$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a39e33a7-4957-36c4-83bf-1fdce661117d.roa File: a39e33a7-4957-36c4-83bf-1fdce661117d.roa (raw, json) Hash identifier: mw/MBZOa35c0chiP4aVHZWPf+y1mTleAV/j5W5Gf9eA= Subject key identifier: 34:9F:30:02:E5:30:E2:88:54:DC:BF:BC:B1:71:86:77:E4:C7:C7:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE637720FF56CE35104C100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a39e33a7-4957-36c4-83bf-1fdce661117d.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396564 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:37:72:0f:f5:6c:e3:51:04:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=79dc6bcb-3109-45fe-bc70-5a14430e3222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7a:e0:0a:6a:44:b5:12:a0:b7:d6:ff:f3:00: f6:80:51:69:5a:59:a7:b7:f7:ee:70:57:e9:80:59: 84:aa:61:50:5f:a8:e9:ae:ec:9d:2a:f4:de:11:e9: 40:0a:2e:d6:65:8c:6d:0a:77:ff:94:56:bb:b4:69: cd:9a:36:d4:3d:9d:68:82:19:2c:14:7f:8f:ea:4c: 50:06:92:d7:c4:18:48:36:02:76:96:b1:0a:c0:0a: 3e:d0:9e:6b:f3:e8:de:b7:99:71:67:c4:51:e0:ef: 51:b2:48:58:db:e4:c5:e8:59:ce:ed:f8:a8:c2:db: e9:70:1f:b2:4b:db:8b:dd:13:d8:63:e1:f7:a7:b7: c1:56:9f:6b:ea:ea:7d:9e:6c:66:7c:67:e2:d1:a0: b7:6e:b1:fb:ba:ee:80:01:32:fe:26:e1:69:f9:c7: d4:87:21:0f:73:5c:49:2e:cf:f3:97:c5:25:97:ae: 24:ba:ca:4c:5d:b3:d5:79:90:23:29:ae:9c:a7:0b: 42:6e:43:fe:ef:17:f8:54:0e:71:26:bc:94:b8:de: 32:fa:fd:e0:18:d3:a7:d5:4d:9b:2b:42:01:37:fe: 57:f5:df:8f:da:71:81:78:87:bd:8f:f4:70:bd:6f: 41:ad:fe:35:b0:e1:3a:4f:00:b9:a1:5a:e1:ad:bc: 5f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9F:30:02:E5:30:E2:88:54:DC:BF:BC:B1:71:86:77:E4:C7:C7:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a39e33a7-4957-36c4-83bf-1fdce661117d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:97:7c:a2:fa:08:71:79:1a:1f:b6:44:f0:e6:7b:b5:95:0b: 4a:be:46:1a:1c:7a:ed:13:9c:46:1f:a6:42:18:78:ff:96:c3: a1:cc:4d:59:d1:7d:f1:47:3f:ba:9f:5d:56:2b:a1:c6:57:62: b9:f3:82:f5:02:43:d3:9f:4c:fb:3b:90:e5:33:d4:66:29:22: 2e:84:3c:b6:44:14:38:69:de:33:c7:10:33:c2:51:fd:79:c8: 7a:2b:21:98:76:da:3a:5f:f2:6b:5d:b5:d4:42:86:ca:21:63: c6:e0:f8:21:52:84:f7:1e:59:7f:0f:d7:77:73:a0:a6:94:88: 39:b8:1f:90:9a:09:63:5c:7a:37:21:c6:d9:38:e2:8d:cf:44: 40:4a:11:d4:cc:da:0e:ef:76:97:83:9f:23:f9:e3:1a:82:f2: 8e:59:1b:e6:54:44:31:6f:b9:4b:d9:4b:58:2c:19:88:2a:6b: 6f:2d:22:7c:22:56:72:b0:d5:ae:81:d4:59:e0:61:ba:1d:4f: 08:ff:3f:70:45:20:fa:65:48:09:d3:9c:03:da:e9:56:e5:54: 9f:4a:31:15:49:97:89:3e:77:10:d8:b7:87:c3:bc:e7:66:c0: e0:59:c1:58:ee:3e:1e:7e:9a:44:d0:b1:b8:f4:00:4f:70:19: 61:f3:7d:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jdyD/Vs41EEwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk NzlkYzZiY2ItMzEwOS00NWZlLWJjNzAtNWExNDQzMGUzMjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HrgCmpEtRKgt9b/8wD2gFFpWlmnt/fucFfp gFmEqmFQX6jpruydKvTeEelACi7WZYxtCnf/lFa7tGnNmjbUPZ1oghksFH+P6kxQ BpLXxBhINgJ2lrEKwAo+0J5r8+jet5lxZ8RR4O9RskhY2+TF6FnO7fiowtvpcB+y S9uL3RPYY+H3p7fBVp9r6up9nmxmfGfi0aC3brH7uu6AATL+JuFp+cfUhyEPc1xJ Ls/zl8Ull64kuspMXbPVeZAjKa6cpwtCbkP+7xf4VA5xJryUuN4y+v3gGNOn1U2b K0IBN/5X9d+P2nGBeIe9j/RwvW9Brf41sOE6TwC5oVrhrbxf3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDSfMALlMOKIVNy/vLFxhnfkx8ceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTM5ZTMzYTctNDk1Ny0z NmM0LTgzYmYtMWZkY2U2NjExMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKqXfKL6CHF5Gh+2RPDme7WVC0q+Rhoceu0TnEYfpkIYeP+Ww6HM TVnRffFHP7qfXVYrocZXYrnzgvUCQ9OfTPs7kOUz1GYpIi6EPLZEFDhp3jPHEDPC Uf15yHorIZh22jpf8mtdtdRChsohY8bg+CFShPceWX8P13dzoKaUiDm4H5CaCWNc ejchxtk44o3PREBKEdTM2g7vdpeDnyP54xqC8o5ZG+ZURDFvuUvZS1gsGYgqa28t InwiVnKw1a6B1FngYbodTwj/P3BFIPplSAnTnAPa6VblVJ9KMRVJl4k+dxDYt4fD vOdmwOBZwVjuPh5+mkTQsbj0AE9wGWHzfaM= -----END CERTIFICATE-----Generated at Wed Aug 6 11:04:18 2025 by rpki-client