$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d4aaebe-d264-37d2-9b83-39b993840905.roa File: 9d4aaebe-d264-37d2-9b83-39b993840905.roa (raw, json) Hash identifier: iE7q5L1/xCP3DpNqP4o/9bBo4fhgXWytVavGnoB78sc= Subject key identifier: 08:FA:35:17:EE:74:4A:6A:37:8F:33:7F:BB:55:F4:AE:35:9C:39:B5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB7B627EF1856AE54B8E21160 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d4aaebe-d264-37d2-9b83-39b993840905.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 396583 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:27:ef:18:56:ae:54:b8:e2:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=db1f5820-8d7c-4e1e-81f7-b09b19f70548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:3b:82:3b:26:af:c3:c8:e6:bd:6d:29:d8: 54:23:2f:be:8e:0f:3e:43:87:43:53:35:07:36:d9: bb:a7:d9:9e:89:19:1a:86:3b:ae:d5:40:02:47:4c: f2:ab:81:51:60:fc:8d:7a:63:7a:0c:c0:52:bd:43: 8b:06:2b:ce:60:43:68:fa:fd:8a:ff:fb:9f:b7:c5: f5:f0:de:91:f1:cc:02:b0:d3:c0:53:36:5e:ab:a5: 12:71:ad:c5:6e:f8:b8:64:73:7b:d2:7a:da:41:bd: b6:72:76:08:13:8f:df:b0:78:86:52:e1:5f:5b:e3: 31:78:88:92:f3:47:d8:24:84:03:42:4e:34:43:04: ea:ed:9a:1b:91:cf:22:fc:d1:9c:09:b2:76:e9:87: ae:ce:a9:9f:2a:15:8e:18:68:02:bd:dc:f0:f5:2d: 92:44:b9:0d:b7:28:49:94:55:07:d8:4a:24:42:4d: 15:9e:56:f4:92:9b:fd:c2:2c:17:03:0f:6b:27:6b: 47:30:a3:14:43:a3:71:00:ea:d0:96:86:ad:ae:0a: c9:a3:43:3a:b9:af:c0:12:55:b9:57:44:4c:69:55: d9:17:79:ad:4d:49:78:4d:c8:7d:d2:84:10:23:5e: 2b:65:27:00:2f:cb:5d:06:cf:c2:af:9a:6a:9a:cb: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FA:35:17:EE:74:4A:6A:37:8F:33:7F:BB:55:F4:AE:35:9C:39:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d4aaebe-d264-37d2-9b83-39b993840905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:84:a5:c7:35:dc:55:02:6c:75:e7:3e:96:a0:05:df:eb:c1: 75:a6:30:4f:c9:9c:2b:f6:0a:c8:78:45:ac:b1:0c:cc:ff:01: 0b:2f:53:88:93:ad:f2:3e:a9:ca:a3:66:c2:56:f7:a0:bc:f5: dd:e8:a1:93:32:22:51:b1:9c:ca:e8:c9:71:cb:12:1b:23:a2: a5:6e:6c:83:dc:8f:78:e4:e4:b0:35:1c:0f:87:83:32:84:e7: 7d:62:88:6b:df:7e:7b:70:bf:e0:e0:19:8d:cf:60:b4:8e:8f: 5a:3c:a3:90:f0:04:50:b4:8f:16:e8:81:85:80:07:b7:d9:27: 56:ac:58:8e:84:ac:8a:5c:df:e4:7b:03:a2:99:48:30:6d:6f: 0d:ad:92:90:a8:2e:ec:b9:65:01:0f:6c:b9:b7:5f:11:74:4d: 1c:58:57:cb:74:f5:be:ab:47:5a:c4:9b:6e:37:b4:8f:61:74: fe:c9:03:ce:3e:35:78:14:d0:ce:4f:c6:61:83:1f:59:2a:28: 88:ec:6d:00:b4:6a:bb:ab:14:b5:24:1d:f7:91:b9:29:1f:79: 2a:f9:5c:0c:7c:57:fd:f0:a6:f7:26:d5:60:ed:fb:39:4c:9d: 9b:f7:d9:10:a2:e4:24:6e:5f:6e:fe:bd:e5:59:82:08:b0:12: 04:1c:78:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tifvGFauVLjiEWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZGIxZjU4MjAtOGQ3Yy00ZTFlLTgxZjctYjA5YjE5ZjcwNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEI7gjsmr8PI5r1tKdhUIy++jg8+Q4dDUzUH Ntm7p9meiRkahjuu1UACR0zyq4FRYPyNemN6DMBSvUOLBivOYENo+v2K//uft8X1 8N6R8cwCsNPAUzZeq6USca3Fbvi4ZHN70nraQb22cnYIE4/fsHiGUuFfW+MxeIiS 80fYJIQDQk40QwTq7Zobkc8i/NGcCbJ26YeuzqmfKhWOGGgCvdzw9S2SRLkNtyhJ lFUH2EokQk0Vnlb0kpv9wiwXAw9rJ2tHMKMUQ6NxAOrQloatrgrJo0M6ua/AElW5 V0RMaVXZF3mtTUl4Tch90oQQI14rZScAL8tdBs/Cr5pqmsv/twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAj6NRfudEpqN48zf7tV9K41nDm1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWQ0YWFlYmUtZDI2NC0z N2QyLTliODMtMzliOTkzODQwOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACKEpcc13FUCbHXnPpagBd/rwXWmME/JnCv2Csh4RayxDMz/AQsv U4iTrfI+qcqjZsJW96C89d3ooZMyIlGxnMroyXHLEhsjoqVubIPcj3jk5LA1HA+H gzKE531iiGvffntwv+DgGY3PYLSOj1o8o5DwBFC0jxbogYWAB7fZJ1asWI6ErIpc 3+R7A6KZSDBtbw2tkpCoLuy5ZQEPbLm3XxF0TRxYV8t09b6rR1rEm243tI9hdP7J A84+NXgU0M5PxmGDH1kqKIjsbQC0arurFLUkHfeRuSkfeSr5XAx8V/3wpvcm1WDt +zlMnZv32RCi5CRuX27+veVZggiwEgQceAk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:16 2025 by rpki-client