$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c4978b6-8de8-3695-9351-97bd5cedbc93.roa File: 2c4978b6-8de8-3695-9351-97bd5cedbc93.roa (raw, json) Hash identifier: eWpVuYiryb+xzH1b7oeajbWuJW+kMLk/62VNSLkzcl4= Subject key identifier: 1D:6F:FC:7D:88:B0:0A:0D:C7:C1:96:3E:F0:26:DD:05:2D:41:84:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C60EC9EE0D104C3040800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c4978b6-8de8-3695-9351-97bd5cedbc93.roa Signing time: Tue 22 Jul 2025 12:41:23 +0000 ROA not before: Tue 22 Jul 2025 12:41:23 +0000 ROA not after: Mon 20 Oct 2025 12:41:23 +0000 asID: 397200 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:60:ec:9e:e0:d1:04:c3:04:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:23 2025 GMT Not After : Oct 20 12:41:23 2025 GMT Subject: CN=81994efa-79d6-4b6d-9ffe-b026bf18f879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:6a:e0:2e:09:2b:14:d4:b2:54:47:8e:70: 38:8d:8f:03:30:f3:cd:c0:cc:d9:70:77:46:17:92: bd:97:53:a6:cc:6b:2a:d0:69:4c:0b:8c:9f:d2:16: c6:8a:f4:27:7b:e5:9f:56:24:b4:9a:41:16:ea:f5: 25:55:1a:64:b5:46:82:af:10:8a:75:c4:3c:c6:a9: fc:30:85:c3:ee:58:67:4d:60:01:78:4b:95:14:e9: 6b:47:5b:f1:b4:04:f2:74:66:e8:60:53:27:68:e5: cf:ce:4a:bb:6e:c4:54:7a:77:9f:75:53:55:8b:6e: d0:6f:24:bd:7a:ef:4b:75:b7:e3:ac:8d:4f:e8:85: 73:5b:dc:18:54:86:ba:18:c6:11:e1:87:47:de:0a: 91:11:11:f9:8a:3b:98:72:10:ea:24:35:a0:9a:0a: fc:2c:fd:03:03:a8:43:61:bf:eb:7c:e1:53:6d:42: 7d:c2:13:9b:aa:e5:c0:2e:87:ce:05:b0:1b:10:1e: d8:c2:87:03:fe:3f:9a:5d:44:84:55:c8:37:c3:2c: 7b:26:2c:ff:c8:16:cd:3d:c8:42:e5:d7:48:02:a9: 50:47:87:3f:ce:56:89:53:14:20:29:bd:53:b5:e9: 9d:af:ac:c0:2e:64:a5:ac:d6:ab:bb:b1:16:e2:34: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:FC:7D:88:B0:0A:0D:C7:C1:96:3E:F0:26:DD:05:2D:41:84:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c4978b6-8de8-3695-9351-97bd5cedbc93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f5:c6:57:c8:c4:0c:f2:5d:38:19:88:f3:34:c2:c9:49:09: f7:85:7a:0d:e9:ad:8f:6e:4d:77:d5:d8:71:26:16:16:94:12: 1f:ed:ac:4d:cd:ec:35:2d:ed:4b:9c:ba:70:87:a0:fd:70:67: 62:fe:77:2f:1f:14:d6:cb:a7:5e:8d:68:3c:08:25:7b:aa:3f: b6:eb:a9:e8:ff:6a:bb:75:ee:d2:e0:27:d2:09:10:99:ea:4a: 5d:b8:af:b5:f2:fe:5c:df:25:f1:ea:e5:10:20:b5:01:e4:0f: d1:3a:db:37:5c:37:c2:13:44:c9:3e:ff:f3:c5:4e:74:0d:0d: 7c:fb:37:8b:c0:79:8c:b9:24:5c:4e:61:5a:5d:96:13:06:46: 12:2e:b7:e1:cf:67:5b:e3:0d:9d:de:96:87:f8:9a:fb:d2:89: 5d:06:80:f7:0e:f6:27:1a:f6:e6:9d:a2:c6:28:5c:53:4a:ba: 97:b2:dc:82:26:07:7e:2c:18:21:28:28:f4:cf:78:2b:f2:b4: 9c:11:48:48:d1:a7:92:3e:b7:aa:a1:8e:31:e2:8c:45:02:ab: 9a:cd:e0:07:5c:de:22:af:12:91:d9:73:3d:86:3f:59:14:e3: 96:a9:aa:ba:42:d5:af:70:ef:5f:7d:7a:18:09:71:e2:61:04: 86:1c:74:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXGDsnuDRBMMECAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDEyM1oXDTI1MTAyMDEyNDEyM1owLzEtMCsGA1UEAxMk ODE5OTRlZmEtNzlkNi00YjZkLTlmZmUtYjAyNmJmMThmODc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArudq4C4JKxTUslRHjnA4jY8DMPPNwMzZcHdG F5K9l1OmzGsq0GlMC4yf0hbGivQne+WfViS0mkEW6vUlVRpktUaCrxCKdcQ8xqn8 MIXD7lhnTWABeEuVFOlrR1vxtATydGboYFMnaOXPzkq7bsRUenefdVNVi27QbyS9 eu9LdbfjrI1P6IVzW9wYVIa6GMYR4YdH3gqRERH5ijuYchDqJDWgmgr8LP0DA6hD Yb/rfOFTbUJ9whObquXALofOBbAbEB7YwocD/j+aXUSEVcg3wyx7Jiz/yBbNPchC 5ddIAqlQR4c/zlaJUxQgKb1Ttemdr6zALmSlrNaru7EW4jSHsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB1v/H2IsAoNx8GWPvAm3QUtQYSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmM0OTc4YjYtOGRlOC0z Njk1LTkzNTEtOTdiZDVjZWRiYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ31xlfIxAzyXTgZiPM0wslJCfeFeg3prY9uTXfV2HEmFhaUEh/t rE3N7DUt7UucunCHoP1wZ2L+dy8fFNbLp16NaDwIJXuqP7brqej/art17tLgJ9IJ EJnqSl24r7Xy/lzfJfHq5RAgtQHkD9E62zdcN8ITRMk+//PFTnQNDXz7N4vAeYy5 JFxOYVpdlhMGRhIut+HPZ1vjDZ3elof4mvvSiV0GgPcO9ica9uadosYoXFNKupey 3IImB34sGCEoKPTPeCvytJwRSEjRp5I+t6qhjjHijEUCq5rN4Adc3iKvEpHZcz2G P1kU45apqrpC1a9w7199ehgJceJhBIYcdNE= -----END CERTIFICATE-----Generated at Wed Jul 23 23:42:37 2025 by rpki-client