$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2ecfdf5-a318-3c1c-934e-bd09b5d92fba.roa File: c2ecfdf5-a318-3c1c-934e-bd09b5d92fba.roa (raw, json) Hash identifier: fcx8Rmac/aG2I2TFzWWgu5d52MOSbmvfvqy9R4Bg+HM= Subject key identifier: 53:E3:A8:C3:DC:47:CA:DD:8D:FA:2E:F3:04:D6:38:5F:7F:31:CD:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63E93D8AF35D4A00DB270 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2ecfdf5-a318-3c1c-934e-bd09b5d92fba.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396573 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3e:93:d8:af:35:d4:a0:0d:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=025e12ff-2a39-40f1-b087-ce842b174268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a0:1e:42:80:7f:39:82:af:7f:73:37:08:46: 5f:f1:40:4b:04:ab:47:c5:c7:45:23:33:1c:23:a1: 55:68:c2:3d:a0:57:58:de:5b:0d:e4:4c:1c:b0:bc: 95:db:79:58:a7:a9:44:fe:74:15:b5:09:9d:7e:fb: c9:cf:4d:4e:67:93:d9:44:9a:73:14:dd:bf:a2:e9: 12:dd:c2:6e:49:6b:3a:ae:37:e9:e5:88:5a:86:fe: 15:d5:3c:76:c9:90:04:2c:48:76:bf:49:ee:b2:7a: ec:45:00:20:45:71:7c:31:87:5b:6a:a1:99:41:21: 91:a6:51:3f:c8:24:da:53:f9:92:f1:35:70:e6:cc: 8b:e4:f1:86:49:15:71:1a:ff:56:51:4f:47:83:f2: da:29:e5:ae:0c:82:12:98:0f:26:d7:8f:4b:9d:cf: 70:f4:c4:e9:d7:4f:60:7b:ac:19:56:f0:51:3a:d0: 2d:05:4d:87:62:20:30:27:1d:09:a5:90:f8:47:95: 13:9d:74:0f:a6:b5:2f:4e:c2:dd:93:e3:7f:b7:d4: 42:bd:2c:23:8d:e4:67:39:e6:06:97:e8:77:a9:ef: 0a:57:5f:3f:37:06:f4:ac:4f:ac:67:93:f8:38:bb: cd:d9:bf:0e:8e:97:1c:ab:ee:ce:8c:ce:76:a1:00: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E3:A8:C3:DC:47:CA:DD:8D:FA:2E:F3:04:D6:38:5F:7F:31:CD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2ecfdf5-a318-3c1c-934e-bd09b5d92fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:3d:6e:ec:e7:20:f6:ba:04:b2:b8:23:bc:d2:50:90:cc:f2: be:bf:75:08:2e:d4:c2:c5:eb:de:2a:cb:f5:1e:cc:47:ec:e1: 87:86:11:f8:2a:8d:5a:20:0d:3f:04:13:5e:9a:66:e1:6e:da: a4:52:15:66:ca:f9:43:39:e2:e1:6e:04:14:c1:3c:12:08:02: ce:e0:9d:e6:05:74:2e:d9:eb:fa:e5:84:02:ba:6e:52:53:df: 47:ed:e3:ce:66:45:0d:1b:29:2d:da:ac:96:36:23:ce:11:9a: e6:19:fa:fd:af:16:ca:dd:21:7e:a9:8a:ef:5a:4d:2e:ce:a1: 12:30:6d:6d:44:43:11:3f:03:3a:09:c9:d3:a8:a4:a3:5a:0f: 7d:34:c4:6f:9c:b3:64:ad:60:bd:7d:55:f1:94:0d:bc:56:a3: f9:93:58:99:57:55:74:9c:47:33:52:95:b0:a6:1b:5a:f6:42: 38:fe:50:d2:ce:90:f9:18:de:41:11:02:11:84:17:b3:9d:99: 51:4f:c2:94:54:a7:79:05:65:92:b7:fd:1b:ca:2c:a3:22:a3: 85:78:ef:e2:4b:0a:76:60:63:ab:4e:71:f6:31:65:3b:ae:fd: dc:e4:dc:7a:1a:92:27:81:e3:d4:75:9a:4e:7b:b8:e8:2d:aa: f5:57:8c:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75j6T2K811KANsnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MDI1ZTEyZmYtMmEzOS00MGYxLWIwODctY2U4NDJiMTc0MjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKAeQoB/OYKvf3M3CEZf8UBLBKtHxcdFIzMc I6FVaMI9oFdY3lsN5EwcsLyV23lYp6lE/nQVtQmdfvvJz01OZ5PZRJpzFN2/oukS 3cJuSWs6rjfp5Yhahv4V1Tx2yZAELEh2v0nusnrsRQAgRXF8MYdbaqGZQSGRplE/ yCTaU/mS8TVw5syL5PGGSRVxGv9WUU9Hg/LaKeWuDIISmA8m149Lnc9w9MTp109g e6wZVvBROtAtBU2HYiAwJx0JpZD4R5UTnXQPprUvTsLdk+N/t9RCvSwjjeRnOeYG l+h3qe8KV18/Nwb0rE+sZ5P4OLvN2b8Ojpccq+7OjM52oQCgoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFPjqMPcR8rdjfou8wTWOF9/Mc0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJlY2ZkZjUtYTMxOC0z YzFjLTkzNGUtYmQwOWI1ZDkyZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALU9buznIPa6BLK4I7zSUJDM8r6/dQgu1MLF694qy/UezEfs4YeG EfgqjVogDT8EE16aZuFu2qRSFWbK+UM54uFuBBTBPBIIAs7gneYFdC7Z6/rlhAK6 blJT30ft485mRQ0bKS3arJY2I84RmuYZ+v2vFsrdIX6piu9aTS7OoRIwbW1EQxE/ AzoJydOopKNaD300xG+cs2StYL19VfGUDbxWo/mTWJlXVXScRzNSlbCmG1r2Qjj+ UNLOkPkY3kERAhGEF7OdmVFPwpRUp3kFZZK3/RvKLKMio4V47+JLCnZgY6tOcfYx ZTuu/dzk3HoakieB49R1mk57uOgtqvVXjM4= -----END CERTIFICATE-----Generated at Tue Aug 5 08:21:25 2025 by rpki-client