$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa File: a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa (raw, json) Hash identifier: u1kkGPTNMjIlEgjJ2ewV/+NqTfYoOJgpEuDHi68d06A= Subject key identifier: 86:18:2F:7E:2D:71:DC:F4:95:FC:1B:C0:B8:DB:AC:12:91:C5:83:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE6394D782CF265F37DC0F2 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396615 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:39:4d:78:2c:f2:65:f3:7d:c0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=22510a12-e682-4c82-a10c-5de1c0d4fae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:63:17:28:59:52:65:9b:d1:4b:c7:e4:04:08: 2f:f2:ce:48:ac:c8:ac:b0:8c:57:61:06:83:13:51: 2f:99:bc:f5:68:5b:44:72:a3:f4:6b:c3:85:ec:11: 8d:f9:ba:a8:e2:40:8a:ef:df:b3:fb:71:a5:1a:44: d8:3d:a1:33:8a:f9:2e:f3:53:f5:fc:7f:5c:20:42: 3f:98:a2:c4:cc:0c:f7:1c:2d:75:e8:42:5a:74:d2: 1e:cf:7f:a3:c9:30:b6:c8:74:86:a7:33:6a:ce:2b: 7d:18:db:4a:9f:e6:f2:e0:1b:79:6b:23:69:8e:ff: ee:2b:93:e4:15:93:91:b9:b7:b9:67:6e:0e:7b:d6: 46:20:f1:e4:5b:b0:47:25:0f:c8:41:20:ce:5d:f5: f5:c2:7c:67:5e:5b:a8:6a:fc:4f:78:51:b3:8a:58: 85:a8:a6:c5:da:a8:f7:49:31:03:25:1a:37:35:7c: e3:40:79:fe:c1:2e:93:e3:93:d6:54:b3:03:c0:1f: 8c:c2:88:64:e8:3f:54:17:9a:f5:fb:94:72:cc:c8: 71:c5:ad:1d:73:e0:b0:46:3a:fc:a7:0b:f6:28:75: 6c:3f:e9:d8:54:31:e7:7b:53:d8:c8:95:5e:76:0b: 9b:8a:ab:05:bd:ea:26:5f:f0:2a:07:61:85:00:b2: 1a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:18:2F:7E:2D:71:DC:F4:95:FC:1B:C0:B8:DB:AC:12:91:C5:83:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2efe4c7-d11e-3961-b6a2-0aa8bfdfea88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:d3:5c:34:65:e8:bb:1e:44:46:4d:7e:64:b3:57:9f:ed:e5: 8a:cc:53:c4:ef:b6:56:03:00:34:97:cb:37:d6:dc:dc:71:25: 27:22:3c:e7:7b:86:38:76:d2:4d:6c:0c:83:2c:c1:3c:e9:30: fb:b1:f9:ed:f2:4d:8e:0c:d6:14:04:cc:b1:81:2e:3c:92:8b: e9:34:2c:d9:ac:92:3e:fc:89:4c:a1:d4:a7:f8:96:93:0f:eb: 6d:b3:08:a0:c0:c5:5c:f4:ad:8f:a0:a7:b0:17:ec:03:3b:9a: ab:ea:d8:76:91:3b:09:b7:a9:c0:4e:3b:f8:34:f1:ab:cd:6f: 04:5f:7c:f4:26:97:31:cb:52:17:81:ef:5f:fa:a2:e2:5a:99: 1a:69:74:f0:7b:26:93:9a:b1:03:1a:e9:0a:0d:dc:d8:a9:09: 28:c5:4a:d7:04:fe:3f:85:a8:e2:0e:0a:8d:13:98:a2:6f:ad: 6d:bd:ca:62:89:12:16:97:33:56:7a:f2:40:d9:b7:ef:10:52: f6:b1:96:dc:77:ad:c3:a6:2e:c6:1a:0c:7c:0f:84:ef:2b:64: bc:5b:5e:01:a1:28:3e:92:a8:1c:5d:94:82:b7:8b:a8:c6:46: 7b:e2:a6:31:4f:e5:12:34:40:c7:90:d5:4e:7c:c9:90:84:ac: 14:79:f4:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jlNeCzyZfN9wPIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MjI1MTBhMTItZTY4Mi00YzgyLWExMGMtNWRlMWMwZDRmYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWMXKFlSZZvRS8fkBAgv8s5IrMissIxXYQaD E1Evmbz1aFtEcqP0a8OF7BGN+bqo4kCK79+z+3GlGkTYPaEzivku81P1/H9cIEI/ mKLEzAz3HC116EJadNIez3+jyTC2yHSGpzNqzit9GNtKn+by4Bt5ayNpjv/uK5Pk FZORube5Z24Oe9ZGIPHkW7BHJQ/IQSDOXfX1wnxnXluoavxPeFGziliFqKbF2qj3 STEDJRo3NXzjQHn+wS6T45PWVLMDwB+Mwohk6D9UF5r1+5RyzMhxxa0dc+CwRjr8 pwv2KHVsP+nYVDHne1PYyJVedgubiqsFveomX/AqB2GFALIaUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIYYL34tcdz0lfwbwLjbrBKRxYM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTJlZmU0YzctZDExZS0z OTYxLWI2YTItMGFhOGJmZGZlYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADTTXDRl6LseREZNfmSzV5/t5YrMU8TvtlYDADSXyzfW3NxxJSci POd7hjh20k1sDIMswTzpMPux+e3yTY4M1hQEzLGBLjySi+k0LNmskj78iUyh1Kf4 lpMP622zCKDAxVz0rY+gp7AX7AM7mqvq2HaROwm3qcBOO/g08avNbwRffPQmlzHL UheB71/6ouJamRppdPB7JpOasQMa6QoN3NipCSjFStcE/j+FqOIOCo0TmKJvrW29 ymKJEhaXM1Z68kDZt+8QUvaxltx3rcOmLsYaDHwPhO8rZLxbXgGhKD6SqBxdlIK3 i6jGRnvipjFP5RI0QMeQ1U58yZCErBR59E0= -----END CERTIFICATE-----Generated at Wed Aug 6 09:25:45 2025 by rpki-client