$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa File: b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa (raw, json) Hash identifier: RogzdAVajLsTP0F8kcnm5j4Ub54Vn4ZNd1+6lgohXSU= Subject key identifier: 19:B1:DB:6D:20:A2:04:2A:47:3B:83:CE:E4:4C:02:6D:A4:AC:77:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB22174FE7B967480CF50E430 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 0 IP address blocks: 2001:500:138::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:21:74:fe:7b:96:74:80:cf:50:e4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=8f097a7c-4417-4739-95fd-be79e7f9cf3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:4e:0d:62:06:07:89:c0:bb:d2:c6:72:30: d1:d4:ed:fd:a5:70:61:a7:7b:27:34:fe:37:55:f2: 82:2c:0a:7d:c7:0d:0a:5f:77:4b:4e:6d:18:d5:f7: aa:3a:22:fd:04:c8:ed:34:04:f4:35:65:73:d7:60: 40:55:32:8e:42:b8:20:3b:5f:30:86:e6:d7:82:aa: 73:48:34:59:7a:d3:29:6a:30:7d:81:fc:cd:16:53: 02:bd:49:22:4b:21:ea:19:d6:07:a8:ac:cc:c6:af: 03:32:c6:bc:ed:68:03:18:b0:64:f3:7c:da:0e:63: 48:50:b3:f8:bb:7a:b7:28:3c:6f:c3:78:0f:51:04: d5:ed:98:62:86:ef:00:86:a7:a8:3e:d9:b2:8a:d3: b2:78:b3:e4:bc:4e:0a:d2:76:80:54:12:c7:ee:93: ca:91:c0:3b:ad:bf:01:13:1b:15:5c:9e:e0:fb:01: 38:bd:21:c1:43:d7:3d:20:53:b1:75:82:5c:88:94: bc:11:0a:bc:4d:6b:b4:12:ff:ca:07:50:cf:11:11: d0:b3:92:35:4b:c6:ab:2c:2e:97:44:19:8e:29:af: 10:58:4c:7d:24:70:31:cd:0a:ce:c8:55:7d:79:3b: 3f:70:fd:8f:c3:67:c2:4a:2b:d2:a2:69:59:bb:cf: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B1:DB:6D:20:A2:04:2A:47:3B:83:CE:E4:4C:02:6D:A4:AC:77:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b20ffa7c-e244-3c98-a1ec-df90ec8c23a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:138::/45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:54:73:9d:77:e2:ac:15:f0:9b:95:3f:aa:bd:b8:51:7f:ae: 4a:8f:0e:53:bf:67:4b:4b:84:5e:5a:61:22:b7:69:33:96:6a: fb:d8:bb:e5:db:7e:1e:1b:f5:77:26:22:66:3b:71:35:e4:ac: c3:ec:ee:b3:7d:1b:b3:18:e9:af:62:fc:2c:c3:7f:1c:90:0e: 93:f1:9c:ce:1f:02:ee:85:74:72:3d:37:5b:d6:8e:9a:98:f9: 8e:ae:5f:fa:14:ac:14:7a:73:ad:33:5c:f4:43:06:a3:3c:b5: 79:2e:cf:19:8c:ab:c8:80:07:31:4d:5a:4a:a9:fb:b9:07:79: eb:d3:58:63:61:a8:40:a9:9f:28:4e:fc:d6:4a:be:bc:2e:ce: 1a:7b:86:c9:34:36:da:a2:e8:2c:27:8d:af:08:56:3c:72:2d: 38:63:ad:6f:f8:11:2c:cd:eb:04:12:22:28:16:1e:41:ab:d0: d3:58:e8:3c:ff:24:8f:68:73:67:46:ff:48:17:05:61:e9:06: 58:65:4c:ef:9b:e7:fd:e2:0a:eb:5b:3a:00:3f:48:88:33:06: 30:9f:6e:16:a2:57:98:6b:c0:b0:af:4f:f0:86:b7:c8:9d:c3: 5c:3b:c0:a2:b2:94:f9:98:d4:9a:20:3e:60:03:49:8a:61:5d: c5:7b:82:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqyIXT+e5Z0gM9Q5DAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGYwOTdhN2MtNDQxNy00NzM5LTk1ZmQtYmU3OWU3ZjljZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/NODWIGB4nAu9LGcjDR1O39pXBhp3snNP43 VfKCLAp9xw0KX3dLTm0Y1feqOiL9BMjtNAT0NWVz12BAVTKOQrggO18whubXgqpz SDRZetMpajB9gfzNFlMCvUkiSyHqGdYHqKzMxq8DMsa87WgDGLBk83zaDmNIULP4 u3q3KDxvw3gPUQTV7Zhihu8AhqeoPtmyitOyeLPkvE4K0naAVBLH7pPKkcA7rb8B ExsVXJ7g+wE4vSHBQ9c9IFOxdYJciJS8EQq8TWu0Ev/KB1DPERHQs5I1S8arLC6X RBmOKa8QWEx9JHAxzQrOyFV9eTs/cP2Pw2fCSivSomlZu89FsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBmx220gogQqRzuDzuRMAm2krHccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjIwZmZhN2MtZTI0NC0z Yzk4LWExZWMtZGY5MGVjOGMyM2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDIAEFAAE4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACtUc5134qwV8JuVP6q9uFF/rkqPDlO/Z0tLhF5aYSK3aTOWavvY u+Xbfh4b9XcmImY7cTXkrMPs7rN9G7MY6a9i/CzDfxyQDpPxnM4fAu6FdHI9N1vW jpqY+Y6uX/oUrBR6c60zXPRDBqM8tXkuzxmMq8iABzFNWkqp+7kHeevTWGNhqECp nyhO/NZKvrwuzhp7hsk0Ntqi6Cwnja8IVjxyLThjrW/4ESzN6wQSIigWHkGr0NNY 6Dz/JI9oc2dG/0gXBWHpBlhlTO+b5/3iCutbOgA/SIgzBjCfbhaiV5hrwLCvT/CG t8idw1w7wKKylPmY1JogPmADSYphXcV7gig= -----END CERTIFICATE-----Generated at Tue Aug 5 20:12:42 2025 by rpki-client