$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa File: d0b35dbe-6222-3779-becf-77ca814b407a.roa (raw, json) Hash identifier: v+EIjw3lslZOzznUHHM/3J7Lt6IkbWREXAK/8Mme3/g= Subject key identifier: 23:63:00:0E:33:8B:0D:AF:FF:F7:B5:C3:58:18:18:BC:7B:A7:85:1D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63C94AC68EDF2F2515880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 36617 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3c:94:ac:68:ed:f2:f2:51:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=eca7b55c-5e42-4339-8f04-5935fcabc00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bd:1c:c2:ac:e3:a8:67:ba:8d:b5:41:6d:da: 13:80:d4:9e:cd:35:1a:f4:f2:bf:9a:0c:53:56:3e: c8:45:7d:83:89:5c:c9:be:d1:64:f5:20:2d:89:3e: e4:4c:1e:ae:52:f5:8c:c1:b6:6f:a2:bc:39:e9:47: 58:8e:9c:1e:af:42:e3:db:a1:52:a7:8d:5a:00:03: cd:ae:35:df:7a:6f:90:49:0d:05:27:58:ed:b0:83: a1:44:ca:4b:f4:29:a9:cb:0a:60:01:4a:8c:34:63: 10:a8:6b:b6:11:b8:3a:02:12:51:2a:a5:e0:29:ed: d1:86:55:5a:eb:33:0e:0b:33:68:e8:1d:21:69:22: f0:71:47:fd:79:58:13:26:d1:d0:02:c0:f0:b4:15: d8:1c:5b:3e:88:0e:2c:3c:2e:14:74:bb:4b:9c:ad: 57:8c:7e:52:e3:4a:a4:a8:9b:81:8e:02:47:d2:f8: fc:34:f2:0a:b5:51:2c:97:9a:e0:45:bd:a0:c0:ed: 80:12:48:96:77:ea:55:92:1c:ba:ef:20:ef:66:1e: 93:09:07:d1:aa:6a:92:39:ba:9c:5a:9c:36:00:b8: 16:b8:31:60:61:c8:6b:f4:96:ad:af:4c:4b:2b:fe: c1:91:0a:56:42:26:0a:d1:f9:83:01:76:e4:dc:db: f2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:63:00:0E:33:8B:0D:AF:FF:F7:B5:C3:58:18:18:BC:7B:A7:85:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0b35dbe-6222-3779-becf-77ca814b407a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6b:bf:aa:c8:4b:04:a4:38:82:6a:f9:a4:f0:8a:03:6d:00: d5:6f:c8:c2:e6:b8:0f:e8:57:de:ac:f5:94:69:e9:7b:cc:ed: a1:e1:77:47:ed:73:5a:66:50:1e:d8:49:47:2f:cd:6a:38:37: c2:a3:17:4f:93:65:56:30:e4:98:8a:81:78:d9:3a:54:76:72: cf:32:06:c1:ef:cc:69:dc:b9:4a:82:35:ce:4b:b8:25:c2:92: 47:6c:4d:25:c6:cd:92:89:b5:40:54:f0:e7:76:91:5c:75:49: 1c:f3:a2:3b:5a:34:c3:7b:06:50:e9:4c:bb:32:8d:a8:86:10: 65:c2:97:49:d7:12:4f:0a:82:c7:ae:f0:72:f8:5e:81:1b:f0: cd:65:53:09:fe:45:a9:1c:a6:a6:b4:79:5e:3d:98:d1:e8:6e: 98:c4:56:1c:66:74:12:01:27:92:69:64:c6:6b:72:d0:f9:93: 8e:84:af:01:ff:33:79:1b:fd:85:37:f6:2d:1c:35:b5:45:42: d9:34:2d:2e:98:99:fc:38:66:5a:d8:76:94:63:fd:66:74:ba: 95:19:4f:a4:01:37:34:7e:9a:d8:36:c8:f0:f5:c6:4b:bf:77: c0:14:95:c5:f5:0e:ec:48:de:42:a0:ac:0d:07:3a:cc:44:b0: 83:6e:50:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jyUrGjt8vJRWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWNhN2I1NWMtNWU0Mi00MzM5LThmMDQtNTkzNWZjYWJjMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub0cwqzjqGe6jbVBbdoTgNSezTUa9PK/mgxT Vj7IRX2DiVzJvtFk9SAtiT7kTB6uUvWMwbZvorw56UdYjpwer0Lj26FSp41aAAPN rjXfem+QSQ0FJ1jtsIOhRMpL9CmpywpgAUqMNGMQqGu2Ebg6AhJRKqXgKe3RhlVa 6zMOCzNo6B0haSLwcUf9eVgTJtHQAsDwtBXYHFs+iA4sPC4UdLtLnK1XjH5S40qk qJuBjgJH0vj8NPIKtVEsl5rgRb2gwO2AEkiWd+pVkhy67yDvZh6TCQfRqmqSObqc Wpw2ALgWuDFgYchr9Jatr0xLK/7BkQpWQiYK0fmDAXbk3NvyfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNjAA4ziw2v//e1w1gYGLx7p4UdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBiMzVkYmUtNjIyMi0z Nzc5LWJlY2YtNzdjYTgxNGI0MDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFrv6rISwSkOIJq+aTwigNtANVvyMLmuA/oV96s9ZRp6XvM7aHh d0ftc1pmUB7YSUcvzWo4N8KjF0+TZVYw5JiKgXjZOlR2cs8yBsHvzGncuUqCNc5L uCXCkkdsTSXGzZKJtUBU8Od2kVx1SRzzojtaNMN7BlDpTLsyjaiGEGXCl0nXEk8K gseu8HL4XoEb8M1lUwn+Rakcpqa0eV49mNHobpjEVhxmdBIBJ5JpZMZrctD5k46E rwH/M3kb/YU39i0cNbVFQtk0LS6Ymfw4ZlrYdpRj/WZ0upUZT6QBNzR+mtg2yPD1 xku/d8AUlcX1DuxI3kKgrA0HOsxEsINuUIE= -----END CERTIFICATE-----Generated at Wed Aug 6 10:07:44 2025 by rpki-client