$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4830e01-1ef6-37bb-9641-9768261a36d5.roa File: a4830e01-1ef6-37bb-9641-9768261a36d5.roa (raw, json) Hash identifier: yB1rewZ6LoJDhE8cDo9tsf/7X2Q+tW954O1zbsYJegk= Subject key identifier: AC:DF:DB:7B:7A:25:1D:A2:DF:2F:7E:06:D8:7D:7F:B7:D0:45:DA:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62F12878487D5FFEFE8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4830e01-1ef6-37bb-9641-9768261a36d5.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 36621 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2f:12:87:84:87:d5:ff:ef:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=c44b9db7-278a-4a0f-86c7-09605651e666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:49:ad:64:f3:cc:97:dd:24:04:fc:e1:1b: 9f:db:77:94:2e:34:c6:e8:81:9c:0e:a6:0b:bf:52: b0:b7:07:99:ed:ca:47:32:8a:c1:da:1d:36:9d:66: 38:3a:0d:4d:d8:23:7f:c0:0c:b7:9b:7d:0b:0d:00: 4b:9e:bf:58:ea:e3:1c:a4:84:90:56:0a:16:c0:a2: 67:50:be:e0:ce:5f:1d:5b:d3:e8:08:a9:1b:60:39: 5b:55:08:ff:fe:4c:53:b3:92:b1:00:37:b3:4c:04: 21:c2:c7:43:ce:37:ed:64:45:d5:6f:b7:6c:17:ed: df:4b:e2:f8:ad:29:09:94:9c:bc:05:42:f8:af:d8: 8f:b8:84:cd:9d:cc:f3:9c:ac:96:6f:d6:28:3c:99: 0b:13:ec:9b:c1:36:5d:cb:7d:e4:50:1f:1f:62:3d: eb:6f:a5:de:99:7c:74:ba:cc:73:6d:56:2d:eb:09: 5b:63:ed:63:f9:75:03:e4:4d:81:47:c2:29:b7:68: 1e:c7:81:06:d9:58:5b:f3:28:66:2e:a3:f9:31:3e: 08:51:83:6a:92:f1:05:b8:de:e2:7f:06:f5:96:32: 78:65:52:2b:da:36:5e:3b:5f:ff:4c:18:f0:fa:56: 8e:a8:3f:b5:75:4c:44:26:e6:da:09:e5:ed:3e:90: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DF:DB:7B:7A:25:1D:A2:DF:2F:7E:06:D8:7D:7F:B7:D0:45:DA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4830e01-1ef6-37bb-9641-9768261a36d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:b7:d8:80:06:a5:de:d4:3c:a0:71:29:5f:57:dd:9e:a7:b8: 35:3a:1c:79:7d:1d:a2:2f:72:42:90:58:6f:d1:91:9b:ca:81: 58:44:68:e2:be:5d:96:fa:d2:8b:e4:a3:ff:ec:16:58:3d:eb: fd:e5:a8:b5:2a:86:26:fd:3c:0f:d9:57:f7:0c:c3:0f:ec:ff: 3f:02:24:9f:1e:2a:0b:05:17:b8:97:b4:e4:18:22:73:30:53: cb:1a:c5:e0:9a:3a:39:52:26:c9:27:c2:7f:ae:27:94:9f:d8: 35:97:01:d6:a2:09:8f:0a:4f:d0:a5:42:01:1d:70:d7:6c:13: a4:81:0b:8f:e3:1d:d9:46:b5:8c:b5:ae:b7:53:a6:7e:6d:62: ce:c5:23:0b:45:94:f5:ca:ef:64:99:53:50:f1:6f:9d:ae:aa: 71:ad:c9:5b:ca:42:3c:e5:97:9b:4b:99:a3:f1:70:a8:f1:5f: 2f:3c:92:03:a9:b3:76:ee:9c:29:28:5f:d7:dd:24:de:20:2b: f0:5c:a4:f0:ee:f1:0c:ee:84:0c:ee:47:e1:0c:ab:04:9b:4a: 47:ff:f0:a1:13:3a:09:3c:af:e3:7f:4e:22:6b:93:a5:79:1a: 5b:62:a3:6d:ff:5b:f9:3c:76:39:61:4c:9a:87:b1:86:08:93: 07:60:97:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3ti8Sh4SH1f/v6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk YzQ0YjlkYjctMjc4YS00YTBmLTg2YzctMDk2MDU2NTFlNjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBdJrWTzzJfdJAT84Ruf23eULjTG6IGcDqYL v1KwtweZ7cpHMorB2h02nWY4Og1N2CN/wAy3m30LDQBLnr9Y6uMcpISQVgoWwKJn UL7gzl8dW9PoCKkbYDlbVQj//kxTs5KxADezTAQhwsdDzjftZEXVb7dsF+3fS+L4 rSkJlJy8BUL4r9iPuITNnczznKyWb9YoPJkLE+ybwTZdy33kUB8fYj3rb6XemXx0 usxzbVYt6wlbY+1j+XUD5E2BR8Ipt2gex4EG2Vhb8yhmLqP5MT4IUYNqkvEFuN7i fwb1ljJ4ZVIr2jZeO1//TBjw+laOqD+1dUxEJubaCeXtPpD0zwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKzf23t6JR2i3y9+Bth9f7fQRdoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTQ4MzBlMDEtMWVmNi0z N2JiLTk2NDEtOTc2ODI2MWEzNmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGG32IAGpd7UPKBxKV9X3Z6nuDU6HHl9HaIvckKQWG/RkZvKgVhE aOK+XZb60ovko//sFlg96/3lqLUqhib9PA/ZV/cMww/s/z8CJJ8eKgsFF7iXtOQY InMwU8saxeCaOjlSJsknwn+uJ5Sf2DWXAdaiCY8KT9ClQgEdcNdsE6SBC4/jHdlG tYy1rrdTpn5tYs7FIwtFlPXK72SZU1Dxb52uqnGtyVvKQjzll5tLmaPxcKjxXy88 kgOps3bunCkoX9fdJN4gK/BcpPDu8QzuhAzuR+EMqwSbSkf/8KETOgk8r+N/TiJr k6V5Gltio23/W/k8djlhTJqHsYYIkwdgl5c= -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:19 2025 by rpki-client