$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa File: e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa (raw, json) Hash identifier: CTp3m3yWmSVpaT6qalrbs8h5vP6+5Lyk5o0qYfwh1d8= Subject key identifier: B3:EE:3D:61:8C:4B:D6:A9:C8:ED:02:00:04:8B:99:E3:73:12:B0:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B626F6443D4BE5AD691F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 397206 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:26:f6:44:3d:4b:e5:ad:69:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=fd8675fb-2a46-4880-a0bf-068a30b55a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:13:22:4e:2c:72:ca:e1:17:48:3f:c3:3a:75: 40:c8:27:d9:d5:11:6f:e8:02:28:bd:61:75:f4:e9: e7:9e:a9:ac:4e:3b:f2:dc:84:b2:2a:4f:2a:d5:8b: 04:2f:5f:5d:b8:b7:f7:1b:c4:be:11:82:80:35:fc: 11:67:3d:f4:75:ef:03:34:94:14:5e:bd:fa:c9:d4: 08:ad:f7:5a:f8:ab:2c:ea:c9:d1:a9:66:a1:a5:b0: 13:9d:84:57:39:b3:0b:8f:50:76:c3:50:ae:ae:b6: 2c:df:11:df:d3:19:a8:3d:17:a0:e3:53:c2:08:94: 18:6a:f8:1f:1b:6f:0c:ff:35:77:ae:02:68:a2:d1: 36:3a:7e:93:61:2c:8a:37:16:c7:21:25:e9:d6:1d: 99:40:0d:5b:82:d8:fd:63:16:0a:b8:b8:f7:19:92: 82:36:0b:36:38:b5:7e:3b:60:16:4d:3d:b1:1c:b9: 3d:57:db:73:b6:13:85:f0:57:09:7e:74:f3:c3:c6: 3c:98:48:75:a0:6b:1c:26:94:72:e5:64:3d:11:27: fb:e8:ac:fc:43:6d:35:9d:70:e0:88:e9:5b:4d:ad: 03:8b:e8:58:79:fb:c8:79:44:44:89:eb:1e:57:bf: 23:2e:3c:4a:b3:78:bb:50:c6:84:f6:66:fd:0c:3c: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:EE:3D:61:8C:4B:D6:A9:C8:ED:02:00:04:8B:99:E3:73:12:B0:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e97cfdcf-5bf0-3cb1-ba7a-0bbbecbcdd41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:aa:24:b9:ae:5b:30:ca:d9:41:55:59:cc:30:72:01:d6:dc: a5:c1:d4:25:e5:20:88:36:3e:90:20:74:ea:6e:db:e9:44:4e: ad:d3:24:68:82:6c:a6:8d:0a:de:db:26:78:7f:35:56:1e:8f: d1:43:f8:7a:3c:da:b3:6c:e5:9b:85:37:a3:25:06:6c:d4:22: bc:16:50:61:77:0e:e8:dd:d8:28:b7:c9:14:9e:6a:6f:88:a4: 51:7d:ab:99:cb:af:74:fd:b5:24:d7:f7:9f:bc:1c:3d:cd:c7: 67:a3:fa:c7:3e:b4:cc:a3:f7:ca:03:21:bb:f8:8f:ac:73:55: 7e:1d:dd:1e:b6:60:8d:0f:0d:9d:55:04:ee:35:9e:2e:3a:7c: 2c:35:b9:dc:4e:cb:e7:b5:32:39:4c:5d:01:73:ab:87:76:c5: c0:2c:74:cf:df:e0:74:53:e4:9e:0e:17:80:dd:7b:5d:a9:c8: ab:65:9e:25:3c:62:52:7f:3a:87:a1:92:79:25:7e:b8:c1:c2: d3:9f:08:3c:2b:2e:a2:a1:cc:71:59:fa:ac:e4:81:b2:91:33: f1:0f:53:a2:dd:b4:35:2e:8e:1d:97:42:d8:84:bf:b9:80:14: 87:59:c2:32:7e:8c:6f:94:78:2d:d0:ce:b3:16:03:bc:61:0d: 76:70:2b:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tib2RD1L5a1pH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZmQ4Njc1ZmItMmE0Ni00ODgwLWEwYmYtMDY4YTMwYjU1YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixMiTixyyuEXSD/DOnVAyCfZ1RFv6AIovWF1 9OnnnqmsTjvy3ISyKk8q1YsEL19duLf3G8S+EYKANfwRZz30de8DNJQUXr36ydQI rfda+Kss6snRqWahpbATnYRXObMLj1B2w1CurrYs3xHf0xmoPReg41PCCJQYavgf G28M/zV3rgJootE2On6TYSyKNxbHISXp1h2ZQA1bgtj9YxYKuLj3GZKCNgs2OLV+ O2AWTT2xHLk9V9tzthOF8FcJfnTzw8Y8mEh1oGscJpRy5WQ9ESf76Kz8Q201nXDg iOlbTa0Di+hYefvIeUREieseV78jLjxKs3i7UMaE9mb9DDwL7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLPuPWGMS9apyO0CAASLmeNzErBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTk3Y2ZkY2YtNWJmMC0z Y2IxLWJhN2EtMGJiYmVjYmNkZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALGqJLmuWzDK2UFVWcwwcgHW3KXB1CXlIIg2PpAgdOpu2+lETq3T JGiCbKaNCt7bJnh/NVYej9FD+Ho82rNs5ZuFN6MlBmzUIrwWUGF3Dujd2Ci3yRSe am+IpFF9q5nLr3T9tSTX95+8HD3Nx2ej+sc+tMyj98oDIbv4j6xzVX4d3R62YI0P DZ1VBO41ni46fCw1udxOy+e1MjlMXQFzq4d2xcAsdM/f4HRT5J4OF4Dde12pyKtl niU8YlJ/OoehknklfrjBwtOfCDwrLqKhzHFZ+qzkgbKRM/EPU6LdtDUujh2XQtiE v7mAFIdZwjJ+jG+UeC3QzrMWA7xhDXZwK9c= -----END CERTIFICATE-----Generated at Wed Aug 6 11:01:10 2025 by rpki-client