ee:48:43:45:cb:4c:c7:d1:80: 80:6b:fd:92:47:16:a0:e6:d7:05:02:89:ba:cc:38: b5:50:ac:7c:a6:bf:4a:27:11:58:3f:39:96:b0:de: 9c:31:bc:c3:d4:5b:ab:ae:8d:eb:ae:f4:cf:d6:82: a8:c5:ef:10:7b:f6:29:85:f6:04:05:35:28:3c:03: 2f:45:1c:c3:d4:b5:b3:93:9b:04:42:40:e9:65:6c: 25:94:c9:5c:5b:21:73:46:a1:35:dc:94:59:03:88: fe:91:cf:6d:52:ed:bb:5c:ca:53:39:93:46:2a:b3: 06:1d:02:17:87:e4:c6:08:39:c8:9e:c1:4f:2d:16: 8c:3d:40:f1:6a:bd:ef:d1:b6:fb:34:6d:c5:61:ed: fc:e4:69:ab:1a:54:77:d7:18:e9:61:6c:d6:2c:63: 17:a8:1a:17:06:ba:ab:8d:12:a7:80:53:6b:3b:e2: 09:f8:ea:ab:55:82:e4:d4:ff:cb:ad:49:ad:0f:05: 25:ac:fd:e0:c6:3a:e5:74:3b:97:b7:a7:14:f1:df: e1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:75:12:CE:6B:1C:7F:D4:96:C2:85:B1:6E:35:C3:CD:05:E4:46:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93b2ca63-5fbf-3144-80e9-1a4b6007539b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:35:0c:db:c8:e7:46:e2:4a:63:21:8e:13:f5:19:fc:79:2e: 1a:52:df:cd:6e:11:99:d7:e2:1f:3b:b0:24:df:50:35:16:8b: 93:a0:22:3a:c2:53:4a:99:6c:74:f8:46:4f:45:57:0b:04:ad: 56:36:83:57:f0:ea:5f:ef:b3:3b:ee:04:b1:28:56:a2:a5:df: 41:10:08:b6:56:3b:60:22:7c:11:d3:95:ea:4d:59:08:f1:85: 83:d3:6e:04:4c:d7:cb:2f:43:35:3f:1e:21:c4:ef:79:78:92: d1:fc:15:74:96:6c:99:dd:1d:ad:82:2f:4f:0f:5a:b6:0e:01: 2a:4e:60:5c:57:cb:09:92:3c:bc:a8:bc:16:45:61:dc:e2:fa: df:69:e8:21:26:4d:de:53:e4:48:1a:fd:f2:62:89:5f:1d:01: fe:25:13:53:33:e0:9d:ae:02:2d:14:20:96:4f:89:a9:11:4e: 15:7c:b7:bc:7c:0a:73:eb:92:3b:e6:b3:15:06:5e:67:94:b3: f5:27:91:b3:35:cc:9f:4e:9e:fc:8f:6b:d0:0e:9e:0f:0c:fb: ab:e1:b0:be:ac:dd:da:dd:64:be:1e:62:21:f5:db:a2:d2:2d: e3:70:10:26:b1:9d:03:40:4a:7a:4d:0f:51:ed:ac:e5:c9:ac: 6f:08:09:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jtJ+QBDiMHIeeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk Yjg1ZjhiZDgtMDA3Zi00YTY4LTgwMWEtZTlmNzY0ZDMzYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzuRbnnI+xE9v+xXzA6mJKz33XW/2tsBK5/T NiguqQv2FTFNtDkoM+5EesGvTat+Z6DuSENFy0zH0YCAa/2SRxag5tcFAom6zDi1 UKx8pr9KJxFYPzmWsN6cMbzD1Furro3rrvTP1oKoxe8Qe/YphfYEBTUoPAMvRRzD 1LWzk5sEQkDpZWwllMlcWyFzRqE13JRZA4j+kc9tUu27XMpTOZNGKrMGHQIXh+TG CDnInsFPLRaMPUDxar3v0bb7NG3FYe385GmrGlR31xjpYWzWLGMXqBoXBrqrjRKn gFNrO+IJ+OqrVYLk1P/LrUmtDwUlrP3gxjrldDuXt6cU8d/huwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFN1Es5rHH/UlsKFsW41w80F5EaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTNiMmNhNjMtNWZiZi0z MTQ0LTgwZTktMWE0YjYwMDc1MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAY1DNvI50biSmMhjhP1Gfx5LhpS381uEZnX4h87sCTfUDUWi5Og IjrCU0qZbHT4Rk9FVwsErVY2g1fw6l/vszvuBLEoVqKl30EQCLZWO2AifBHTlepN WQjxhYPTbgRM18svQzU/HiHE73l4ktH8FXSWbJndHa2CL08PWrYOASpOYFxXywmS PLyovBZFYdzi+t9p6CEmTd5T5Ega/fJiiV8dAf4lE1Mz4J2uAi0UIJZPiakRThV8 t7x8CnPrkjvmsxUGXmeUs/UnkbM1zJ9OnvyPa9AOng8M+6vhsL6s3drdZL4eYiH1 26LSLeNwECaxnQNASnpND1HtrOXJrG8ICaY= -----END CERTIFICATE-----Generated at Fri Aug 8 00:37:34 2025 by rpki-client