$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de320641-fe0e-30b1-adf3-b3e5f41193c2.roa File: de320641-fe0e-30b1-adf3-b3e5f41193c2.roa (raw, json) Hash identifier: L08NVY5JcZ6zp/33i8922eUKNWhTgHIpDELfy6K9oWQ= Subject key identifier: 81:F5:9F:08:51:83:7A:29:A8:FD:18:FA:15:84:FF:59:E0:85:19:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62CBDABC8381889724F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de320641-fe0e-30b1-adf3-b3e5f41193c2.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396547 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2c:bd:ab:c8:38:18:89:72:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=5f166edd-98ad-4fa0-b67f-a3c981970408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fa:73:53:97:52:22:55:4a:24:a3:01:bf:35: a8:53:50:02:e1:01:f8:cb:32:32:27:e3:f6:7e:12: 53:06:27:56:ab:a9:61:c1:77:1f:dc:12:f3:ae:1a: 52:a4:3a:be:3a:c6:b1:0d:d6:1a:25:8b:84:9d:c4: e1:6d:8c:00:b6:cc:c1:c4:b5:f8:9f:e9:07:5f:ce: 7d:ec:84:ea:2b:92:9d:2e:7d:fe:77:9a:e7:79:17: 4d:11:b5:6b:74:cb:ee:d0:a1:b9:1b:93:db:6d:dd: 80:c1:9d:50:24:e8:1d:5a:97:45:e5:a6:ab:e4:48: 07:aa:2b:2d:6c:ad:24:4a:74:16:79:0b:4e:29:93: 51:57:ca:1f:70:a7:e8:86:d9:f9:a3:61:50:dc:68: 94:cf:3c:f1:67:8a:b8:76:bd:a2:71:a8:98:d2:88: 0b:5d:e2:8a:43:a7:78:99:c6:1d:c3:b0:6d:d5:cb: 92:b6:84:d3:2e:84:19:23:45:8f:67:03:6b:e7:ea: 9e:a9:69:4e:a4:8b:2d:bd:e8:86:e8:ba:f0:29:dc: 9c:71:b6:3b:ce:27:5f:8d:aa:77:c8:a6:2e:a9:44: d9:79:39:b8:27:ee:72:fd:3f:1d:79:94:c8:49:ae: 96:b6:3a:e0:67:88:b7:11:e2:54:53:5a:45:92:1a: 9e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F5:9F:08:51:83:7A:29:A8:FD:18:FA:15:84:FF:59:E0:85:19:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de320641-fe0e-30b1-adf3-b3e5f41193c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9e:a3:9c:c6:6a:69:65:eb:71:db:cc:92:0a:69:41:9b:31: d1:f1:a3:b5:57:2d:7e:9d:81:dd:81:61:96:f5:01:02:d8:af: 2d:91:16:3d:bb:9a:f6:54:dd:6a:fe:95:92:9c:42:bd:7e:7b: 81:71:8b:3e:a1:78:f2:5b:f4:30:7a:1d:2e:f4:cb:7c:8e:ce: cd:e2:c0:3e:2c:bc:cd:c6:28:28:48:87:31:78:13:c9:4c:2a: 3f:15:04:3c:c6:f7:dc:55:32:80:ad:c0:67:9b:00:d8:45:35: 3f:94:c9:f1:56:70:74:f3:90:c7:a4:46:4a:b2:eb:ff:22:77: 39:a4:8c:29:b6:c5:44:ab:a9:cf:7b:14:32:f4:ae:e6:df:d5: 37:4a:e6:40:27:24:66:a3:ca:5d:99:52:2f:e8:26:cd:a4:75: fb:d7:f4:f9:7d:05:32:11:3e:25:0c:8e:8d:85:93:6b:56:a1: 94:24:35:a8:12:95:e9:27:2a:1f:4e:86:06:81:d9:90:56:3a: c5:56:da:50:b3:f0:8f:a3:19:0b:bd:c0:b0:26:17:f7:35:f6: 08:fe:b4:ba:1f:50:e7:6d:25:79:71:90:fc:1a:63:d7:25:45: e4:b7:d4:fe:58:1e:0d:e7:a4:00:75:31:5e:7a:97:20:cd:54: 95:1f:0d:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiy9q8g4GIlyT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk NWYxNjZlZGQtOThhZC00ZmEwLWI2N2YtYTNjOTgxOTcwNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/pzU5dSIlVKJKMBvzWoU1AC4QH4yzIyJ+P2 fhJTBidWq6lhwXcf3BLzrhpSpDq+OsaxDdYaJYuEncThbYwAtszBxLX4n+kHX859 7ITqK5KdLn3+d5rneRdNEbVrdMvu0KG5G5Pbbd2AwZ1QJOgdWpdF5aar5EgHqist bK0kSnQWeQtOKZNRV8ofcKfohtn5o2FQ3GiUzzzxZ4q4dr2icaiY0ogLXeKKQ6d4 mcYdw7Bt1cuStoTTLoQZI0WPZwNr5+qeqWlOpIstveiG6LrwKdyccbY7zidfjap3 yKYuqUTZeTm4J+5y/T8deZTISa6WtjrgZ4i3EeJUU1pFkhqeAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIH1nwhRg3opqP0Y+hWE/1nghRlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGUzMjA2NDEtZmUwZS0z MGIxLWFkZjMtYjNlNWY0MTE5M2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAueo5zGamll63HbzJIKaUGbMdHxo7VXLX6dgd2BYZb1AQLYry2R Fj27mvZU3Wr+lZKcQr1+e4Fxiz6hePJb9DB6HS70y3yOzs3iwD4svM3GKChIhzF4 E8lMKj8VBDzG99xVMoCtwGebANhFNT+UyfFWcHTzkMekRkqy6/8idzmkjCm2xUSr qc97FDL0rubf1TdK5kAnJGajyl2ZUi/oJs2kdfvX9Pl9BTIRPiUMjo2Fk2tWoZQk NagSleknKh9OhgaB2ZBWOsVW2lCz8I+jGQu9wLAmF/c19gj+tLofUOdtJXlxkPwa Y9clReS31P5YHg3npAB1MV56lyDNVJUfDTM= -----END CERTIFICATE-----Generated at Wed Aug 6 11:07:16 2025 by rpki-client