$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa File: 323e4eb5-73e4-3f1d-b613-2b7750199565.roa (raw, json) Hash identifier: kofbSanZUm1XXTsnadHbrSyW0pElzwzsgHxNyiov5kc= Subject key identifier: B5:B0:AD:BC:8A:F6:62:37:45:29:B5:61:D4:84:5C:D9:5B:70:86:3A Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584AB91B8FB4E9DB9083C4CF1380 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 30133 IP address blocks: 2001:500:67::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:8f:b4:e9:db:90:83:c4:cf:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=665e9b71-329c-424e-a249-badcb3f5d25c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bb:bf:55:63:a7:9f:47:b2:e3:a9:c2:43:6f: b5:98:2e:b4:34:00:84:6c:5f:b7:c9:01:17:51:28: a5:47:52:99:76:f3:98:c9:54:2b:fa:75:61:5f:a6: 10:01:e0:8a:b6:8b:e6:ad:27:b0:cd:2f:6b:38:25: b2:30:b5:80:2a:b4:03:b7:15:49:61:e8:3b:50:ab: 55:e2:0a:4d:40:01:cb:8d:58:97:31:c3:bb:e5:84: 47:e6:99:1b:58:8a:82:99:41:88:6b:b0:57:df:52: f5:3e:04:62:95:7b:12:f0:ff:f6:b9:03:3a:9e:5f: 0a:14:73:af:07:9d:30:19:e0:56:c2:8a:69:87:f5: b9:d6:ce:b2:4b:17:85:81:5d:7d:82:20:83:7a:4b: 8c:82:01:25:8f:a9:14:02:7c:5e:51:6e:df:14:e1: b9:b2:2a:ce:2f:0a:a9:dd:b0:54:63:78:9d:ec:88: 7c:bc:0d:4a:41:5e:83:83:51:e6:17:41:e9:45:50: a6:d9:3b:ce:c2:3e:15:98:87:a9:20:37:0d:4a:ef: b5:27:41:16:e4:ee:3b:d6:ed:4b:04:e6:8e:bf:fc: f2:34:1b:da:32:40:79:1c:3f:ef:6b:af:52:4f:4f: af:3e:bc:08:f4:f2:15:a8:7c:ea:f6:c3:0a:f9:75: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B0:AD:BC:8A:F6:62:37:45:29:B5:61:D4:84:5C:D9:5B:70:86:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/323e4eb5-73e4-3f1d-b613-2b7750199565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:67::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:bd:c8:a1:a1:b8:a8:45:51:85:e4:67:e0:0f:99:de:59:ed: 98:94:46:8d:71:11:33:27:ff:5a:bf:f2:20:dc:2f:53:70:77: 5e:a2:76:15:34:f4:50:36:43:81:33:e8:cf:d2:34:db:fd:19: 0d:f4:8e:1c:0e:b9:11:5f:af:56:31:ca:8d:6e:95:30:2a:bf: 30:09:20:30:f6:a5:3c:dd:f5:ed:cc:1b:f3:21:4c:e1:d0:e5: fd:9c:bb:2d:7b:bd:f9:7f:27:48:36:76:d2:c3:6e:36:0f:d1: c5:f1:d2:5a:3d:87:40:63:b2:1a:1e:cb:25:2e:00:19:19:06: 0a:6e:7f:e4:4e:0d:9f:5f:68:67:92:b2:1e:0d:b8:97:46:6e: 32:30:14:ad:1e:f2:d5:04:2a:41:66:a9:90:21:1d:ce:15:62: 6f:b2:41:6a:2b:52:59:c2:3b:19:54:35:f2:03:95:8b:be:38: 35:bb:8a:1e:c3:3a:89:99:4a:ef:6a:34:db:6e:f9:bf:8a:06: 04:bc:94:d1:13:dd:e3:30:90:9c:22:b7:04:97:b7:b0:c6:6c: d4:9e:04:ce:7e:90:48:42:fd:b4:1d:01:35:a0:cd:6e:cb:f5: b5:9c:d9:75:7e:f9:77:92:a8:6e:f8:48:6d:f4:48:db:f1:b3: 6e:e3:42:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq5G4+06duQg8TPE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk NjY1ZTliNzEtMzI5Yy00MjRlLWEyNDktYmFkY2IzZjVkMjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbu/VWOnn0ey46nCQ2+1mC60NACEbF+3yQEX USilR1KZdvOYyVQr+nVhX6YQAeCKtovmrSewzS9rOCWyMLWAKrQDtxVJYeg7UKtV 4gpNQAHLjViXMcO75YRH5pkbWIqCmUGIa7BX31L1PgRilXsS8P/2uQM6nl8KFHOv B50wGeBWwopph/W51s6ySxeFgV19giCDekuMggElj6kUAnxeUW7fFOG5sirOLwqp 3bBUY3id7Ih8vA1KQV6Dg1HmF0HpRVCm2TvOwj4VmIepIDcNSu+1J0EW5O471u1L BOaOv/zyNBvaMkB5HD/va69ST0+vPrwI9PIVqHzq9sMK+XUaBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLWwrbyK9mI3RSm1YdSEXNlbcIY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMzIzZTRlYjUtNzNlNC0z ZjFkLWI2MTMtMmI3NzUwMTk5NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFu9yKGhuKhFUYXkZ+APmd5Z7ZiURo1xETMn/1q/8iDcL1Nwd16i dhU09FA2Q4Ez6M/SNNv9GQ30jhwOuRFfr1Yxyo1ulTAqvzAJIDD2pTzd9e3MG/Mh TOHQ5f2cuy17vfl/J0g2dtLDbjYP0cXx0lo9h0BjshoeyyUuABkZBgpuf+RODZ9f aGeSsh4NuJdGbjIwFK0e8tUEKkFmqZAhHc4VYm+yQWorUlnCOxlUNfIDlYu+ODW7 ih7DOomZSu9qNNtu+b+KBgS8lNET3eMwkJwitwSXt7DGbNSeBM5+kEhC/bQdATWg zW7L9bWc2XV++XeSqG74SG30SNvxs27jQlM= -----END CERTIFICATE-----Generated at Thu Aug 7 04:01:20 2025 by rpki-client