$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4824d2a-9de8-3c6c-83e8-282f2cedd00a.roa File: e4824d2a-9de8-3c6c-83e8-282f2cedd00a.roa (raw, json) Hash identifier: p4ZaayMwjtuC0pZzekBvOUQeAmNNu8r5vAsr4Ljn7Jw= Subject key identifier: C3:18:98:C4:80:A7:D7:44:31:31:35:96:32:FB:41:26:C1:2C:03:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62EBBD137F3C23F331A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4824d2a-9de8-3c6c-83e8-282f2cedd00a.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396606 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2e:bb:d1:37:f3:c2:3f:33:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=e4bb9c09-f9b4-4b58-9cf3-4941d69b76e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:6a:2a:a9:23:ae:42:84:96:ee:a9:5c:aa: 2c:8a:92:60:9c:d0:15:e4:e2:83:73:4e:b0:81:84: 5b:3e:ef:df:11:4e:6e:38:6c:43:07:f2:58:54:8e: 70:38:2c:1e:f7:09:7f:18:13:86:4f:cd:15:74:e3: dc:ce:db:19:5c:fa:7a:90:4f:cb:35:6a:4e:73:9a: b9:6c:28:b4:8a:21:81:1f:1d:5b:a3:fb:a8:8d:f4: 87:da:3f:7a:d1:48:0e:09:36:6d:48:28:64:07:93: c4:5c:2c:30:00:2d:e0:c4:92:c6:50:8a:4f:8d:67: cf:f6:8f:1b:47:db:4d:74:0e:f5:74:99:22:27:b2: c6:71:6f:a8:eb:85:cb:2d:3d:ce:6c:11:ac:57:47: 60:29:12:7c:13:c9:de:91:78:bb:55:c0:c0:ca:3a: 74:87:3f:91:06:38:38:48:86:64:d0:ab:23:b5:c1: 49:3f:99:e1:9e:ca:e6:1c:d7:9c:75:60:73:d4:e4: 64:72:5f:8f:59:b4:b0:cc:48:1f:52:87:09:d6:6b: 84:59:28:e1:59:5d:03:5a:d8:42:7e:4b:51:b5:83: ec:26:47:79:84:ac:2f:a8:28:d9:51:0a:35:28:0f: e3:f1:37:1b:28:70:55:97:08:dc:e6:8f:c3:ed:ea: cd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:18:98:C4:80:A7:D7:44:31:31:35:96:32:FB:41:26:C1:2C:03:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4824d2a-9de8-3c6c-83e8-282f2cedd00a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d0:9a:2c:68:ce:e7:c6:aa:cf:f6:91:cd:eb:e9:53:f4:b1: 39:25:77:6d:ee:60:1b:23:b4:0a:d8:e6:b2:3a:53:5f:78:60: 5a:89:e5:12:7c:e8:56:f8:fe:c3:ff:10:c6:09:5a:f5:97:c4: 83:12:06:f7:7b:0b:7f:f9:80:29:6b:9e:1d:fa:49:56:ee:d0: ae:f3:86:31:c4:6a:c4:53:40:78:be:15:b3:a9:6e:10:83:33: ee:da:56:01:e2:4e:0d:44:dc:f7:aa:5b:cf:5e:eb:2f:79:c8: d6:f3:92:ba:2e:ae:87:f3:20:4c:8d:fc:27:2d:0e:ce:f0:8a: f2:bd:96:7d:11:99:01:ac:7e:4a:44:18:14:07:09:20:b0:4c: bb:3b:82:a1:f1:88:7e:29:8a:ba:70:92:a1:1f:42:d6:10:9d: 21:d9:06:56:d9:bb:97:57:c2:70:52:e3:9a:48:70:f0:c1:b0: 38:35:d4:3e:9e:5a:79:e4:75:c1:a4:ca:8b:e5:8c:f6:d7:28: 6a:1e:31:49:66:dd:16:be:99:5a:8b:91:1f:af:c1:cb:45:a0: b3:a8:ac:9f:d7:a1:0b:b8:aa:e3:c4:04:94:ed:2b:41:a3:88: 0d:ee:3d:f5:f6:bb:99:42:5f:98:d4:0e:c4:70:5c:a9:86:6f: ad:96:13:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3ti670Tfzwj8zGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZTRiYjljMDktZjliNC00YjU4LTljZjMtNDk0MWQ2OWI3NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwNqKqkjrkKElu6pXKosipJgnNAV5OKDc06w gYRbPu/fEU5uOGxDB/JYVI5wOCwe9wl/GBOGT80VdOPcztsZXPp6kE/LNWpOc5q5 bCi0iiGBHx1bo/uojfSH2j960UgOCTZtSChkB5PEXCwwAC3gxJLGUIpPjWfP9o8b R9tNdA71dJkiJ7LGcW+o64XLLT3ObBGsV0dgKRJ8E8nekXi7VcDAyjp0hz+RBjg4 SIZk0KsjtcFJP5nhnsrmHNecdWBz1ORkcl+PWbSwzEgfUocJ1muEWSjhWV0DWthC fktRtYPsJkd5hKwvqCjZUQo1KA/j8TcbKHBVlwjc5o/D7erNuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMMYmMSAp9dEMTE1ljL7QSbBLAOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTQ4MjRkMmEtOWRlOC0z YzZjLTgzZTgtMjgyZjJjZWRkMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF7QmixozufGqs/2kc3r6VP0sTkld23uYBsjtArY5rI6U194YFqJ 5RJ86Fb4/sP/EMYJWvWXxIMSBvd7C3/5gClrnh36SVbu0K7zhjHEasRTQHi+FbOp bhCDM+7aVgHiTg1E3PeqW89e6y95yNbzkrourofzIEyN/CctDs7wivK9ln0RmQGs fkpEGBQHCSCwTLs7gqHxiH4pirpwkqEfQtYQnSHZBlbZu5dXwnBS45pIcPDBsDg1 1D6eWnnkdcGkyovljPbXKGoeMUlm3Ra+mVqLkR+vwctFoLOorJ/XoQu4quPEBJTt K0GjiA3uPfX2u5lCX5jUDsRwXKmGb62WE9g= -----END CERTIFICATE-----Generated at Wed Aug 6 07:44:37 2025 by rpki-client