$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa639eb9-e752-364f-81b9-63380059ea12.roa File: aa639eb9-e752-364f-81b9-63380059ea12.roa (raw, json) Hash identifier: O+jKotJYHoV6SmF/5wtVt/UtjAnSccYbNrZxwjHlIp4= Subject key identifier: 5C:DC:BC:03:89:FE:2F:14:85:36:38:14:8A:5F:9D:25:3A:D2:E1:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62706906C77DC67B08E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa639eb9-e752-364f-81b9-63380059ea12.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396612 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:27:06:90:6c:77:dc:67:b0:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=12553d5a-065f-40ba-ab3a-02885cc626cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:d5:0b:02:24:81:fa:e6:0a:80:3b:4f:26: 9b:3d:9b:b6:e1:f1:de:20:b4:59:ee:1e:c4:5e:75: 92:c1:91:17:75:f2:54:03:e2:ba:74:23:f2:91:25: e0:72:97:33:2a:f7:17:f0:99:47:2c:85:ce:aa:eb: 31:12:60:4c:7a:18:02:a4:3b:5b:ac:32:2e:7d:a9: f9:76:18:db:fc:b6:59:57:f3:8b:82:d3:41:24:f8: df:dd:83:8b:bb:80:85:7b:7c:5a:d3:e1:88:96:fd: f3:e4:2d:57:b6:3d:e7:08:06:89:61:98:a6:ce:92: 01:57:ae:ab:b8:d2:5e:02:6b:0a:b8:ef:04:39:f2: ea:ed:c2:fa:f2:3f:ba:46:a9:4f:11:00:0e:f4:8e: 33:e9:30:08:78:c8:fc:f1:93:2a:30:fb:15:aa:c0: 0c:1b:89:25:7d:05:1e:9a:af:e8:12:f4:13:fd:f6: 8f:f8:fd:5d:83:a3:62:40:f4:c3:e5:50:90:32:c4: bf:32:f6:a6:84:24:fc:96:40:69:7a:dd:1e:24:bd: f1:37:18:d4:21:91:09:c8:cc:c7:5e:63:a4:ca:c4: 57:f4:f2:71:bc:08:2d:22:81:01:f8:20:15:ec:1f: 61:8b:47:9d:95:ba:3b:53:c1:94:86:8d:ba:c9:7c: 1f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DC:BC:03:89:FE:2F:14:85:36:38:14:8A:5F:9D:25:3A:D2:E1:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa639eb9-e752-364f-81b9-63380059ea12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:c8:2c:32:3c:fa:54:c1:a3:76:ed:d0:f0:5b:90:c7:98:68: 1f:6e:0e:f0:2c:05:c5:14:ad:11:28:85:02:dc:fb:6f:a5:35: 98:c4:68:62:b2:27:dd:7e:b0:f7:17:72:01:4e:52:42:40:7e: 43:2f:57:e7:96:12:d4:f4:a1:de:db:d1:c1:44:7b:cf:58:b5: 8f:06:cd:73:05:ca:42:0a:65:f1:81:58:8e:46:70:a6:19:e9: 52:f0:00:59:5c:26:47:af:20:2f:d2:f4:f1:f0:98:17:55:d2: 8a:b5:d9:8b:b0:d3:ec:2b:f6:81:9c:e0:c7:33:9e:98:20:48: 54:e0:b8:45:3b:82:af:e1:41:cf:25:e7:ae:e3:77:8a:95:99: 7a:6b:5e:13:01:16:a4:52:6d:7d:9f:77:0b:24:fe:1a:fc:25: 8f:01:c4:a4:84:05:aa:57:a2:9f:07:90:d2:9d:5c:db:8f:74: f4:aa:20:8c:f2:6f:06:f1:d6:56:bb:0e:8c:d6:68:a1:da:dc: 2e:49:16:57:3b:4b:d0:09:60:6b:99:78:21:59:9f:ba:83:67: 17:f5:96:7d:7b:e2:f4:93:74:25:03:7d:b5:7a:dc:46:cf:74: 06:0f:0b:8a:96:47:e4:d3:02:93:b7:2f:f0:85:68:d3:d6:b6: 72:cc:0a:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3ticGkGx33GewjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MTI1NTNkNWEtMDY1Zi00MGJhLWFiM2EtMDI4ODVjYzYyNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+PVCwIkgfrmCoA7TyabPZu24fHeILRZ7h7E XnWSwZEXdfJUA+K6dCPykSXgcpczKvcX8JlHLIXOqusxEmBMehgCpDtbrDIufan5 dhjb/LZZV/OLgtNBJPjf3YOLu4CFe3xa0+GIlv3z5C1Xtj3nCAaJYZimzpIBV66r uNJeAmsKuO8EOfLq7cL68j+6RqlPEQAO9I4z6TAIeMj88ZMqMPsVqsAMG4klfQUe mq/oEvQT/faP+P1dg6NiQPTD5VCQMsS/MvamhCT8lkBpet0eJL3xNxjUIZEJyMzH XmOkysRX9PJxvAgtIoEB+CAV7B9hi0edlbo7U8GUho26yXwfHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFzcvAOJ/i8UhTY4FIpfnSU60uGlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE2MzllYjktZTc1Mi0z NjRmLTgxYjktNjMzODAwNTllYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDILDI8+lTBo3bt0PBbkMeYaB9uDvAsBcUUrREohQLc+2+lNZjE aGKyJ91+sPcXcgFOUkJAfkMvV+eWEtT0od7b0cFEe89YtY8GzXMFykIKZfGBWI5G cKYZ6VLwAFlcJkevIC/S9PHwmBdV0oq12Yuw0+wr9oGc4McznpggSFTguEU7gq/h Qc8l567jd4qVmXprXhMBFqRSbX2fdwsk/hr8JY8BxKSEBapXop8HkNKdXNuPdPSq IIzybwbx1la7DozWaKHa3C5JFlc7S9AJYGuZeCFZn7qDZxf1ln174vSTdCUDfbV6 3EbPdAYPC4qWR+TTApO3L/CFaNPWtnLMCgk= -----END CERTIFICATE-----Generated at Wed Aug 6 10:58:49 2025 by rpki-client