$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3addb24-75f4-32e5-a023-5326efd7eac8.roa File: b3addb24-75f4-32e5-a023-5326efd7eac8.roa (raw, json) Hash identifier: JhWSVTGuoBy/bXT202zclbCi4KFTWaI/8pqMXrk5MdM= Subject key identifier: CE:BB:A1:27:56:20:14:CD:14:63:D3:80:62:89:97:39:E3:36:85:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE6402AFEE6FA0CC6CC7600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3addb24-75f4-32e5-a023-5326efd7eac8.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396568 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:40:2a:fe:e6:fa:0c:c6:cc:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=2c302ac7-aef6-4012-bbff-dd41e1e2385c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:1b:e0:3d:08:74:1d:e4:16:b1:f9:bc:30:b6: 0d:5c:58:83:d1:40:17:74:2f:46:17:5f:56:b9:88: 3c:02:5a:7c:68:04:3e:9c:1a:4c:b6:a7:66:da:ad: c7:71:02:6b:08:6c:29:bb:74:44:2e:1e:56:1b:e3: 40:f8:a4:83:51:02:fb:df:4c:56:1e:42:2c:4e:3c: 05:6a:ed:06:b2:1c:1c:c5:c3:2f:cc:52:01:8d:70: 54:68:e7:3c:6a:14:6d:7a:67:d5:09:b5:3c:9a:d2: e1:c2:41:2c:28:97:ed:ca:e5:1b:c8:cf:14:0c:b9: 87:69:5b:58:ff:d7:2c:37:42:7f:02:10:af:99:23: bd:db:16:71:53:06:f6:34:9a:5a:ae:23:b6:fc:3a: 5d:e7:85:d5:04:d6:77:1e:a8:80:87:c7:c7:1b:0a: 07:f4:eb:40:4a:cb:6a:c3:1f:c0:35:ee:af:b6:b5: 3a:06:8e:aa:9d:7d:2f:0b:15:60:8d:66:f4:8b:15: 48:46:a9:a0:1e:4a:31:8b:e9:8a:51:ef:0d:4a:4c: 21:6e:e6:cd:6d:6f:8b:08:3c:43:39:a6:7d:be:fd: 14:45:63:a1:10:f0:d5:a8:17:44:fb:94:e6:75:c5: f2:58:30:56:e3:bc:ef:a2:3f:1f:32:61:c9:84:44: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BB:A1:27:56:20:14:CD:14:63:D3:80:62:89:97:39:E3:36:85:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3addb24-75f4-32e5-a023-5326efd7eac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0b:67:2b:1a:c4:99:b7:53:83:ef:a9:a2:7b:01:e0:99:f1: d8:b6:bc:5f:c0:1a:45:c4:46:fb:f8:95:d7:e7:10:7f:5e:f6: 62:4d:97:fc:4f:72:57:bc:63:78:0f:f6:51:f8:ec:82:a7:92: 85:91:33:57:20:c6:55:f2:c0:41:fb:85:42:80:ef:ff:43:5a: 35:82:9b:8c:0b:ef:a5:17:1e:c7:66:a3:a2:9a:4f:0c:c4:7d: be:e5:7b:05:f2:26:f8:7d:38:d2:f9:d6:66:3a:1e:78:21:bb: 49:86:a1:c0:1f:a5:9e:60:da:52:42:8d:65:b2:c4:92:bd:f0: 24:92:41:20:46:a8:0d:e0:84:bd:9e:a0:b9:5a:73:78:4c:4e: 73:7a:cf:c1:59:31:2a:a4:c9:63:92:0b:b5:79:96:14:46:46: 00:fa:47:31:a7:80:8c:30:fe:97:be:87:48:c0:ab:64:59:23: 8d:a4:e1:06:2d:8d:69:21:48:c7:d8:23:09:7f:5e:ee:4b:04: 2f:e1:b0:cf:29:97:5f:a4:17:5e:62:a1:0b:2c:2a:e1:70:7a: df:f2:ac:ae:78:be:38:ef:ac:04:ef:c5:f9:07:8a:d4:17:df: 4a:a4:8d:0d:ef:43:10:f9:23:76:9d:1a:5b:41:f1:84:5b:54: b0:74:97:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75kAq/ub6DMbMdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MmMzMDJhYzctYWVmNi00MDEyLWJiZmYtZGQ0MWUxZTIzODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xvgPQh0HeQWsfm8MLYNXFiD0UAXdC9GF19W uYg8Alp8aAQ+nBpMtqdm2q3HcQJrCGwpu3RELh5WG+NA+KSDUQL730xWHkIsTjwF au0GshwcxcMvzFIBjXBUaOc8ahRtemfVCbU8mtLhwkEsKJftyuUbyM8UDLmHaVtY /9csN0J/AhCvmSO92xZxUwb2NJpariO2/Dpd54XVBNZ3HqiAh8fHGwoH9OtASstq wx/ANe6vtrU6Bo6qnX0vCxVgjWb0ixVIRqmgHkoxi+mKUe8NSkwhbubNbW+LCDxD OaZ9vv0URWOhEPDVqBdE+5TmdcXyWDBW47zvoj8fMmHJhETxnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM67oSdWIBTNFGPTgGKJlznjNoXeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjNhZGRiMjQtNzVmNC0z MmU1LWEwMjMtNTMyNmVmZDdlYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJYLZysaxJm3U4PvqaJ7AeCZ8di2vF/AGkXERvv4ldfnEH9e9mJN l/xPcle8Y3gP9lH47IKnkoWRM1cgxlXywEH7hUKA7/9DWjWCm4wL76UXHsdmo6Ka TwzEfb7lewXyJvh9ONL51mY6Hnghu0mGocAfpZ5g2lJCjWWyxJK98CSSQSBGqA3g hL2eoLlac3hMTnN6z8FZMSqkyWOSC7V5lhRGRgD6RzGngIww/pe+h0jAq2RZI42k 4QYtjWkhSMfYIwl/Xu5LBC/hsM8pl1+kF15ioQssKuFwet/yrK54vjjvrATvxfkH itQX30qkjQ3vQxD5I3adGltB8YRbVLB0lzc= -----END CERTIFICATE-----Generated at Wed Aug 6 05:11:59 2025 by rpki-client