$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa File: cb21bf29-fafa-3421-90c2-08bd785a108e.roa (raw, json) Hash identifier: q4FJOUoH37TP3JjRJgnWAP87uLBblUZP5ouhMueHDeU= Subject key identifier: 15:1B:C4:40:EA:C5:1D:E2:AD:FC:7F:A2:36:C3:85:D4:E6:35:33:8A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63A1958D747978CFEE900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 36626 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3a:19:58:d7:47:97:8c:fe:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=408a69b7-d2e3-4cd2-adf6-3ad41abe857d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:64:3f:fd:39:1b:e9:2a:41:22:47:37:d2: db:84:76:12:ed:d7:92:66:18:09:49:ba:93:23:83: e8:5e:1f:06:b7:d7:84:1b:2b:67:83:03:a9:e0:f2: fc:ca:9e:c1:29:07:40:ed:46:26:6e:43:e1:be:a0: ab:c3:9f:82:44:dd:cb:7c:b2:b7:74:f2:02:2c:d4: 04:f0:f7:a8:85:a2:5a:9c:6b:3a:4a:18:01:dd:17: 76:5e:4c:f6:19:24:e2:8b:39:15:6f:4c:b1:fe:c1: 77:df:cb:b1:8d:7d:52:0f:7a:25:45:b1:59:93:c4: 9e:d7:3e:0e:ec:15:3f:e5:e0:a6:2f:4d:72:ac:73: cd:d6:ff:43:65:61:ec:ee:41:6e:58:cf:f7:50:73: 97:89:c4:07:bc:94:07:8b:e4:7a:3a:80:a1:5d:1a: 03:83:d8:0b:5f:28:ab:41:52:fc:5b:7d:20:60:b1: 4e:b0:99:eb:de:cf:ec:04:a4:18:80:7e:0b:00:4a: 84:a5:0f:98:81:81:58:65:50:7e:76:16:8f:b7:79: 38:7e:1e:78:70:ee:35:98:c1:2b:3a:48:ff:ba:07: 30:4c:e7:8a:43:86:5e:6c:c2:ea:24:5b:84:9a:32: fc:ff:22:b5:7c:f3:66:5b:a9:b6:a5:ae:c4:64:d3: dd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:C4:40:EA:C5:1D:E2:AD:FC:7F:A2:36:C3:85:D4:E6:35:33:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb21bf29-fafa-3421-90c2-08bd785a108e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5d:22:5c:57:ee:fa:5b:68:b2:97:fe:98:8a:f6:2f:21:f2: 11:7f:c8:33:70:35:e6:d7:a3:f2:9e:99:34:6a:13:7f:e4:0f: 69:56:81:08:f2:4d:1e:31:20:2d:ec:6b:de:34:03:f0:34:2b: 0d:c8:1d:bb:58:92:55:51:36:bd:44:4e:5f:00:e5:30:06:4d: 77:b6:c7:1b:75:4f:fb:01:29:64:31:ce:39:be:9e:64:0b:7e: 88:63:0f:48:45:ac:ca:04:7a:2b:86:2f:e5:59:ba:2e:ab:30: 35:f9:16:3b:4e:82:49:a5:cf:20:3f:5d:dc:3a:5b:69:9b:52: 3e:f4:7d:1c:25:7b:ee:34:13:8f:47:89:52:48:69:e4:98:da: 6e:64:c0:b1:06:10:ce:85:81:59:51:bb:4a:7a:84:1a:ce:31: 29:01:16:16:a5:87:27:98:df:82:84:d4:2a:92:8e:66:49:23: d7:de:b8:32:74:ed:b2:f9:d4:14:d0:9e:a9:00:f2:c0:4e:20: 6b:16:5f:ab:ce:45:70:1a:86:62:68:23:df:18:39:fb:62:d2: 60:c8:b5:68:85:e3:5c:2b:c9:bd:48:fc:e7:6e:f5:1d:ae:4f: ae:7a:a2:d0:b1:de:e8:83:d6:f9:ac:60:a7:f2:1f:76:c1:1c: 43:79:30:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75joZWNdHl4z+6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk NDA4YTY5YjctZDJlMy00Y2QyLWFkZjYtM2FkNDFhYmU4NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmJkP/05G+kqQSJHN9LbhHYS7deSZhgJSbqT I4PoXh8Gt9eEGytngwOp4PL8yp7BKQdA7UYmbkPhvqCrw5+CRN3LfLK3dPICLNQE 8PeohaJanGs6ShgB3Rd2Xkz2GSTiizkVb0yx/sF338uxjX1SD3olRbFZk8Se1z4O 7BU/5eCmL01yrHPN1v9DZWHs7kFuWM/3UHOXicQHvJQHi+R6OoChXRoDg9gLXyir QVL8W30gYLFOsJnr3s/sBKQYgH4LAEqEpQ+YgYFYZVB+dhaPt3k4fh54cO41mMEr Okj/ugcwTOeKQ4ZebMLqJFuEmjL8/yK1fPNmW6m2pa7EZNPdIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBUbxEDqxR3irfx/ojbDhdTmNTOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2IyMWJmMjktZmFmYS0z NDIxLTkwYzItMDhiZDc4NWExMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVdIlxX7vpbaLKX/piK9i8h8hF/yDNwNebXo/KemTRqE3/kD2lW gQjyTR4xIC3sa940A/A0Kw3IHbtYklVRNr1ETl8A5TAGTXe2xxt1T/sBKWQxzjm+ nmQLfohjD0hFrMoEeiuGL+VZui6rMDX5FjtOgkmlzyA/Xdw6W2mbUj70fRwle+40 E49HiVJIaeSY2m5kwLEGEM6FgVlRu0p6hBrOMSkBFhalhyeY34KE1CqSjmZJI9fe uDJ07bL51BTQnqkA8sBOIGsWX6vORXAahmJoI98YOfti0mDItWiF41wryb1I/Odu 9R2uT656otCx3uiD1vmsYKfyH3bBHEN5MBo= -----END CERTIFICATE-----Generated at Fri Aug 8 00:37:27 2025 by rpki-client