$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fff2c5-826c-3fe2-9bb9-262191b1151e.roa File: c4fff2c5-826c-3fe2-9bb9-262191b1151e.roa (raw, json) Hash identifier: XTtml8DrRuHE50orcl5Rg+iZuid9MeJ+4/CeI5vz2+s= Subject key identifier: 2D:74:51:71:1D:54:AE:0E:9C:7F:01:6A:A6:E7:27:06:55:90:8B:96 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63C5C4A34DE94199D1C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fff2c5-826c-3fe2-9bb9-262191b1151e.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 40647 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3c:5c:4a:34:de:94:19:9d:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=7dd7b81e-3c34-4207-a7d1-fb781524bc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:7f:d5:63:11:0b:29:b6:1f:f2:11:64:39: cb:24:72:64:99:d3:b4:12:50:b5:26:1c:89:08:d0: e5:af:76:fe:24:f8:2f:bc:6e:17:85:56:74:54:60: 6e:e1:b8:57:81:90:ce:f6:a0:aa:46:4f:0f:27:f6: f6:2e:c4:91:8e:07:17:f8:04:d8:ce:02:3b:a1:87: 06:bf:fb:b9:18:1c:b6:c1:b8:bc:ae:95:80:81:2f: 67:fe:0d:e1:99:4e:80:9a:92:46:c8:7a:3b:81:a8: 26:6b:b7:55:bc:8b:ab:61:b7:ca:a9:62:8b:f9:ac: da:14:c3:03:6f:19:9a:a4:d3:5a:1a:25:da:cd:74: d0:f5:3f:fa:bd:98:9a:ed:1f:d1:2d:04:2c:03:3c: 19:92:b5:f1:f9:81:3a:0b:c7:04:c9:50:a1:8f:e7: fd:6c:dc:20:81:87:e7:da:fa:43:35:53:5d:b9:b3: 94:62:3b:c6:7f:c4:c5:63:76:5e:2e:a8:79:17:64: 8c:a6:96:7b:60:75:b8:10:c9:90:97:ed:70:6f:0d: 97:86:fb:d1:09:d0:78:ad:b6:b8:ab:05:85:92:fe: ae:66:f2:4f:71:6b:70:60:54:40:1a:43:e1:6e:d2: 6c:98:c0:2b:27:db:34:a4:15:a5:fd:89:8a:f9:51: 3d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:74:51:71:1D:54:AE:0E:9C:7F:01:6A:A6:E7:27:06:55:90:8B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4fff2c5-826c-3fe2-9bb9-262191b1151e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:66:56:01:5d:7a:e7:3c:06:4e:5f:e1:bf:e8:4e:40:2b:bd: e1:2a:9e:af:f7:64:21:1a:f6:e5:dd:2d:98:08:51:5f:98:fd: d0:00:27:81:14:28:49:05:18:4f:07:5a:b7:71:8e:1b:cf:8c: d5:27:64:88:38:51:a6:ad:30:ee:17:d2:7f:b8:e9:8f:65:9f: f2:cc:44:d3:3a:02:01:bd:e7:e5:12:0d:a7:25:1b:83:5f:b7: 88:6c:4c:a3:23:a8:84:1d:a2:4b:f3:3a:1f:9b:3a:e7:0d:73: f2:25:f5:ee:a3:61:80:6c:7b:1f:72:d3:aa:c7:de:29:a0:88: 5c:75:98:c5:d4:9d:9f:b0:bf:c6:84:78:49:ee:9e:d4:0c:51: 8b:c8:a1:4d:3a:45:ae:c6:ae:af:52:66:24:dd:9d:c1:42:44: ae:49:f9:88:71:a7:09:68:bf:7a:33:25:02:cd:f4:08:67:0c: fb:a3:7f:db:96:0c:2d:7c:11:0d:c5:09:95:7d:b9:f0:a8:43: e4:7e:28:4f:4f:c9:01:16:14:23:f0:b6:2a:02:81:21:8c:69: c0:d7:e0:fe:47:aa:24:0f:63:8a:60:27:a2:30:b2:76:3b:15: 43:1b:0d:09:89:a8:0c:77:a0:7e:44:30:c8:52:aa:58:22:54: 33:73:26:88 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jxcSjTelBmdHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk N2RkN2I4MWUtM2MzNC00MjA3LWE3ZDEtZmI3ODE1MjRiYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLV/1WMRCym2H/IRZDnLJHJkmdO0ElC1JhyJ CNDlr3b+JPgvvG4XhVZ0VGBu4bhXgZDO9qCqRk8PJ/b2LsSRjgcX+ATYzgI7oYcG v/u5GBy2wbi8rpWAgS9n/g3hmU6AmpJGyHo7gagma7dVvIurYbfKqWKL+azaFMMD bxmapNNaGiXazXTQ9T/6vZia7R/RLQQsAzwZkrXx+YE6C8cEyVChj+f9bNwggYfn 2vpDNVNdubOUYjvGf8TFY3ZeLqh5F2SMppZ7YHW4EMmQl+1wbw2XhvvRCdB4rba4 qwWFkv6uZvJPcWtwYFRAGkPhbtJsmMArJ9s0pBWl/YmK+VE9pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC10UXEdVK4OnH8BaqbnJwZVkIuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzRmZmYyYzUtODI2Yy0z ZmUyLTliYjktMjYyMTkxYjExNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHtmVgFdeuc8Bk5f4b/oTkArveEqnq/3ZCEa9uXdLZgIUV+Y/dAA J4EUKEkFGE8HWrdxjhvPjNUnZIg4UaatMO4X0n+46Y9ln/LMRNM6AgG95+USDacl G4Nft4hsTKMjqIQdokvzOh+bOucNc/Il9e6jYYBsex9y06rH3imgiFx1mMXUnZ+w v8aEeEnuntQMUYvIoU06Ra7Grq9SZiTdncFCRK5J+Yhxpwlov3ozJQLN9AhnDPuj f9uWDC18EQ3FCZV9ufCoQ+R+KE9PyQEWFCPwtioCgSGMacDX4P5HqiQPY4pgJ6Iw snY7FUMbDQmJqAx3oH5EMMhSqlgiVDNzJog= -----END CERTIFICATE-----Generated at Wed Aug 6 04:05:21 2025 by rpki-client