$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbef6e9b-09f0-389b-bcbe-f6a8908b8bad.roa File: fbef6e9b-09f0-389b-bcbe-f6a8908b8bad.roa (raw, json) Hash identifier: Jgh07J1vjFeH5eqdl4rASjAmdg5XTzqyu7BAu33rxTo= Subject key identifier: C9:F3:9F:29:7A:B6:FE:E8:18:DA:10:7E:16:36:A8:47:65:CA:F1:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE6378736D68F14715E6680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbef6e9b-09f0-389b-bcbe-f6a8908b8bad.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 21313 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:37:87:36:d6:8f:14:71:5e:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=1c25302c-8bf8-4421-972b-e8a83a0bfc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:98:1c:17:70:e7:f4:48:cc:6c:be:7c:94: 52:69:a6:9f:ff:43:af:85:1e:7b:ab:43:72:97:b2: 14:21:2d:dc:78:15:7a:fa:14:78:95:7a:45:a1:55: 8b:66:72:61:08:a2:94:10:15:69:16:60:dc:81:4c: 1d:df:5b:f6:8e:1e:aa:ea:0e:65:4b:6a:f2:11:00: 49:13:40:99:07:d2:3c:5a:ea:23:9d:85:2f:e7:5b: 03:4b:61:f2:d3:28:bf:a8:08:ab:0c:ba:cd:70:6e: 01:d1:7d:19:6b:66:74:22:08:6f:3e:61:07:6f:80: d3:70:ee:e7:67:38:e0:a4:83:b1:fa:35:ca:1d:1d: 9f:40:43:b9:63:96:47:1a:73:6d:d7:a1:a7:49:f7: 57:03:c6:1e:15:87:30:c3:e3:5d:03:f4:da:c9:40: 95:5d:89:1d:f9:4e:3c:13:2c:b9:56:38:c9:fe:f5: 3c:b4:47:b5:df:a1:8e:b6:b1:20:ae:a7:c3:dd:4c: dc:b4:90:87:a3:fa:42:a5:e1:06:0f:dc:e5:0c:16: 35:0a:3a:6f:76:00:9c:5f:e4:84:47:ae:c4:c0:59: cb:ec:78:78:35:67:be:a7:48:0d:7f:9d:5f:13:57: 85:7e:97:96:51:bb:97:ba:c6:85:81:ee:f2:3e:83: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F3:9F:29:7A:B6:FE:E8:18:DA:10:7E:16:36:A8:47:65:CA:F1:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbef6e9b-09f0-389b-bcbe-f6a8908b8bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e8:e5:a5:b3:bf:99:4e:1c:a8:2b:9a:b0:3a:2d:34:91:71: ee:97:d3:0a:f3:a4:3e:cf:09:1b:17:0d:e2:cd:03:c7:e4:d3: 83:31:c0:9f:3c:f4:15:a4:0a:dd:be:d2:b3:cd:c1:d3:55:87: 69:27:d2:c6:81:41:71:a0:d0:30:8c:f5:40:e2:fb:6e:c2:33: 17:60:f4:46:d8:b0:58:05:a0:82:95:06:e5:4f:1f:93:26:c1: 10:01:aa:c4:61:25:34:ca:c0:28:6b:a1:30:25:ea:80:4a:07: 9a:85:1b:4e:f9:e9:0e:c6:ea:e4:2e:98:b6:30:fa:aa:1b:d3: 0f:b8:e2:d9:bd:d8:a7:79:4c:c4:97:2b:64:c9:10:0f:4d:df: 98:5c:86:f8:8e:d0:51:84:c8:1f:fa:ed:18:cd:af:c7:cb:3f: c8:3a:b2:f0:dc:4b:51:4c:2e:f3:6a:50:f2:ac:3c:17:92:ee: 45:ec:bb:54:9d:3f:c0:21:a3:8e:60:e0:15:c1:79:4a:8c:26: 69:1c:38:6f:41:6d:0c:c7:e2:71:6d:bd:bd:5d:0d:dc:e1:23: 7d:0e:34:db:f2:36:2a:5e:67:7b:65:30:91:d8:da:20:f5:62: 7c:1f:fc:47:2d:8c:25:bc:6a:34:49:be:38:8f:97:96:bd:b4: 31:ba:c0:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jeHNtaPFHFeZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk MWMyNTMwMmMtOGJmOC00NDIxLTk3MmItZThhODNhMGJmYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHSYHBdw5/RIzGy+fJRSaaaf/0OvhR57q0Ny l7IUIS3ceBV6+hR4lXpFoVWLZnJhCKKUEBVpFmDcgUwd31v2jh6q6g5lS2ryEQBJ E0CZB9I8WuojnYUv51sDS2Hy0yi/qAirDLrNcG4B0X0Za2Z0IghvPmEHb4DTcO7n ZzjgpIOx+jXKHR2fQEO5Y5ZHGnNt16GnSfdXA8YeFYcww+NdA/TayUCVXYkd+U48 Eyy5VjjJ/vU8tEe136GOtrEgrqfD3UzctJCHo/pCpeEGD9zlDBY1CjpvdgCcX+SE R67EwFnL7Hh4NWe+p0gNf51fE1eFfpeWUbuXusaFge7yPoMDoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnznyl6tv7oGNoQfhY2qEdlyvFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmJlZjZlOWItMDlmMC0z ODliLWJjYmUtZjZhODkwOGI4YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGno5aWzv5lOHKgrmrA6LTSRce6X0wrzpD7PCRsXDeLNA8fk04Mx wJ889BWkCt2+0rPNwdNVh2kn0saBQXGg0DCM9UDi+27CMxdg9EbYsFgFoIKVBuVP H5MmwRABqsRhJTTKwChroTAl6oBKB5qFG0756Q7G6uQumLYw+qob0w+44tm92Kd5 TMSXK2TJEA9N35hchviO0FGEyB/67RjNr8fLP8g6svDcS1FMLvNqUPKsPBeS7kXs u1SdP8Aho45g4BXBeUqMJmkcOG9BbQzH4nFtvb1dDdzhI30ONNvyNipeZ3tlMJHY 2iD1Ynwf/EctjCW8ajRJvjiPl5a9tDG6wCg= -----END CERTIFICATE-----Generated at Wed Aug 6 00:53:09 2025 by rpki-client