$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa File: ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa (raw, json) Hash identifier: fV/HLa51hkBKzgQDx2vi0tyqC2Mu4yOzjT57ieIGDLI= Subject key identifier: B6:6E:7F:28:1C:D7:00:6A:CA:A2:2B:10:14:F6:FD:66:44:92:57:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62FA00B4AD2293B5E8700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396551 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2f:a0:0b:4a:d2:29:3b:5e:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=45d0a6b9-aed0-42ea-85e2-bf5494ae720d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f7:0d:57:d2:98:ce:51:d1:c8:27:79:d2:3f: 0c:b0:4a:a3:87:62:0a:92:36:ed:a0:e4:d2:d0:14: 1d:f0:6a:49:95:67:72:82:70:96:2f:3e:20:10:55: e1:7d:0d:dd:ad:dd:93:91:21:39:14:76:d8:6d:b0: a1:c1:20:78:79:01:88:ba:54:79:aa:f4:80:20:c0: f4:f7:80:6d:23:ca:b6:97:b9:bd:0c:c5:f7:6f:9f: 86:75:67:16:2d:13:de:01:2f:08:ce:15:bc:b9:ef: 76:a6:ca:3a:47:ec:fa:dc:e7:ab:47:4e:83:af:ee: 33:78:1f:3b:da:c8:bd:eb:4f:bc:3e:4d:a1:20:40: bb:ad:dc:b5:82:9d:53:68:37:18:51:84:28:7c:82: 6a:18:88:42:1e:70:e5:be:6c:98:a6:b4:51:ba:5d: 06:c6:9a:87:dc:2f:ba:90:f2:7b:e1:8f:bf:a0:f9: 51:ad:3b:d5:dd:41:9a:f0:25:fa:c8:01:38:da:5e: b2:0c:78:5e:78:4e:4b:c8:ce:c3:b7:9f:f8:b5:1a: 23:81:f4:22:99:a6:da:3e:83:19:c9:5f:4f:7f:64: 1b:24:9e:68:a7:9d:96:ae:cc:ca:c3:70:59:99:e1: bb:f1:b3:7e:92:8e:e2:ee:63:1a:6d:b5:74:1d:69: d6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:6E:7F:28:1C:D7:00:6A:CA:A2:2B:10:14:F6:FD:66:44:92:57:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:75:01:cd:58:5d:6e:b2:5e:8f:8a:bc:bb:e3:14:a9:9b:87: da:9a:c5:0a:64:b6:5d:f6:d8:63:cb:6b:b0:66:77:31:03:bf: 59:13:a2:4a:37:fc:53:ed:a3:e5:31:5b:74:94:50:0c:6b:03: 23:46:ec:7c:d7:92:64:6c:8f:6e:6c:f7:05:5b:08:d6:51:18: d9:a5:a8:9d:3c:5f:ea:ec:62:63:0e:71:c1:5a:e0:57:59:93: d2:c6:b8:99:34:09:63:bf:bf:ad:51:31:dd:8c:29:68:32:18: 03:d4:85:96:dd:77:9b:d0:99:f0:55:1a:56:09:5e:e3:76:b1: d1:64:ef:bc:34:33:fa:47:df:f8:eb:7d:dd:df:3a:4d:0e:a9: 9c:53:24:80:f5:46:c4:d1:53:92:3c:bd:d3:aa:d4:d9:a3:5e: f1:d9:8e:36:16:83:f4:0f:14:df:f6:27:44:4b:13:c7:d5:95: 70:35:9c:82:cb:25:89:b6:06:86:59:7b:d0:c5:21:14:5e:9a: 01:58:da:43:9a:50:18:4c:66:00:d4:ed:e6:75:68:e1:23:ea: 27:fb:31:1b:04:5a:23:4e:af:da:39:25:64:9f:3c:91:0b:87: 63:b3:b5:8b:cf:e5:75:8a:bf:d3:c2:c5:6a:01:f2:78:c6:b2: 7f:c1:0f:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3ti+gC0rSKTtehwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NDVkMGE2YjktYWVkMC00MmVhLTg1ZTItYmY1NDk0YWU3MjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/cNV9KYzlHRyCd50j8MsEqjh2IKkjbtoOTS 0BQd8GpJlWdygnCWLz4gEFXhfQ3drd2TkSE5FHbYbbChwSB4eQGIulR5qvSAIMD0 94BtI8q2l7m9DMX3b5+GdWcWLRPeAS8IzhW8ue92pso6R+z63OerR06Dr+4zeB87 2si960+8Pk2hIEC7rdy1gp1TaDcYUYQofIJqGIhCHnDlvmyYprRRul0GxpqH3C+6 kPJ74Y+/oPlRrTvV3UGa8CX6yAE42l6yDHheeE5LyM7Dt5/4tRojgfQimabaPoMZ yV9Pf2QbJJ5op52WrszKw3BZmeG78bN+ko7i7mMabbV0HWnWhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLZufygc1wBqyqIrEBT2/WZEkldPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWU4NzhmOTgtOGEwYS0z NDc0LWJkN2ItYjc0MzgxYmExYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFV1Ac1YXW6yXo+KvLvjFKmbh9qaxQpktl322GPLa7BmdzEDv1kT oko3/FPto+UxW3SUUAxrAyNG7HzXkmRsj25s9wVbCNZRGNmlqJ08X+rsYmMOccFa 4FdZk9LGuJk0CWO/v61RMd2MKWgyGAPUhZbdd5vQmfBVGlYJXuN2sdFk77w0M/pH 3/jrfd3fOk0OqZxTJID1RsTRU5I8vdOq1NmjXvHZjjYWg/QPFN/2J0RLE8fVlXA1 nILLJYm2BoZZe9DFIRRemgFY2kOaUBhMZgDU7eZ1aOEj6if7MRsEWiNOr9o5JWSf PJELh2OztYvP5XWKv9PCxWoB8njGsn/BDxM= -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:03 2025 by rpki-client