$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d16f767-bd96-3217-8c24-67029ae7457b.roa File: 4d16f767-bd96-3217-8c24-67029ae7457b.roa (raw, json) Hash identifier: ZxIUDeaT0wjEVDoIKjG4oJScfY/D5BZxEELUHqdlGSc= Subject key identifier: 13:C0:63:84:96:AD:43:D1:4A:4B:72:4B:F0:CE:E1:E4:F1:69:64:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63CB3918881811BE15C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d16f767-bd96-3217-8c24-67029ae7457b.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 397207 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3c:b3:91:88:81:81:1b:e1:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=c88ac6ba-7026-4c62-b466-715dffb1a0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a7:22:5e:b5:ed:3f:38:a1:7c:0c:62:28:f6: 5b:8d:3f:22:5c:4f:b6:83:d4:f5:70:53:26:03:e6: 1b:d6:09:1e:9a:e0:b1:7e:9c:6c:2f:5d:6b:87:12: e0:aa:17:b5:20:c1:81:34:15:c1:5d:2c:5b:51:a2: a3:a4:d6:78:2b:ec:f2:ce:9f:9d:d0:e2:6c:dd:bf: a1:ca:69:33:62:26:1e:f5:74:0d:0b:70:ef:71:12: 9b:68:fe:1b:c2:ca:d6:2a:f4:1c:89:68:25:3e:d6: b8:f1:d5:c3:18:a0:89:ae:f1:bf:bf:18:5f:94:46: f5:3c:2c:a9:15:84:3f:4a:78:9e:1d:0f:ba:58:d1: e3:a2:ae:5f:3b:e1:11:48:db:82:54:2c:c8:50:f3: 0f:7c:c0:74:be:20:a8:d8:75:5b:33:d5:16:f5:cb: a0:4d:34:4a:61:e5:e3:20:35:48:fb:22:00:61:92: 58:73:72:d5:bc:53:95:09:50:77:63:ce:50:a3:3f: b5:f6:a2:ce:b6:8d:79:63:78:42:23:4d:bf:f6:f3: a4:68:03:31:1f:17:9c:36:3b:3e:b6:21:55:6c:e2: 82:85:8e:75:ab:7c:11:27:4f:4b:3c:e0:33:59:ab: f8:53:0b:e3:86:6f:15:51:30:cb:28:3c:6e:5f:54: 0c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C0:63:84:96:AD:43:D1:4A:4B:72:4B:F0:CE:E1:E4:F1:69:64:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d16f767-bd96-3217-8c24-67029ae7457b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:6e:9f:51:1a:59:4c:ac:d8:3f:27:5d:95:62:32:48:f4:4a: a3:ed:e0:42:fd:53:10:c1:0f:78:f2:0b:4e:a6:2b:1f:ef:32: 39:3e:75:14:ba:b2:5f:a2:a4:ee:46:f1:b3:80:64:8a:e9:c7: c9:d3:23:c9:ec:7d:05:0b:27:ab:46:55:4b:2d:b7:c5:d6:e4: e7:ff:89:8b:92:29:29:71:2c:04:1c:16:86:22:21:fd:17:be: 06:17:30:c5:e9:0f:e8:57:55:90:05:71:e1:f2:20:c3:d3:ef: 47:16:aa:e7:89:81:14:26:19:0a:6b:4b:3b:04:23:b8:74:e3: 51:af:4e:04:93:bf:7e:86:d0:74:ba:1e:ba:46:2a:d6:54:9c: 0a:2d:f4:72:a5:d5:b2:8f:e0:33:fc:90:5d:7e:58:56:4c:3e: 8f:2c:40:79:d2:f8:be:c8:4e:56:93:b9:f3:37:e8:84:06:0c: 5e:ad:14:ed:13:88:e2:c4:d6:c3:c6:db:4a:6f:2e:33:57:cd: af:1d:67:36:d4:7c:cf:2e:ad:84:94:49:b1:e0:7a:e5:63:26: d2:78:fc:07:9d:fc:5d:48:14:e3:89:52:a9:14:d5:64:74:53: 97:95:13:75:cd:45:fc:94:bd:11:31:a6:80:4f:d2:c5:50:0e: 90:84:50:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jyzkYiBgRvhXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk Yzg4YWM2YmEtNzAyNi00YzYyLWI0NjYtNzE1ZGZmYjFhMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqciXrXtPzihfAxiKPZbjT8iXE+2g9T1cFMm A+Yb1gkemuCxfpxsL11rhxLgqhe1IMGBNBXBXSxbUaKjpNZ4K+zyzp+d0OJs3b+h ymkzYiYe9XQNC3DvcRKbaP4bwsrWKvQciWglPta48dXDGKCJrvG/vxhflEb1PCyp FYQ/SnieHQ+6WNHjoq5fO+ERSNuCVCzIUPMPfMB0viCo2HVbM9UW9cugTTRKYeXj IDVI+yIAYZJYc3LVvFOVCVB3Y85Qoz+19qLOto15Y3hCI02/9vOkaAMxHxecNjs+ tiFVbOKChY51q3wRJ09LPOAzWav4Uwvjhm8VUTDLKDxuX1QM8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBPAY4SWrUPRSktyS/DO4eTxaWSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGQxNmY3NjctYmQ5Ni0z MjE3LThjMjQtNjcwMjlhZTc0NTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFpun1EaWUys2D8nXZViMkj0SqPt4EL9UxDBD3jyC06mKx/vMjk+ dRS6sl+ipO5G8bOAZIrpx8nTI8nsfQULJ6tGVUstt8XW5Of/iYuSKSlxLAQcFoYi If0XvgYXMMXpD+hXVZAFceHyIMPT70cWqueJgRQmGQprSzsEI7h041GvTgSTv36G 0HS6HrpGKtZUnAot9HKl1bKP4DP8kF1+WFZMPo8sQHnS+L7ITlaTufM36IQGDF6t FO0TiOLE1sPG20pvLjNXza8dZzbUfM8urYSUSbHgeuVjJtJ4/Aed/F1IFOOJUqkU 1WR0U5eVE3XNRfyUvRExpoBP0sVQDpCEUFA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:20:01 2025 by rpki-client