$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa File: 0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa (raw, json) Hash identifier: gVjekxwXDfe030eRoFm1L/7tKto8BXh5EuGw6YhOGTs= Subject key identifier: DE:68:55:55:AC:2A:B9:75:79:39:5F:5B:70:9C:79:49:CD:F2:4F:B8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7E7B801A2D1C6CCC75F771AC Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396572 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:80:1a:2d:1c:6c:cc:75:f7:71:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=35778e5d-502c-43ee-ad6c-a3709a8e8e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:28:a8:d2:6c:83:51:3d:d3:2a:d3:1c:b4: c7:f4:f2:e6:9b:36:d6:2d:e4:b8:64:db:b1:0f:bc: 78:82:42:0e:d2:89:ba:95:fa:f3:f6:de:b8:32:f6: 83:90:f9:35:20:2b:cd:cb:05:29:37:93:b0:c8:3f: c0:bf:9f:cc:f7:af:08:b9:d3:f0:2a:3b:d2:e2:2b: b2:84:af:c7:c3:1a:00:cf:7d:c0:6b:f0:52:07:c2: eb:74:c1:17:d1:3b:57:a4:79:f4:35:f5:19:87:8c: 26:d7:60:a9:a3:65:ab:7e:99:65:a2:bf:71:47:db: f4:48:43:4c:57:66:0c:a3:bb:41:91:a9:d7:07:e2: e8:d9:92:e0:59:b5:5d:18:46:b5:b3:de:e8:08:f5: 8c:7f:1a:ee:e2:f1:17:b6:d0:95:36:39:1b:ea:c2: 60:01:3c:e7:f2:99:52:0e:5f:84:f2:50:c1:e3:5e: c1:5a:11:d4:4e:44:ac:bb:67:cf:3d:63:35:55:58: 51:ae:95:eb:70:07:4c:3f:f4:3f:0c:2f:8c:c5:ac: 1c:b9:eb:b3:b7:e6:fb:9c:0d:e1:84:20:08:26:1e: ff:f4:25:78:59:16:e3:09:f5:b4:42:d3:91:8e:9d: a8:9e:72:6e:14:3c:fc:64:97:2b:29:7c:de:f4:61: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:55:55:AC:2A:B9:75:79:39:5F:5B:70:9C:79:49:CD:F2:4F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:53:4d:d8:e3:d3:40:52:e2:7e:1e:12:0f:cc:21:59:cc:29: 1b:dc:87:6f:be:4d:56:8f:77:56:9e:c8:ed:41:d4:42:91:78: 25:f0:06:99:0b:5e:4a:23:ed:a0:c7:f3:6b:ed:65:19:5f:ca: 62:e4:6d:51:3b:91:58:19:15:4f:8d:d2:06:a6:ab:b8:8a:1c: 81:98:33:fd:70:9b:68:9b:44:7e:ff:81:cf:a5:46:bb:1d:75: 41:2e:b4:e1:34:78:99:d8:7f:a1:8b:3e:fa:01:1f:bf:46:db: d3:19:f1:6e:18:2f:e2:d1:46:29:a3:53:04:d5:96:c1:95:ed: 16:ca:2b:bd:47:60:8d:7d:9b:69:ff:3e:12:52:26:5a:f6:51: 1b:2d:38:ef:9c:5c:1c:14:31:36:9e:a1:46:4e:65:da:54:dc: 98:16:51:2f:95:a2:52:85:c1:ff:7c:b6:a8:d1:91:f8:a7:17: 24:2e:16:01:bf:21:cb:fc:e9:39:c3:e9:a8:73:34:3e:ff:6b: 91:b1:2f:7f:ba:74:0f:c1:08:b5:e2:dd:47:01:fc:84:e5:19: 0d:c3:6c:9f:e8:f6:66:4b:43:86:52:41:e8:73:60:00:2d:b8: ab:52:77:7b:52:2c:55:aa:e3:47:35:80:a1:b9:7c:ab:25:45: b5:98:da:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp+e4AaLRxszHX3cawwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MzU3NzhlNWQtNTAyYy00M2VlLWFkNmMtYTM3MDlhOGU4ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9EoqNJsg1E90yrTHLTH9PLmmzbWLeS4ZNux D7x4gkIO0om6lfrz9t64MvaDkPk1ICvNywUpN5OwyD/Av5/M968IudPwKjvS4iuy hK/HwxoAz33Aa/BSB8LrdMEX0TtXpHn0NfUZh4wm12Cpo2Wrfpllor9xR9v0SENM V2YMo7tBkanXB+Lo2ZLgWbVdGEa1s97oCPWMfxru4vEXttCVNjkb6sJgATzn8plS Dl+E8lDB417BWhHUTkSsu2fPPWM1VVhRrpXrcAdMP/Q/DC+Mxawcueuzt+b7nA3h hCAIJh7/9CV4WRbjCfW0QtORjp2onnJuFDz8ZJcrKXze9GHt7wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN5oVVWsKrl1eTlfW3CceUnN8k+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI5ZjlkOWMtNWMyNy0z ZjBkLTg0ZjUtZWE5NjlhMzc5N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCmU03Y49NAUuJ+HhIPzCFZzCkb3Idvvk1Wj3dW nsjtQdRCkXgl8AaZC15KI+2gx/Nr7WUZX8pi5G1RO5FYGRVPjdIGpqu4ihyBmDP9 cJtom0R+/4HPpUa7HXVBLrThNHiZ2H+hiz76AR+/RtvTGfFuGC/i0UYpo1ME1ZbB le0Wyiu9R2CNfZtp/z4SUiZa9lEbLTjvnFwcFDE2nqFGTmXaVNyYFlEvlaJShcH/ fLao0ZH4pxckLhYBvyHL/Ok5w+moczQ+/2uRsS9/unQPwQi14t1HAfyE5RkNw2yf 6PZmS0OGUkHoc2AALbirUnd7UixVquNHNYChuXyrJUW1mNoQ -----END CERTIFICATE-----Generated at Wed Jul 23 17:12:31 2025 by rpki-client