$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fae462-abcb-3150-91e5-df7cbf85cf60.roa File: a5fae462-abcb-3150-91e5-df7cbf85cf60.roa (raw, json) Hash identifier: UO0FqmDlhdDCtgMP0tA1myN9FQbQCJ91fWQD51cUyn8= Subject key identifier: 9F:1C:D9:14:51:EC:20:46:77:A6:19:62:6B:7B:D8:B7:AF:6C:DE:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B628758A5C68FA2A073540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fae462-abcb-3150-91e5-df7cbf85cf60.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396542 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:28:75:8a:5c:68:fa:2a:07:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=4fe8c78b-b359-4b06-8648-9672934f111c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:43:98:00:fc:30:cf:e7:75:62:1d:d1:fb:d1: ac:97:8e:52:b0:f5:8f:4c:49:b4:5e:c3:e9:a2:0f: 97:5a:66:c3:3a:0b:a9:8e:99:10:4e:d6:ba:2e:ab: 2b:6c:30:cf:47:9f:9f:f0:68:73:09:4d:e6:d2:95: b0:6b:7e:54:73:3e:d7:84:17:f8:a0:0a:0f:24:5d: ba:32:d1:df:5a:b0:7c:c3:ee:28:05:7e:6a:aa:51: 88:77:a2:1b:f2:84:4c:b2:a7:a4:05:44:7b:3a:a8: df:a0:af:04:6f:84:ca:fb:b8:50:a3:68:51:74:03: de:2d:e2:5c:a2:99:d8:e6:fb:85:8c:19:8b:cb:d3: 34:31:89:b2:1f:b4:30:bc:3f:51:87:bf:36:2a:5e: e8:cf:32:a2:77:09:74:c3:d6:95:6b:44:4d:a3:0b: 1a:8a:22:9b:f9:f0:23:bc:00:2e:8f:ed:c8:b9:36: 4a:08:ff:88:09:24:65:43:07:57:e8:65:19:4e:92: 93:52:e7:b8:a8:5f:33:27:df:05:21:24:94:ab:b5: 5e:9c:b3:76:72:21:7e:3d:b7:68:7b:df:ae:0f:8d: 9a:17:95:4d:3a:aa:1f:84:4e:ec:ac:da:44:a7:b2: 1d:00:31:61:52:31:dd:8b:4f:cf:16:15:15:30:c2: f2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1C:D9:14:51:EC:20:46:77:A6:19:62:6B:7B:D8:B7:AF:6C:DE:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5fae462-abcb-3150-91e5-df7cbf85cf60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0b:de:1e:73:f0:83:c1:2c:29:b1:17:e1:05:b7:19:03:c5: db:eb:16:67:42:f1:bf:f5:33:15:e2:ff:49:70:7e:0c:a1:12: 8c:38:b7:87:c2:80:f4:2c:76:a5:dd:01:c8:6b:a1:f1:6a:33: 8b:4e:9c:f1:4d:bc:6a:eb:05:06:a7:53:df:60:b0:bd:3b:34: 23:0e:32:25:f0:99:f4:2c:28:72:f5:21:51:0c:dd:ae:3c:cd: df:9f:80:32:b6:44:41:29:e9:75:b3:fb:c3:2c:64:4f:6a:5c: 44:d3:76:b9:f4:24:31:55:b4:a4:51:2f:80:4e:0d:f3:1b:2e: 7a:04:00:f9:a8:20:f5:10:48:dd:fd:eb:91:cd:d9:4a:42:16: 2e:89:8e:69:ca:7f:1d:4d:72:79:45:d3:76:6e:88:de:79:b1: 39:f1:cc:30:54:fb:4c:20:0b:07:f4:30:e6:e5:81:28:bc:6d: 44:10:b4:82:32:7c:75:5a:14:c9:dc:da:ea:5c:52:42:e9:81: f2:47:55:22:3b:fd:28:03:fc:49:a0:8c:b1:af:30:3e:e9:ce: 77:8a:b1:77:a8:fc:1d:3c:9a:f6:ab:1b:3c:95:10:a5:10:04: 1f:b0:84:d3:da:02:24:4d:b0:d3:62:f7:af:5c:44:ba:3b:6d: 65:69:8b:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tih1ilxo+ioHNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NGZlOGM3OGItYjM1OS00YjA2LTg2NDgtOTY3MjkzNGYxMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUOYAPwwz+d1Yh3R+9Gsl45SsPWPTEm0XsPp og+XWmbDOgupjpkQTta6LqsrbDDPR5+f8GhzCU3m0pWwa35Ucz7XhBf4oAoPJF26 MtHfWrB8w+4oBX5qqlGId6Ib8oRMsqekBUR7OqjfoK8Eb4TK+7hQo2hRdAPeLeJc opnY5vuFjBmLy9M0MYmyH7QwvD9Rh782Kl7ozzKidwl0w9aVa0RNowsaiiKb+fAj vAAuj+3IuTZKCP+ICSRlQwdX6GUZTpKTUue4qF8zJ98FISSUq7VenLN2ciF+Pbdo e9+uD42aF5VNOqofhE7srNpEp7IdADFhUjHdi0/PFhUVMMLyXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ8c2RRR7CBGd6YZYmt72LevbN78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTVmYWU0NjItYWJjYi0z MTUwLTkxZTUtZGY3Y2JmODVjZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEEL3h5z8IPBLCmxF+EFtxkDxdvrFmdC8b/1MxXi/0lwfgyhEow4 t4fCgPQsdqXdAchrofFqM4tOnPFNvGrrBQanU99gsL07NCMOMiXwmfQsKHL1IVEM 3a48zd+fgDK2REEp6XWz+8MsZE9qXETTdrn0JDFVtKRRL4BODfMbLnoEAPmoIPUQ SN3965HN2UpCFi6JjmnKfx1NcnlF03ZuiN55sTnxzDBU+0wgCwf0MOblgSi8bUQQ tIIyfHVaFMnc2upcUkLpgfJHVSI7/SgD/EmgjLGvMD7pzneKsXeo/B08mvarGzyV EKUQBB+whNPaAiRNsNNi969cRLo7bWVpi/k= -----END CERTIFICATE-----Generated at Wed Aug 6 00:40:37 2025 by rpki-client