$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa File: b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa (raw, json) Hash identifier: jI07sMs6z1/mebq00aeQgQ64U0MvuBH48lhrkRanKyk= Subject key identifier: 88:B1:0A:A5:F3:1F:80:64:D7:09:CD:F0:7E:59:3D:61:C6:F5:1D:3A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62DF791AAD8B981E12B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 36628 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2d:f7:91:aa:d8:b9:81:e1:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=c669f95d-1f4b-472b-92f2-239f8769029e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:23:f9:35:a7:ac:80:9b:22:e7:b0:15:42: 12:87:eb:57:0d:ca:d5:88:25:21:f2:3a:93:45:c7: 8b:4a:a0:39:ab:8f:46:a6:77:2f:09:71:9f:c0:1a: 4c:eb:37:37:83:25:99:b0:fa:f3:15:f1:90:e9:d7: 06:55:8a:68:5f:c0:04:98:be:41:ca:09:52:bf:68: c3:d1:d4:5c:eb:5c:7f:c6:1b:49:b4:de:07:37:98: de:5b:66:ba:fb:c5:c9:8d:ea:70:ab:d3:9b:85:08: f9:e8:1b:ef:09:07:1a:4a:7d:1f:68:ce:80:3d:66: a5:e1:4b:48:97:93:87:03:14:6d:a2:84:f5:63:df: 2c:20:68:a0:6d:cc:f7:5b:1c:27:c3:7e:fe:9f:c1: 26:d4:44:b8:db:cf:95:89:56:82:73:1e:de:9d:99: c5:b9:64:28:96:f6:52:fa:49:75:b0:83:f8:32:70: a3:9b:f9:d5:37:cc:23:00:3d:2a:5b:6c:08:f9:c3: a6:06:2f:2c:9c:a0:2c:62:c5:2e:ab:7f:ac:d5:4a: e4:31:a7:f4:6a:33:64:61:b2:b0:43:f5:91:f6:a0: ac:4a:f1:57:2a:a2:a1:59:6a:5d:5f:12:18:ec:15: af:27:89:a2:70:89:d8:f1:fd:8c:ad:6a:90:37:9d: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B1:0A:A5:F3:1F:80:64:D7:09:CD:F0:7E:59:3D:61:C6:F5:1D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9ecb452-0b6f-3eba-8ae6-1f818fae8c70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:9f:23:0c:c0:ea:76:43:e3:64:6a:f1:8e:5e:5d:aa:e1:a7: d7:9f:38:d0:25:f1:fd:93:72:e2:83:d9:60:a6:3a:67:0e:87: a6:da:df:a5:77:8e:90:3c:01:04:39:3a:f3:3b:6f:fe:ad:a2: fe:a1:8a:8d:49:b5:09:ad:6d:d2:fa:30:5c:51:95:5a:97:03: 11:c6:38:77:f2:1f:00:09:fe:75:63:8a:7b:ce:81:59:17:f4: 5a:90:46:a6:a2:9d:dd:a8:e7:cd:ac:ba:2e:99:8e:de:fe:82: a4:43:ec:f6:3e:a2:11:49:89:c7:2b:68:3a:b9:66:5f:43:6f: 9e:f6:d6:b7:f0:e2:5e:03:15:36:85:66:1c:8c:73:70:bc:9d: 96:0b:83:ed:bf:ea:71:8a:4c:29:d0:81:e1:9d:6f:91:3e:3c: dd:77:c1:00:40:ab:18:7e:83:ba:1e:a1:bb:55:ee:82:14:fc: d1:03:20:18:04:f3:f9:ad:a4:27:e1:72:00:27:4d:d0:b2:10: ea:9c:db:2a:1a:6c:4e:ea:95:42:e5:09:b4:d3:88:6d:9e:3f: 23:de:12:05:0a:71:1b:74:0a:05:0f:74:75:96:5a:43:80:af: df:5f:c6:b5:94:3f:20:08:7b:0a:d9:84:dd:3c:a5:cb:9c:a8: 8c:69:a0:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3ti33karYuYHhK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk YzY2OWY5NWQtMWY0Yi00NzJiLTkyZjItMjM5Zjg3NjkwMjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BIj+TWnrICbIuewFUISh+tXDcrViCUh8jqT RceLSqA5q49GpncvCXGfwBpM6zc3gyWZsPrzFfGQ6dcGVYpoX8AEmL5ByglSv2jD 0dRc61x/xhtJtN4HN5jeW2a6+8XJjepwq9ObhQj56BvvCQcaSn0faM6APWal4UtI l5OHAxRtooT1Y98sIGigbcz3Wxwnw37+n8Em1ES428+ViVaCcx7enZnFuWQolvZS +kl1sIP4MnCjm/nVN8wjAD0qW2wI+cOmBi8snKAsYsUuq3+s1UrkMaf0ajNkYbKw Q/WR9qCsSvFXKqKhWWpdXxIY7BWvJ4micInY8f2MrWqQN50arQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIixCqXzH4Bk1wnN8H5ZPWHG9R06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjllY2I0NTItMGI2Zi0z ZWJhLThhZTYtMWY4MThmYWU4YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyfIwzA6nZD42Rq8Y5eXarhp9efONAl8f2TcuKD2WCmOmcOh6ba 36V3jpA8AQQ5OvM7b/6tov6hio1JtQmtbdL6MFxRlVqXAxHGOHfyHwAJ/nVjinvO gVkX9FqQRqaind2o582sui6Zjt7+gqRD7PY+ohFJiccraDq5Zl9Db5721rfw4l4D FTaFZhyMc3C8nZYLg+2/6nGKTCnQgeGdb5E+PN13wQBAqxh+g7oeobtV7oIU/NED IBgE8/mtpCfhcgAnTdCyEOqc2yoabE7qlULlCbTTiG2ePyPeEgUKcRt0CgUPdHWW WkOAr99fxrWUPyAIewrZhN08pcucqIxpoH8= -----END CERTIFICATE-----Generated at Wed Aug 6 00:35:37 2025 by rpki-client