$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa File: 2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa (raw, json) Hash identifier: mOb4hQioLDSws9d6yixusvJzNwpLQsl1Hcgg0lcs7GI= Subject key identifier: 31:73:AC:2C:C3:64:10:10:B7:E8:CA:74:9F:70:0E:86:82:EE:B9:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CF9EBF182F30A9FFC9DC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa Signing time: Tue 15 Jul 2025 12:37:25 +0000 ROA not before: Tue 15 Jul 2025 12:37:25 +0000 ROA not after: Mon 13 Oct 2025 12:37:25 +0000 asID: 396541 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:9e:bf:18:2f:30:a9:ff:c9:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:25 2025 GMT Not After : Oct 13 12:37:25 2025 GMT Subject: CN=106b5071-5429-4bb7-92e1-c40ca4b9603c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e3:63:a5:64:35:26:3a:db:e3:14:dd:eb:f7: 98:33:f1:cb:68:91:d3:93:03:27:3c:35:98:a4:0c: 96:e0:b7:86:65:a2:63:1b:2a:38:80:9a:41:ca:4d: fd:9f:02:cf:90:75:b7:e4:b8:37:f8:72:96:18:0a: a9:49:50:81:6f:1d:f6:b4:a9:c0:43:d0:11:5f:be: f0:ba:bd:dd:e6:e9:c5:6f:78:49:38:42:10:b3:52: d4:33:cb:4e:44:39:e4:90:ec:21:87:b5:16:93:12: e5:db:2e:2f:e8:be:4b:58:62:5b:19:7c:aa:f4:a2: 97:e0:9d:e0:0f:6e:b1:64:c3:6e:ba:31:a3:2a:08: ab:47:96:18:c7:35:0e:07:a0:66:24:c6:73:c1:3a: 69:33:17:27:d0:9e:12:a2:70:b6:21:1d:74:ce:43: 62:9a:5b:b0:50:1a:ea:06:8a:5b:9b:fa:0d:f7:c6: 5d:ba:ac:f5:6e:a3:be:a5:dd:15:25:78:98:11:1e: 2a:d6:4e:0e:ec:3a:6b:b6:2a:e0:2a:79:2e:ca:a5: c8:ca:3a:da:b3:aa:d8:d4:47:cf:7e:c4:ea:de:e0: ca:c1:6d:40:a3:dc:2f:16:7a:0d:01:ac:86:0e:32: ca:50:28:5a:7c:49:26:7c:7a:35:f5:ee:24:77:bb: 42:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:73:AC:2C:C3:64:10:10:B7:E8:CA:74:9F:70:0E:86:82:EE:B9:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c6be719-4d6d-36d6-bcd1-8c0f8f404617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ce:41:c6:e2:d0:98:bc:9a:8b:03:d3:aa:75:01:3c:39:4f: 34:72:17:5a:78:a0:8b:67:18:71:49:13:26:6a:c7:96:00:8b: 45:e1:85:ea:0f:23:a4:04:0c:c9:40:cc:f3:82:7f:54:e0:1a: fc:ca:80:c0:5c:36:5a:97:d9:3d:bb:51:6e:ad:7e:91:2a:53: 70:56:49:02:4f:83:58:64:6c:45:1c:76:5a:a7:f7:f3:9c:b6: 4b:36:cc:d1:7e:0e:7d:7a:03:7d:0d:b1:1c:e8:12:a0:7b:35: 3f:e0:21:cf:ee:7c:dd:66:5b:71:01:c8:99:b9:25:9b:ae:6b: 77:0a:e7:7b:00:b2:f2:d2:6b:ba:c6:ec:d7:22:38:31:29:bb: 99:a7:52:32:59:5c:52:b3:5b:2c:32:6f:aa:8f:42:a7:b6:84: bc:a6:08:63:c0:40:b7:1b:97:25:1b:b2:f1:df:52:c7:dd:f0: 84:23:de:ea:97:de:9d:c9:e9:80:f5:36:58:ba:0e:4a:4d:9c: f6:65:cb:c2:0c:99:26:aa:17:da:61:be:89:2e:7d:07:6f:8f: d1:05:44:f5:4d:e1:67:54:d4:39:a3:4c:7f:cd:04:c7:9b:74: 7f:c1:f9:6b:f5:c6:bb:ec:2e:e7:b7:db:9f:ee:5c:a1:0a:7b: c9:da:b1:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz56/GC8wqf/J3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNVoXDTI1MTAxMzEyMzcyNVowLzEtMCsGA1UEAxMk MTA2YjUwNzEtNTQyOS00YmI3LTkyZTEtYzQwY2E0Yjk2MDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uNjpWQ1Jjrb4xTd6/eYM/HLaJHTkwMnPDWY pAyW4LeGZaJjGyo4gJpByk39nwLPkHW35Lg3+HKWGAqpSVCBbx32tKnAQ9ARX77w ur3d5unFb3hJOEIQs1LUM8tORDnkkOwhh7UWkxLl2y4v6L5LWGJbGXyq9KKX4J3g D26xZMNuujGjKgirR5YYxzUOB6BmJMZzwTppMxcn0J4SonC2IR10zkNimluwUBrq Bopbm/oN98Zduqz1bqO+pd0VJXiYER4q1k4O7DprtirgKnkuyqXIyjras6rY1EfP fsTq3uDKwW1Ao9wvFnoNAayGDjLKUChafEkmfHo19e4kd7tCBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDFzrCzDZBAQt+jKdJ9wDoaC7rnDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmM2YmU3MTktNGQ2ZC0z NmQ2LWJjZDEtOGMwZjhmNDA0NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbOQcbi0Ji8mosD06p1ATw5TzRyF1p4oItnGHFJEyZqx5YAi0Xh heoPI6QEDMlAzPOCf1TgGvzKgMBcNlqX2T27UW6tfpEqU3BWSQJPg1hkbEUcdlqn 9/Octks2zNF+Dn16A30NsRzoEqB7NT/gIc/ufN1mW3EByJm5JZuua3cK53sAsvLS a7rG7NciODEpu5mnUjJZXFKzWywyb6qPQqe2hLymCGPAQLcblyUbsvHfUsfd8IQj 3uqX3p3J6YD1Nli6DkpNnPZly8IMmSaqF9phvokufQdvj9EFRPVN4WdU1DmjTH/N BMebdH/B+Wv1xrvsLue325/uXKEKe8nasR0= -----END CERTIFICATE-----Generated at Fri Jul 25 00:57:26 2025 by rpki-client