$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb47cb95-f9d4-3eec-860e-3beeb26d488d.roa File: eb47cb95-f9d4-3eec-860e-3beeb26d488d.roa (raw, json) Hash identifier: e8pDYaYUp5ybRDfz1+tc0FEClk459X5WcX8zXQJMWlk= Subject key identifier: C6:75:08:61:DA:E4:7E:C3:9D:EC:FA:EF:29:46:3D:68:EF:A5:75:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B62BB74AE9C54A0B52FE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb47cb95-f9d4-3eec-860e-3beeb26d488d.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396541 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:2b:b7:4a:e9:c5:4a:0b:52:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=7f5ffb9f-47b9-4ab1-a1d8-6a71137603f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:4c:7d:a7:b3:83:f5:20:3b:e1:24:6e:74: ac:30:59:c6:f1:09:13:05:fb:c5:5d:d8:67:1e:73: 19:8b:89:b5:a5:84:59:cf:b5:56:27:c0:b5:64:8b: 93:ee:71:60:56:41:ff:87:71:f1:1a:ef:9a:e9:2a: dc:40:3c:8b:74:ac:38:53:ce:bb:cc:c3:46:9f:2b: 0f:41:9f:86:3a:84:7d:73:f6:04:08:01:06:3e:df: 68:db:80:54:81:d2:16:5d:c5:82:d7:4d:3c:ca:0a: ef:38:4e:ee:7e:3d:a3:72:64:4d:03:5b:23:c6:42: 7b:c0:32:6c:03:a4:92:9e:8a:fe:34:b6:b1:5a:ce: c7:13:cc:6e:7a:56:0a:24:29:42:bb:7c:85:ce:a7: 9a:aa:e5:29:1e:e6:ce:1b:c4:39:39:3b:d3:ce:f0: e5:66:65:e5:3f:76:8d:6e:36:77:e4:b3:1d:7f:6b: c1:44:58:36:1c:59:3e:22:0b:47:e1:29:8c:90:ea: d8:11:94:48:66:e2:82:97:2a:8e:0f:40:bb:bb:28: 7d:cc:b9:09:c2:4d:0f:b7:05:1b:80:c5:5a:85:1d: 35:9f:d6:f6:1c:5d:d0:8f:10:01:20:6e:80:7c:d1: 71:ee:4d:9c:93:1a:e7:64:50:a0:84:04:f2:43:d0: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:75:08:61:DA:E4:7E:C3:9D:EC:FA:EF:29:46:3D:68:EF:A5:75:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb47cb95-f9d4-3eec-860e-3beeb26d488d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:eb:c1:ae:c5:bf:c3:07:66:34:11:0d:a5:fe:24:61:0d:49: 1c:45:d5:45:af:4f:d0:4b:47:30:8f:e4:04:51:6f:f3:7b:ee: ae:1f:25:9a:52:68:d0:78:94:77:51:5a:63:e7:56:03:a3:5a: 03:89:37:68:3b:cd:56:42:a0:c9:1c:b5:88:d9:01:4c:7a:a4: a2:f8:9a:5e:e8:13:d4:d6:20:ba:58:74:7d:b7:19:43:8d:11: 87:3e:03:e3:f6:00:6c:13:f7:2a:c9:06:1a:0a:9f:96:ef:35: 45:9e:88:1d:33:c8:72:95:4d:ea:af:a6:5f:e4:08:92:92:cb: bd:b1:a0:ac:73:c7:a7:61:b5:87:7a:4a:17:01:e6:09:d0:f4: 9e:10:9c:c4:9a:8c:1e:b7:af:3d:4b:a0:20:ca:63:95:6d:b9: a1:bc:9b:49:8a:7f:db:c8:cb:56:89:3c:8f:a0:16:60:a8:47: 52:d2:b8:30:e6:31:26:06:c9:10:98:3a:8d:8c:f4:23:89:93: 85:5d:76:fd:4f:87:4f:dc:c4:a1:3c:e6:6d:12:58:41:f2:c7: 7f:f8:4c:90:ab:83:01:9e:21:5e:b6:3a:94:28:a5:82:c3:23: c7:49:82:cd:18:6f:a9:b7:66:da:cb:56:23:42:c1:b3:8d:15: 7c:ad:1e:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiu3SunFSgtS/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk N2Y1ZmZiOWYtNDdiOS00YWIxLWExZDgtNmE3MTEzNzYwM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcJMfaezg/UgO+EkbnSsMFnG8QkTBfvFXdhn HnMZi4m1pYRZz7VWJ8C1ZIuT7nFgVkH/h3HxGu+a6SrcQDyLdKw4U867zMNGnysP QZ+GOoR9c/YECAEGPt9o24BUgdIWXcWC1008ygrvOE7ufj2jcmRNA1sjxkJ7wDJs A6SSnor+NLaxWs7HE8xuelYKJClCu3yFzqeaquUpHubOG8Q5OTvTzvDlZmXlP3aN bjZ35LMdf2vBRFg2HFk+IgtH4SmMkOrYEZRIZuKClyqOD0C7uyh9zLkJwk0PtwUb gMVahR01n9b2HF3QjxABIG6AfNFx7k2ckxrnZFCghATyQ9B5WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMZ1CGHa5H7Dnez67ylGPWjvpXUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWI0N2NiOTUtZjlkNC0z ZWVjLTg2MGUtM2JlZWIyNmQ0ODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGjrwa7Fv8MHZjQRDaX+JGENSRxF1UWvT9BLRzCP5ARRb/N77q4f JZpSaNB4lHdRWmPnVgOjWgOJN2g7zVZCoMkctYjZAUx6pKL4ml7oE9TWILpYdH23 GUONEYc+A+P2AGwT9yrJBhoKn5bvNUWeiB0zyHKVTeqvpl/kCJKSy72xoKxzx6dh tYd6ShcB5gnQ9J4QnMSajB63rz1LoCDKY5VtuaG8m0mKf9vIy1aJPI+gFmCoR1LS uDDmMSYGyRCYOo2M9COJk4Vddv1Ph0/cxKE85m0SWEHyx3/4TJCrgwGeIV62OpQo pYLDI8dJgs0Yb6m3ZtrLViNCwbONFXytHuY= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:57 2025 by rpki-client