$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff8fb61-50cf-3f79-b308-83f488675825.roa File: aff8fb61-50cf-3f79-b308-83f488675825.roa (raw, json) Hash identifier: PTfFwZUJd3SDTvAaHBEY45IzUdZe7eATOkjPc2Lug1Q= Subject key identifier: 2B:B7:5A:51:44:05:CB:05:28:2C:C1:06:35:F1:00:99:5A:51:C6:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63CC5FAF1C20D8D17A470 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff8fb61-50cf-3f79-b308-83f488675825.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 397204 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3c:c5:fa:f1:c2:0d:8d:17:a4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=6620cb1e-632a-4463-a919-c1307f414cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:bb:e3:c5:46:27:d3:86:d0:d5:09:fb:4d: 03:79:76:6a:68:e5:ad:8b:bc:4f:13:3a:f1:1e:d8: 78:07:0a:15:a9:d8:78:8e:e3:aa:fb:10:7b:0f:c6: de:bd:c0:6b:70:e9:ae:f4:5b:84:60:6b:0a:17:cb: 1a:cf:1f:60:bc:c8:a5:b6:7d:28:9a:36:5b:7c:39: c8:2c:02:c1:c3:0a:ed:db:38:53:36:51:4f:d1:05: c0:19:c8:9e:79:94:cb:55:c1:37:5f:e7:69:d3:12: a0:7d:43:47:60:59:7b:4e:88:4c:50:21:3b:5e:94: 3e:33:55:01:a7:fd:36:af:8e:58:1c:57:73:05:04: 97:0e:93:e3:ba:1d:75:85:e9:de:00:fb:c0:47:4d: 8d:d6:38:f9:ea:c4:12:b9:66:9b:45:e3:4b:0b:9c: 49:b9:9a:b8:e9:07:4f:78:79:6f:1c:5f:0c:51:65: cd:dd:0c:b6:b5:5a:61:97:1a:94:4f:a4:07:83:22: 18:ca:b1:e0:22:3c:87:c6:02:4b:ca:21:a8:cf:b5: 5d:89:a0:a8:a4:0f:df:01:38:bb:21:9c:dc:31:1a: 90:24:93:b1:46:63:f4:fd:ba:35:86:84:46:a5:09: e6:a8:5a:3d:ea:de:e0:44:93:06:fa:67:a8:88:76: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:5A:51:44:05:CB:05:28:2C:C1:06:35:F1:00:99:5A:51:C6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aff8fb61-50cf-3f79-b308-83f488675825.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a6:e8:1b:6a:9f:e3:ea:5a:32:71:c0:08:66:30:fb:0b:bb: 40:87:d7:d4:32:8d:1a:97:20:38:c3:77:05:57:98:ce:85:59: d8:09:54:d4:68:32:11:5d:11:2e:15:cf:14:27:65:b3:79:a6: 26:08:f7:e3:b3:2f:01:2c:ed:3c:c8:ea:ef:e9:39:8e:e1:d7: ae:e9:ad:48:59:5e:fe:3d:50:57:44:63:df:01:a7:7e:8b:70: 16:92:09:9d:fa:c9:11:aa:68:0f:b4:bb:02:d7:59:50:80:d1: 9e:84:00:61:da:60:57:31:40:e3:2f:62:0b:de:0f:40:6e:4f: b8:eb:8e:0a:7e:7d:74:82:c0:1e:d9:c2:3f:0e:7b:2c:fc:fc: 9b:75:a9:f5:e8:22:6a:59:78:74:a7:3a:09:4b:b7:ca:16:1e: 03:c6:85:87:87:1c:6b:55:a0:59:b3:08:c4:f2:90:fe:2e:42: e6:61:8f:d3:ad:fc:c2:0b:6e:b4:b6:91:b0:59:a2:14:89:c0: 7d:dc:62:9c:bc:cf:11:e3:9f:d8:13:df:cc:e9:d0:44:4f:45: e6:05:5d:f9:b8:50:b4:b2:32:78:be:8d:7d:ff:71:1d:9a:2f: 53:42:85:08:76:93:3b:31:33:42:dd:6e:25:ca:26:b6:97:5e: 5d:94:cd:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jzF+vHCDY0XpHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk NjYyMGNiMWUtNjMyYS00NDYzLWE5MTktYzEzMDdmNDE0Y2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA116748VGJ9OG0NUJ+00DeXZqaOWti7xPEzrx Hth4BwoVqdh4juOq+xB7D8bevcBrcOmu9FuEYGsKF8sazx9gvMiltn0omjZbfDnI LALBwwrt2zhTNlFP0QXAGcieeZTLVcE3X+dp0xKgfUNHYFl7TohMUCE7XpQ+M1UB p/02r45YHFdzBQSXDpPjuh11heneAPvAR02N1jj56sQSuWabReNLC5xJuZq46QdP eHlvHF8MUWXN3Qy2tVphlxqUT6QHgyIYyrHgIjyHxgJLyiGoz7VdiaCopA/fATi7 IZzcMRqQJJOxRmP0/bo1hoRGpQnmqFo96t7gRJMG+meoiHY2NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCu3WlFEBcsFKCzBBjXxAJlaUcZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWZmOGZiNjEtNTBjZi0z Zjc5LWIzMDgtODNmNDg4Njc1ODI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOm6Btqn+PqWjJxwAhmMPsLu0CH19QyjRqXIDjDdwVXmM6FWdgJ VNRoMhFdES4VzxQnZbN5piYI9+OzLwEs7TzI6u/pOY7h167prUhZXv49UFdEY98B p36LcBaSCZ36yRGqaA+0uwLXWVCA0Z6EAGHaYFcxQOMvYgveD0BuT7jrjgp+fXSC wB7Zwj8Oeyz8/Jt1qfXoImpZeHSnOglLt8oWHgPGhYeHHGtVoFmzCMTykP4uQuZh j9Ot/MILbrS2kbBZohSJwH3cYpy8zxHjn9gT38zp0ERPReYFXfm4ULSyMni+jX3/ cR2aL1NChQh2kzsxM0LdbiXKJraXXl2UzeY= -----END CERTIFICATE-----Generated at Fri Aug 8 20:41:01 2025 by rpki-client