$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a28c8441-5d84-36ae-9dba-1bedd15a77bf.roa File: a28c8441-5d84-36ae-9dba-1bedd15a77bf.roa (raw, json) Hash identifier: 4cBs0gSOM0UbnLWsuIcCgk3wHx2egf+siHU2/x64pB4= Subject key identifier: 83:3E:26:A5:36:58:F9:89:CD:48:DF:2B:83:8D:26:15:30:B0:56:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63972EB998BBBDFC3DD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a28c8441-5d84-36ae-9dba-1bedd15a77bf.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396595 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:39:72:eb:99:8b:bb:df:c3:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=8b1dd6d4-ab8d-4b2c-9049-0f4cd0faa711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:90:fc:e5:4f:8d:8e:44:08:1b:5b:86:8e:72: e0:e0:14:9f:4e:ca:e7:92:67:eb:75:fa:94:37:44: 5a:29:c4:5f:55:2a:e2:e3:14:ba:91:f1:2a:60:d3: 09:21:79:de:dc:9c:34:58:1f:a7:3a:7a:e6:cc:78: b7:d8:77:24:ed:4e:0b:9e:d3:10:c7:7f:b8:c7:65: 45:4b:f1:68:cc:46:2a:a4:11:c3:50:bf:59:6b:8c: 85:2b:28:95:1d:de:88:30:19:e4:64:13:93:b6:ef: 46:91:e5:f0:f0:f3:91:27:e5:1b:99:b8:1b:f6:0f: aa:21:36:d6:f3:cb:03:d1:9c:91:05:a5:98:a0:09: 3a:de:df:a7:ee:77:23:ab:0c:3a:8d:d1:76:16:81: 82:94:35:8b:93:20:da:a1:a2:ca:e8:6c:4d:b9:25: 0e:59:ce:3f:6a:72:cd:d8:59:59:fb:dc:b2:b2:f7: f8:d4:44:50:13:40:da:71:38:9a:b1:99:de:31:41: e3:37:d8:93:93:76:cc:44:2b:90:2c:86:f3:b0:48: a5:df:6d:bc:84:c2:4f:2c:f6:22:31:c8:b4:b4:95: ca:f1:dd:24:19:e9:bd:dc:7e:fe:7c:4d:3f:81:82: 63:c4:24:f8:6a:c4:72:76:7d:44:33:b0:df:f5:19: 01:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3E:26:A5:36:58:F9:89:CD:48:DF:2B:83:8D:26:15:30:B0:56:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a28c8441-5d84-36ae-9dba-1bedd15a77bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:65:2a:10:ab:a7:28:95:e8:33:d0:58:56:b4:37:c4:02:af: d0:04:5c:9c:64:c4:79:b8:80:d7:27:06:fb:86:85:89:e1:44: 21:b6:fd:86:2d:34:ba:d1:cf:9c:50:2c:fd:4c:84:cb:b6:bc: 30:cc:a6:c8:25:83:f2:00:13:e5:ff:49:9a:d4:1b:40:27:1b: 21:f5:53:00:8c:73:c2:05:d7:00:82:26:79:ab:60:c2:c9:05: b6:49:6c:bc:b1:69:38:13:64:ca:f6:c2:76:30:f8:ec:3d:42: 40:4c:5b:58:84:2b:fd:15:b3:99:5e:45:91:fc:b2:3a:ca:d8: 6a:b5:1a:75:ee:1a:ea:16:8b:d0:dd:e2:69:00:89:c1:2d:e3: 57:c5:34:66:79:94:d7:fa:d8:4c:3a:50:b2:c1:72:bc:a1:d1: b4:68:5a:fd:c2:a2:af:79:ef:da:f6:44:4d:8f:d9:61:c8:81: ba:34:b4:9b:48:e4:15:3a:df:7a:87:13:dc:e2:8f:34:dc:d1: 64:fc:1a:5b:d7:25:85:8b:6a:60:8d:48:41:4f:70:09:33:5a: 46:42:c2:ab:db:5d:9b:ef:cf:25:e8:aa:4b:db:c8:11:e0:6e: 48:24:41:49:2f:08:cd:c2:f1:20:fc:62:70:9f:20:c1:18:c8: 14:22:30:b1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jly65mLu9/D3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk OGIxZGQ2ZDQtYWI4ZC00YjJjLTkwNDktMGY0Y2QwZmFhNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZD85U+NjkQIG1uGjnLg4BSfTsrnkmfrdfqU N0RaKcRfVSri4xS6kfEqYNMJIXne3Jw0WB+nOnrmzHi32Hck7U4LntMQx3+4x2VF S/FozEYqpBHDUL9Za4yFKyiVHd6IMBnkZBOTtu9GkeXw8PORJ+Ubmbgb9g+qITbW 88sD0ZyRBaWYoAk63t+n7ncjqww6jdF2FoGClDWLkyDaoaLK6GxNuSUOWc4/anLN 2FlZ+9yysvf41ERQE0DacTiasZneMUHjN9iTk3bMRCuQLIbzsEil3228hMJPLPYi Mci0tJXK8d0kGem93H7+fE0/gYJjxCT4asRydn1EM7Df9RkBfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIM+JqU2WPmJzUjfK4ONJhUwsFYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI4Yzg0NDEtNWQ4NC0z NmFlLTlkYmEtMWJlZGQxNWE3N2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALhlKhCrpyiV6DPQWFa0N8QCr9AEXJxkxHm4gNcnBvuGhYnhRCG2 /YYtNLrRz5xQLP1MhMu2vDDMpsglg/IAE+X/SZrUG0AnGyH1UwCMc8IF1wCCJnmr YMLJBbZJbLyxaTgTZMr2wnYw+Ow9QkBMW1iEK/0Vs5leRZH8sjrK2Gq1GnXuGuoW i9Dd4mkAicEt41fFNGZ5lNf62Ew6ULLBcryh0bRoWv3Coq9579r2RE2P2WHIgbo0 tJtI5BU633qHE9zijzTc0WT8GlvXJYWLamCNSEFPcAkzWkZCwqvbXZvvzyXoqkvb yBHgbkgkQUkvCM3C8SD8YnCfIMEYyBQiMLE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:13 2025 by rpki-client