$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d915c1c6-9333-3964-8168-ad8b134300e3.roa File: d915c1c6-9333-3964-8168-ad8b134300e3.roa (raw, json) Hash identifier: Yf3brY8hnMGfkoRnp8YF3bMEp+LFNuI8tLjpkIDxMOA= Subject key identifier: 04:3C:E0:A6:51:EE:F2:4F:48:B1:49:92:74:92:B4:15:18:F2:F9:93 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF07CBD1702781946231500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d915c1c6-9333-3964-8168-ad8b134300e3.roa Signing time: Thu 24 Jul 2025 12:38:51 +0000 ROA not before: Thu 24 Jul 2025 12:38:51 +0000 ROA not after: Wed 22 Oct 2025 12:38:51 +0000 asID: 396600 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:7c:bd:17:02:78:19:46:23:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:51 2025 GMT Not After : Oct 22 12:38:51 2025 GMT Subject: CN=4bbdd1ba-9531-4057-834f-424ba9ceadc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:48:19:7c:86:e6:5b:05:55:7c:8d:bb:14:a0: 3a:1f:e0:89:49:7c:e4:4e:5c:9f:fd:44:d0:ba:33: 32:44:49:98:e6:e0:8f:19:3c:9f:97:33:de:f6:f2: 49:b1:82:01:ed:23:70:80:81:b0:ab:31:a7:dc:fd: df:3b:fa:d1:3c:c8:8c:b1:4a:89:01:b6:63:01:79: 0c:5a:b9:e4:f1:19:e6:f3:05:e5:31:af:4e:98:74: 4d:c6:7f:55:f3:de:eb:60:87:de:00:79:0f:21:93: 36:14:0c:32:54:ad:cf:58:b7:fe:19:cf:dc:5c:aa: 57:67:4d:da:35:87:ba:43:96:36:9c:dc:d0:bb:1e: 3e:49:d1:67:2e:cb:d2:06:63:2f:be:07:0d:e5:5e: 2c:f9:75:31:54:f6:1b:f5:7b:40:e5:96:31:0a:a2: c4:b0:e8:dc:64:0d:f8:6d:62:14:59:e1:f1:67:5a: e1:5a:7f:28:d9:c6:d2:a0:38:ec:b8:05:4a:ef:e6: 45:4b:2c:3d:30:8a:06:af:ef:9f:0f:ce:e7:6c:71: ca:7e:10:24:0e:49:7c:a8:f0:d2:92:54:51:84:44: 54:f0:ab:a5:0d:41:4f:11:ca:b1:60:aa:26:3b:49: 95:56:f1:e0:d4:83:11:d0:73:5c:91:a7:4a:d2:94: f2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3C:E0:A6:51:EE:F2:4F:48:B1:49:92:74:92:B4:15:18:F2:F9:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d915c1c6-9333-3964-8168-ad8b134300e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:c2:25:93:89:23:35:87:ab:bf:2e:c1:21:d7:d5:75:f2:fe: a6:b1:dc:c8:9b:63:b2:df:21:37:82:30:c2:b7:e8:63:27:93: ad:aa:0e:7a:45:4c:76:bc:31:c1:60:8e:56:77:23:0d:73:5c: 00:1a:cf:46:87:5d:b9:e7:17:f4:5f:d5:40:31:f8:70:28:4a: e0:df:82:4b:13:07:bb:7a:07:e1:f9:0b:3a:7e:0d:5e:3a:31: 13:f2:4c:00:9e:11:83:09:c4:7e:cb:5c:5d:61:4f:2b:ef:27: 5b:7c:72:c3:65:fd:6e:ed:a5:fb:1c:e5:2e:d8:dd:0d:90:93: 8c:e6:a0:dc:f6:9e:85:63:72:88:ef:35:71:c5:59:b1:e4:e3: f8:04:fc:f6:86:1b:97:54:ff:4b:54:77:38:3b:99:f5:41:b4: f2:55:31:f1:e7:df:08:63:c4:04:6f:dd:ae:8f:d2:4d:ca:26: ed:c0:28:0d:fe:0d:ac:82:ca:a6:3c:d5:a0:c9:f8:85:89:db: f7:22:75:79:4a:dd:19:52:42:3a:6f:cd:58:ae:dc:5d:39:b4: 23:bd:a4:e0:53:b5:44:3d:d0:1b:38:2d:45:8b:c2:80:46:01: 06:b7:2a:f1:5a:b0:4c:1c:28:42:75:8a:64:d3:4a:ce:7d:40: 00:4f:e8:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8Hy9FwJ4GUYjFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1MVoXDTI1MTAyMjEyMzg1MVowLzEtMCsGA1UEAxMk NGJiZGQxYmEtOTUzMS00MDU3LTgzNGYtNDI0YmE5Y2VhZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUgZfIbmWwVVfI27FKA6H+CJSXzkTlyf/UTQ ujMyREmY5uCPGTyflzPe9vJJsYIB7SNwgIGwqzGn3P3fO/rRPMiMsUqJAbZjAXkM Wrnk8Rnm8wXlMa9OmHRNxn9V897rYIfeAHkPIZM2FAwyVK3PWLf+Gc/cXKpXZ03a NYe6Q5Y2nNzQux4+SdFnLsvSBmMvvgcN5V4s+XUxVPYb9XtA5ZYxCqLEsOjcZA34 bWIUWeHxZ1rhWn8o2cbSoDjsuAVK7+ZFSyw9MIoGr++fD87nbHHKfhAkDkl8qPDS klRRhERU8KulDUFPEcqxYKomO0mVVvHg1IMR0HNckadK0pTyVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAQ84KZR7vJPSLFJknSStBUY8vmTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDkxNWMxYzYtOTMzMy0z OTY0LTgxNjgtYWQ4YjEzNDMwMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALvCJZOJIzWHq78uwSHX1XXy/qax3MibY7LfITeCMMK36GMnk62q DnpFTHa8McFgjlZ3Iw1zXAAaz0aHXbnnF/Rf1UAx+HAoSuDfgksTB7t6B+H5Czp+ DV46MRPyTACeEYMJxH7LXF1hTyvvJ1t8csNl/W7tpfsc5S7Y3Q2Qk4zmoNz2noVj cojvNXHFWbHk4/gE/PaGG5dU/0tUdzg7mfVBtPJVMfHn3whjxARv3a6P0k3KJu3A KA3+DayCyqY81aDJ+IWJ2/cidXlK3RlSQjpvzViu3F05tCO9pOBTtUQ90Bs4LUWL woBGAQa3KvFasEwcKEJ1imTTSs59QABP6AE= -----END CERTIFICATE-----Generated at Fri Aug 8 10:14:37 2025 by rpki-client