$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1c46b7c-60fa-3f8d-b878-1e760afb9705.roa File: f1c46b7c-60fa-3f8d-b878-1e760afb9705.roa (raw, json) Hash identifier: WfL3HY0Z0wFn35M6ri2aBEt+b3H49Xma5JX+yBMrgFw= Subject key identifier: 97:66:A8:21:18:5B:5E:8D:D9:8F:46:0D:72:C7:5D:2A:4A:EA:5D:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B6265C57AC70D620A0C200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1c46b7c-60fa-3f8d-b878-1e760afb9705.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 36630 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:26:5c:57:ac:70:d6:20:a0:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=03ffdfb5-15fb-4dcb-8fe5-91a574d255ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:24:f4:73:3e:ae:d5:7d:bd:e4:2c:a2:cd:88: 71:6e:a4:0d:38:d5:ca:9f:6b:87:68:eb:6d:41:fe: fd:ed:7f:be:b3:71:48:47:c3:fe:3b:90:95:2f:c3: f5:24:67:2a:5e:95:da:b4:4b:08:85:54:86:b1:01: ed:30:92:dd:9e:54:1d:b3:4c:2c:a2:9e:09:fc:4b: e6:a5:18:ea:b3:49:92:98:0b:f3:45:bc:d9:36:26: 45:f3:c6:1a:0b:1e:05:27:b0:8a:04:ef:c5:82:3b: 26:5a:56:0e:83:f9:5d:40:54:41:4f:c0:6e:43:70: f1:ce:f5:84:b6:f6:69:f7:58:a2:fc:9d:a6:be:a8: 6b:92:a5:7d:27:43:91:b6:73:51:07:1b:e2:73:20: e4:3d:f8:cd:94:4f:6c:d2:7d:b3:b3:f6:69:4c:70: a7:10:7d:1e:ce:cd:10:62:17:30:94:a6:34:29:21: 87:44:3b:23:41:7d:2e:2d:ff:8b:18:10:cd:b0:3c: e7:52:a9:3e:cd:31:be:38:e5:44:ce:3a:22:4b:de: 25:72:9b:0e:3b:e8:3f:bd:fb:3d:05:84:62:34:08: 41:9e:f7:cb:d4:df:9d:09:f0:48:3a:36:df:e5:04: c0:3e:b7:3f:8c:cd:09:ce:c2:b8:7f:34:53:9c:27: 6f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:66:A8:21:18:5B:5E:8D:D9:8F:46:0D:72:C7:5D:2A:4A:EA:5D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1c46b7c-60fa-3f8d-b878-1e760afb9705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:df:62:a6:29:85:0a:d3:30:23:2a:54:42:cf:ee:40:4a:84: a2:77:26:86:cd:32:cd:ff:84:45:55:26:e4:29:78:60:8c:5e: 2f:eb:94:23:8e:79:92:53:26:62:d6:ab:86:19:58:99:13:a3: eb:6f:60:d8:88:80:52:a1:e0:db:97:e4:00:0f:cd:e3:42:c8: 4a:25:73:ae:48:be:9e:e6:0f:fc:9c:7a:ad:f4:d1:77:85:30: a5:da:52:d9:f4:b4:6c:8d:ac:a5:a2:0f:8a:d8:7f:7e:5b:67: 4a:97:ff:c7:ee:74:ce:f1:ed:74:25:7f:e1:cf:8f:18:bd:38: 5c:79:88:b0:aa:95:ca:b8:30:8d:63:92:39:f2:53:e5:1c:8a: 8a:5c:67:3d:d9:c8:fd:7e:f2:0c:e3:35:36:d9:72:53:b5:c6: ce:62:88:19:d5:7a:4c:b5:64:19:7a:b3:e6:fa:b9:cd:51:99: b7:e8:79:3a:5b:4c:25:c9:7d:84:10:b4:e9:1d:c6:56:f3:d1: 0a:58:2d:4e:2b:8a:77:fa:82:e8:42:0a:5e:69:a0:ba:93:c9: 89:f6:fe:be:d6:93:0a:1c:22:8e:ef:aa:89:f3:c7:67:34:e4: 2e:66:a8:48:29:61:a8:dd:d1:ba:90:1d:26:0e:a6:f2:28:7a: 27:8b:29:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tiZcV6xw1iCgwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk MDNmZmRmYjUtMTVmYi00ZGNiLThmZTUtOTFhNTc0ZDI1NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvST0cz6u1X295CyizYhxbqQNONXKn2uHaOtt Qf797X++s3FIR8P+O5CVL8P1JGcqXpXatEsIhVSGsQHtMJLdnlQds0wsop4J/Evm pRjqs0mSmAvzRbzZNiZF88YaCx4FJ7CKBO/FgjsmWlYOg/ldQFRBT8BuQ3DxzvWE tvZp91ii/J2mvqhrkqV9J0ORtnNRBxvicyDkPfjNlE9s0n2zs/ZpTHCnEH0ezs0Q YhcwlKY0KSGHRDsjQX0uLf+LGBDNsDznUqk+zTG+OOVEzjoiS94lcpsOO+g/vfs9 BYRiNAhBnvfL1N+dCfBIOjbf5QTAPrc/jM0JzsK4fzRTnCdvVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJdmqCEYW16N2Y9GDXLHXSpK6l3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjFjNDZiN2MtNjBmYS0z ZjhkLWI4NzgtMWU3NjBhZmI5NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALPfYqYphQrTMCMqVELP7kBKhKJ3JobNMs3/hEVVJuQpeGCMXi/r lCOOeZJTJmLWq4YZWJkTo+tvYNiIgFKh4NuX5AAPzeNCyEolc65Ivp7mD/yceq30 0XeFMKXaUtn0tGyNrKWiD4rYf35bZ0qX/8fudM7x7XQlf+HPjxi9OFx5iLCqlcq4 MI1jkjnyU+UciopcZz3ZyP1+8gzjNTbZclO1xs5iiBnVeky1ZBl6s+b6uc1Rmbfo eTpbTCXJfYQQtOkdxlbz0QpYLU4rinf6guhCCl5poLqTyYn2/r7WkwocIo7vqonz x2c05C5mqEgpYajd0bqQHSYOpvIoeieLKSk= -----END CERTIFICATE-----Generated at Mon Aug 4 22:20:17 2025 by rpki-client