$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0b659f9-0dd8-35c3-acc5-e20566de5ac9.roa File: a0b659f9-0dd8-35c3-acc5-e20566de5ac9.roa (raw, json) Hash identifier: +KMBRLCGv8XzGNQyruP46eZkrGWM5+3OoK4jWRUqGzQ= Subject key identifier: BB:D8:DA:02:A9:76:76:17:6A:B2:7A:79:60:05:14:0E:9E:51:07:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08148665A124E2CE59C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0b659f9-0dd8-35c3-acc5-e20566de5ac9.roa Signing time: Thu 24 Jul 2025 12:38:53 +0000 ROA not before: Thu 24 Jul 2025 12:38:53 +0000 ROA not after: Wed 22 Oct 2025 12:38:53 +0000 asID: 396572 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:81:48:66:5a:12:4e:2c:e5:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:53 2025 GMT Not After : Oct 22 12:38:53 2025 GMT Subject: CN=0a6e2ef5-c974-466c-8204-dacf017c9f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:56:c9:cc:34:b8:1c:fa:dd:37:f0:42:0c:55: 9d:8d:75:1a:b9:5d:c5:ae:e5:45:a9:33:ef:4f:89: 0b:23:15:e3:0f:8f:60:58:64:e8:94:71:52:0a:43: 75:c9:35:0b:28:c0:ad:11:dd:33:8c:97:e6:43:26: 5b:5d:0d:b5:0b:2f:a7:3a:ff:c9:3d:df:55:98:41: 91:4f:1e:fd:89:1c:54:31:cd:74:7c:77:89:8c:62: 46:28:1f:ae:d7:bd:df:2d:0c:9c:fc:89:81:d4:8b: 3d:50:a9:6a:a9:38:2a:dd:5f:7c:04:06:8b:08:26: d4:1e:74:0e:7f:d1:7d:40:82:dd:cc:ec:7b:80:af: 0f:b0:51:a7:fd:17:a6:c4:c9:96:24:53:b1:90:bf: 21:df:e8:a3:5d:d4:a3:cc:1b:12:da:5e:cc:da:3e: 9d:0c:73:c7:68:bd:63:ee:0a:78:19:23:34:06:c0: a9:ca:78:17:3a:d1:56:99:30:c6:0a:6e:3c:8d:a2: b9:00:68:2a:66:31:4f:89:38:27:c7:e1:0a:81:f9: 6c:30:82:ff:9a:5a:c3:b8:21:0f:45:ae:1c:78:cd: 7d:a2:2d:ba:95:be:b6:62:de:88:d9:26:11:ae:0a: 27:eb:28:b4:36:aa:5a:f3:1d:56:9f:99:e6:fa:9e: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D8:DA:02:A9:76:76:17:6A:B2:7A:79:60:05:14:0E:9E:51:07:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0b659f9-0dd8-35c3-acc5-e20566de5ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:99:68:05:28:8f:04:20:54:87:9f:21:a8:91:1e:4c:85:a3: 90:33:da:08:d1:12:ea:82:88:3a:fa:4b:c7:62:9b:ad:05:51: 30:52:dc:a4:94:e8:52:b8:f1:4a:66:1d:44:cc:a5:ab:41:1a: 95:a3:03:2a:f5:68:d4:2d:1f:bf:87:fe:7a:15:4c:25:ce:0a: 6f:90:91:9f:9e:4b:58:93:55:b9:42:ee:80:06:ee:07:e3:4e: 0f:d6:ae:76:97:16:cc:69:13:b2:2d:5a:f0:cf:0d:66:5a:23: 9e:4c:16:e6:61:92:9f:93:ca:87:f6:9e:d0:a3:b1:8c:09:1b: 16:8b:b9:5d:a7:0f:d2:bc:49:03:bf:68:59:21:7f:02:59:35: 40:18:d8:ba:6a:33:20:fc:1f:82:f4:a4:4a:e7:7b:26:57:0b: 7b:a6:4a:b4:c9:4f:33:b3:a3:a6:44:1a:68:f4:ac:67:39:79: 0a:24:20:9b:f2:84:89:82:15:a1:29:2a:3d:6c:41:22:8d:a6: eb:75:d2:97:d9:95:4f:12:a3:b0:a9:2b:14:a5:12:79:0f:c6: 34:a0:67:a3:cb:2c:aa:73:30:fe:99:e7:c2:5c:c7:13:f5:85: 4d:c6:4e:69:f9:f0:82:3c:dd:79:14:d1:dc:ed:2b:4c:4f:2f: 97:7f:e4:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8IFIZloSTizlnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk MGE2ZTJlZjUtYzk3NC00NjZjLTgyMDQtZGFjZjAxN2M5ZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVbJzDS4HPrdN/BCDFWdjXUauV3FruVFqTPv T4kLIxXjD49gWGTolHFSCkN1yTULKMCtEd0zjJfmQyZbXQ21Cy+nOv/JPd9VmEGR Tx79iRxUMc10fHeJjGJGKB+u173fLQyc/ImB1Is9UKlqqTgq3V98BAaLCCbUHnQO f9F9QILdzOx7gK8PsFGn/RemxMmWJFOxkL8h3+ijXdSjzBsS2l7M2j6dDHPHaL1j 7gp4GSM0BsCpyngXOtFWmTDGCm48jaK5AGgqZjFPiTgnx+EKgflsMIL/mlrDuCEP Ra4ceM19oi26lb62Yt6I2SYRrgon6yi0Nqpa8x1Wn5nm+p6qlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLvY2gKpdnYXarJ6eWAFFA6eUQf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTBiNjU5ZjktMGRkOC0z NWMzLWFjYzUtZTIwNTY2ZGU1YWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGeZaAUojwQgVIefIaiRHkyFo5Az2gjREuqCiDr6S8dim60FUTBS 3KSU6FK48UpmHUTMpatBGpWjAyr1aNQtH7+H/noVTCXOCm+QkZ+eS1iTVblC7oAG 7gfjTg/WrnaXFsxpE7ItWvDPDWZaI55MFuZhkp+Tyof2ntCjsYwJGxaLuV2nD9K8 SQO/aFkhfwJZNUAY2LpqMyD8H4L0pErneyZXC3umSrTJTzOzo6ZEGmj0rGc5eQok IJvyhImCFaEpKj1sQSKNput10pfZlU8So7CpKxSlEnkPxjSgZ6PLLKpzMP6Z58Jc xxP1hU3GTmn58II83XkU0dztK0xPL5d/5Lg= -----END CERTIFICATE-----Generated at Wed Aug 6 14:22:15 2025 by rpki-client