$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa File: cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa (raw, json) Hash identifier: OyZg36AVxascu1R5QOJ7u0LjRbtiCU+IErsCz1HdQys= Subject key identifier: 15:62:70:6F:9D:86:81:69:7D:5D:0E:C5:A7:2F:A3:A3:1D:26:BD:AB Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584AB4EB67DA7BF1FDA9FEC3FF00 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33071 IP address blocks: 2001:500:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:eb:67:da:7b:f1:fd:a9:fe:c3:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=1c6a234b-37c1-40b0-9249-c4e38f0d3555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:09:33:43:8c:14:0b:70:6b:4b:5f:92:ea: 4f:72:ce:62:dc:39:1a:63:9e:4b:70:02:2d:27:5e: 9f:dd:02:4d:86:e7:79:5f:d5:69:99:ae:89:e5:fe: d6:e8:20:00:13:9b:91:34:f9:7e:ad:93:51:2e:56: 4a:34:7a:76:d4:d6:c8:4f:e3:f8:e1:77:54:8a:78: 7b:9d:4c:1e:0d:42:34:ca:fb:1f:55:43:30:3f:05: 0a:1f:9a:b1:85:2f:4e:b7:31:a8:0a:f6:dc:c0:5d: d9:21:15:8f:aa:a0:68:45:77:07:0c:59:39:f9:ef: 0e:2b:26:2f:98:92:8d:5b:07:9a:a2:c5:b7:bf:b0: b2:ea:15:78:85:76:c0:9c:0f:71:aa:bc:52:85:28: e1:95:1d:fe:33:49:f3:dd:6a:c3:27:1a:70:42:30: 87:23:36:41:7f:ed:76:a3:85:47:83:7e:f2:de:70: 3a:12:44:82:e5:af:4c:fc:29:15:84:81:72:5a:6e: 40:25:2b:bc:b7:d2:5b:6d:95:1f:18:ec:c8:84:71: ee:68:b1:61:3c:ff:2d:4d:1a:34:8c:4e:d6:ec:81: bf:46:64:05:9b:7a:e5:28:91:e3:61:bf:af:35:7c: e3:4d:31:f9:18:1b:90:bf:48:1b:c6:6e:cb:ea:11: 84:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:62:70:6F:9D:86:81:69:7D:5D:0E:C5:A7:2F:A3:A3:1D:26:BD:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/cf00bd16-50e8-3ac2-97b5-399cd7d9d044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a6:e0:35:c5:83:c6:d2:4d:02:e7:26:9f:33:b7:2c:5e:f2: aa:17:97:91:49:27:52:20:1d:3d:62:63:d2:8d:43:29:e4:ac: 20:db:28:a3:1f:e1:8e:c9:85:25:4b:1f:a2:4e:9a:23:05:27: 98:4a:22:46:03:a2:83:b5:88:0a:47:8a:09:14:f8:55:07:b5: 2d:6a:21:3f:53:19:b0:74:0d:44:f6:ad:84:d3:0e:4f:83:49: 17:97:80:ad:17:bf:7c:93:39:18:7d:57:0f:90:53:eb:fe:a7: bf:92:51:53:25:49:4a:a8:2c:f4:14:35:e8:41:b1:cd:42:f0: ce:6c:4f:bd:cb:89:42:a5:31:d8:7a:aa:00:2c:f1:83:ea:c3: 12:96:e5:d7:0d:3c:6f:52:98:19:a7:d3:5a:16:bc:b5:96:7b: bb:c4:50:9a:22:e7:10:78:ba:d2:a8:2d:12:d2:4c:66:97:a8: 38:7f:ce:db:50:5d:b9:71:d7:9f:e3:b8:9d:3b:2b:55:c4:d4: fe:80:29:6b:64:ec:5a:20:07:57:18:e7:1a:7f:6e:3f:33:e4: 50:b9:86:5c:c9:5d:23:cf:ca:ca:5a:af:31:9a:95:88:55:ee: f9:d2:fc:85:69:84:42:94:86:77:ea:a8:2b:24:86:a0:88:b4: 74:3d:25:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq062fae/H9qf7D/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MWM2YTIzNGItMzdjMS00MGIwLTkyNDktYzRlMzhmMGQzNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuAJM0OMFAtwa0tfkupPcs5i3DkaY55LcAIt J16f3QJNhud5X9Vpma6J5f7W6CAAE5uRNPl+rZNRLlZKNHp21NbIT+P44XdUinh7 nUweDUI0yvsfVUMwPwUKH5qxhS9OtzGoCvbcwF3ZIRWPqqBoRXcHDFk5+e8OKyYv mJKNWweaosW3v7Cy6hV4hXbAnA9xqrxShSjhlR3+M0nz3WrDJxpwQjCHIzZBf+12 o4VHg37y3nA6EkSC5a9M/CkVhIFyWm5AJSu8t9JbbZUfGOzIhHHuaLFhPP8tTRo0 jE7W7IG/RmQFm3rlKJHjYb+vNXzjTTH5GBuQv0gbxm7L6hGE1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBVicG+dhoFpfV0Oxacvo6MdJr2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvY2YwMGJkMTYtNTBlOC0z YWMyLTk3YjUtMzk5Y2Q3ZDlkMDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAABx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqm4DXFg8bSTQLnJp8ztyxe8qoXl5FJJ1IgHT1iY9KNQynkrCDb KKMf4Y7JhSVLH6JOmiMFJ5hKIkYDooO1iApHigkU+FUHtS1qIT9TGbB0DUT2rYTT Dk+DSReXgK0Xv3yTORh9Vw+QU+v+p7+SUVMlSUqoLPQUNehBsc1C8M5sT73LiUKl Mdh6qgAs8YPqwxKW5dcNPG9SmBmn01oWvLWWe7vEUJoi5xB4utKoLRLSTGaXqDh/ zttQXblx15/juJ07K1XE1P6AKWtk7FogB1cY5xp/bj8z5FC5hlzJXSPPysparzGa lYhV7vnS/IVphEKUhnfqqCskhqCItHQ9JaE= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:32 2025 by rpki-client