$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97c740b4-3da1-3466-8f49-26c53f0b8d50.roa File: 97c740b4-3da1-3466-8f49-26c53f0b8d50.roa (raw, json) Hash identifier: ADiJl4Q/5laCXvcu8bOFU4+LKG63XdIUb7Wr4PnstPI= Subject key identifier: F3:D9:BF:69:94:35:46:80:01:ED:E1:36:3F:33:17:91:4B:DA:EE:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62CE31501DA95F9049A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97c740b4-3da1-3466-8f49-26c53f0b8d50.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 36627 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2c:e3:15:01:da:95:f9:04:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=0e3f6b46-0b3f-4e03-a332-4210742f15e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:01:84:e3:3d:cf:fc:8a:17:98:b8:e6:78: 30:1d:d6:ea:51:97:c7:16:37:a7:03:c9:4a:55:0f: c5:4a:d8:bb:c4:33:1e:3c:cf:a0:9a:a2:d5:60:5b: bb:cc:31:c0:46:f7:11:98:c8:00:ca:c6:64:10:67: 33:26:d8:75:38:66:8f:eb:ad:61:4e:61:24:23:82: 70:24:e0:89:02:ac:44:5e:e4:c4:37:92:4b:26:49: 42:29:2e:15:72:e5:b2:ff:a3:c6:e8:fa:8e:4e:10: 6f:0b:55:df:51:c2:af:15:a5:b4:8a:53:01:39:15: 88:32:70:03:1d:b2:32:4c:7f:3f:cb:51:4d:74:e0: 2c:cd:00:e9:c0:4e:f1:9d:4c:3f:14:47:e4:66:23: 40:f0:b0:bb:5b:32:75:6c:66:03:eb:75:6b:0a:b8: 07:46:d0:2a:e0:f0:8f:a2:47:56:a0:d3:00:d2:ec: ea:56:68:7a:95:ab:99:45:d2:59:9c:a4:6c:9d:9b: 26:91:ad:e5:ec:75:64:0b:54:b2:d8:ea:69:0b:90: c7:18:29:b7:cb:6e:cd:7f:a2:18:8d:49:3a:f7:ab: a3:06:c5:e5:db:d0:39:e7:a6:d6:8d:ae:a4:3f:32: d5:f7:79:d0:fc:76:a3:38:d6:21:62:d6:54:fc:e1: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D9:BF:69:94:35:46:80:01:ED:E1:36:3F:33:17:91:4B:DA:EE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97c740b4-3da1-3466-8f49-26c53f0b8d50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:3c:9b:0f:ae:0c:a0:26:4c:73:00:66:16:de:6a:2b:fd:05: 56:99:c5:18:78:04:91:f1:69:88:85:33:eb:01:f0:26:31:48: 6c:d6:bf:eb:ab:20:9b:a1:4d:f0:13:e9:57:d8:a5:72:64:19: 6b:07:ea:c1:19:af:b3:d1:bd:f7:1a:40:76:f1:da:8d:6c:33: ae:95:e7:01:8d:58:98:c3:13:f9:5a:a2:de:be:07:f2:51:54: cc:9a:4d:b1:85:de:7a:c2:15:46:c1:f8:f8:39:ee:e6:b3:2f: 84:13:a3:9f:71:c2:d2:7c:0a:c4:7d:b5:0d:72:bc:6d:19:48: 66:8e:a7:3c:64:a1:53:8f:5b:bc:8c:f5:b5:3c:1d:d1:d5:7d: 04:f3:a6:81:0f:cf:e1:e2:f7:6a:85:06:fb:dc:61:2d:e1:d1: 40:dc:e5:6f:86:25:88:26:c0:14:d4:83:a5:35:ff:7f:b8:24: b7:4f:8f:af:a7:df:cf:ba:7c:31:65:1d:16:31:28:4c:3a:31: 78:48:4b:13:5a:40:1f:64:4a:02:ce:48:f2:31:72:16:37:fc: 9c:58:e5:2a:ac:73:9e:05:e4:4a:a2:2e:2f:80:66:0c:29:d4: f2:c6:ed:97:b4:00:93:ab:0a:58:75:3b:91:a0:ab:fa:08:61: 87:02:38:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tizjFQHalfkEmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MGUzZjZiNDYtMGIzZi00ZTAzLWEzMzItNDIxMDc0MmYxNWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOgBhOM9z/yKF5i45ngwHdbqUZfHFjenA8lK VQ/FSti7xDMePM+gmqLVYFu7zDHARvcRmMgAysZkEGczJth1OGaP661hTmEkI4Jw JOCJAqxEXuTEN5JLJklCKS4VcuWy/6PG6PqOThBvC1XfUcKvFaW0ilMBORWIMnAD HbIyTH8/y1FNdOAszQDpwE7xnUw/FEfkZiNA8LC7WzJ1bGYD63VrCrgHRtAq4PCP okdWoNMA0uzqVmh6lauZRdJZnKRsnZsmka3l7HVkC1Sy2OppC5DHGCm3y27Nf6IY jUk696ujBsXl29A556bWja6kPzLV93nQ/HajONYhYtZU/OGNVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPPZv2mUNUaAAe3hNj8zF5FL2u7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTdjNzQwYjQtM2RhMS0z NDY2LThmNDktMjZjNTNmMGI4ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFk8mw+uDKAmTHMAZhbeaiv9BVaZxRh4BJHxaYiFM+sB8CYxSGzW v+urIJuhTfAT6VfYpXJkGWsH6sEZr7PRvfcaQHbx2o1sM66V5wGNWJjDE/laot6+ B/JRVMyaTbGF3nrCFUbB+Pg57uazL4QTo59xwtJ8CsR9tQ1yvG0ZSGaOpzxkoVOP W7yM9bU8HdHVfQTzpoEPz+Hi92qFBvvcYS3h0UDc5W+GJYgmwBTUg6U1/3+4JLdP j6+n38+6fDFlHRYxKEw6MXhISxNaQB9kSgLOSPIxchY3/JxY5Sqsc54F5EqiLi+A Zgwp1PLG7Ze0AJOrClh1O5Ggq/oIYYcCOOM= -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:30 2025 by rpki-client