$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa File: 3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa (raw, json) Hash identifier: O9voGQ9Q9NhKE+r4mRqNxGtDQRlwK5uABPLRQYvUSg4= Subject key identifier: B4:78:73:56:6E:C2:EB:9B:9D:D5:E3:C1:0F:DC:C2:C5:70:22:38:F1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CF9E66B2C4329DF24DECAC Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa Signing time: Tue 15 Jul 2025 12:37:24 +0000 ROA not before: Tue 15 Jul 2025 12:37:24 +0000 ROA not after: Mon 13 Oct 2025 12:37:24 +0000 asID: 22547 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:9e:66:b2:c4:32:9d:f2:4d:ec:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:24 2025 GMT Not After : Oct 13 12:37:24 2025 GMT Subject: CN=ff5cbfa3-c177-45fb-ad16-d0af8a4de789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:b5:0e:dd:bd:75:06:35:ed:31:27:0e:ff: 14:94:7d:a6:3a:45:1c:0d:97:93:c1:60:c9:e5:e4: 1e:bb:f6:b6:8d:14:09:af:15:25:c7:6c:b2:d3:2c: 06:48:6c:10:b0:d4:a7:d9:a9:ee:1f:5c:21:2f:2c: d0:4a:34:c8:33:5c:63:ba:95:09:fa:e2:a8:b3:82: 3e:4b:76:f8:57:0e:11:90:5c:12:e0:c7:17:41:34: 94:be:08:33:9a:25:81:b4:5c:04:d5:6a:1d:a1:b5: b5:fa:e2:7d:ea:9f:07:22:3a:e4:75:90:3c:2a:6e: 55:01:c4:55:d8:55:8b:35:89:cf:3f:40:0f:64:cb: c5:db:49:f1:77:fb:68:0e:83:cc:ec:4b:bb:ab:95: 66:17:b1:f4:74:51:11:5f:11:5a:83:9d:54:a8:92: c8:47:ea:81:1a:a0:d9:19:43:a8:d8:52:0a:94:b7: 78:45:e8:2e:69:4f:44:b4:1f:f7:76:ed:73:90:b5: 80:98:22:c5:2a:0f:ed:09:79:87:fc:f8:2d:95:68: 8b:c6:8c:f4:92:aa:f4:66:b8:a0:75:2c:9a:0f:e3: f4:cc:e4:14:a3:f9:c8:5f:7b:eb:71:9a:6f:76:81: 03:11:42:44:6f:a2:ca:ff:9d:76:aa:24:b3:33:55: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:78:73:56:6E:C2:EB:9B:9D:D5:E3:C1:0F:DC:C2:C5:70:22:38:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:60:4a:22:bb:f0:8d:87:37:9d:11:0f:1e:a0:d0:c0:59:8a: 90:01:b9:d7:62:b1:1e:1e:b6:c1:c2:69:bf:fd:b1:7b:06:ab: 6c:0d:5a:1b:17:da:42:b8:7a:31:79:f9:4d:17:21:ea:59:a9: 92:ba:69:c8:de:c7:89:1f:2f:a4:2b:d5:12:a7:ea:1b:ce:31: b3:4e:bf:44:ca:5a:94:db:f3:75:ea:f4:8d:e6:52:a0:b9:52: 9b:c5:db:87:07:4c:f4:ec:ce:dd:2c:36:99:0b:d6:9b:55:8d: d5:50:7f:d8:a5:ec:af:eb:b1:e8:9c:82:62:ce:d4:22:f3:dc: 2f:21:eb:7b:6f:14:7e:f1:4a:2a:25:81:a0:4a:d3:a1:71:d2: fe:36:7f:0b:4d:68:9d:6c:c7:02:e3:98:81:7b:bd:1a:6e:b8: f0:78:b6:26:6a:ca:fc:d8:b6:68:14:7f:26:ca:ea:a4:78:5f: 4a:1d:af:bb:5b:13:b9:da:14:e4:bd:11:9e:b2:d8:57:8f:0a: 96:69:63:57:18:30:c9:86:48:ca:b5:1d:b4:6e:11:a9:e4:9a: 87:2c:83:76:cf:e4:b0:5e:ea:a6:c4:91:ec:b2:d7:25:f1:aa: 95:6e:e8:60:55:03:67:ce:7f:5b:de:04:0a:57:dd:e7:42:17: 9b:8b:58:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz55mssQynfJN7KwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNFoXDTI1MTAxMzEyMzcyNFowLzEtMCsGA1UEAxMk ZmY1Y2JmYTMtYzE3Ny00NWZiLWFkMTYtZDBhZjhhNGRlNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH21Dt29dQY17TEnDv8UlH2mOkUcDZeTwWDJ 5eQeu/a2jRQJrxUlx2yy0ywGSGwQsNSn2anuH1whLyzQSjTIM1xjupUJ+uKos4I+ S3b4Vw4RkFwS4McXQTSUvggzmiWBtFwE1WodobW1+uJ96p8HIjrkdZA8Km5VAcRV 2FWLNYnPP0APZMvF20nxd/toDoPM7Eu7q5VmF7H0dFERXxFag51UqJLIR+qBGqDZ GUOo2FIKlLd4ReguaU9EtB/3du1zkLWAmCLFKg/tCXmH/PgtlWiLxoz0kqr0Zrig dSyaD+P0zOQUo/nIX3vrcZpvdoEDEUJEb6LK/512qiSzM1VjqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLR4c1ZuwuubndXjwQ/cwsVwIjjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E2NWE4OTMtNmJjNS0z YzhlLWEwYjQtY2UyZWM3ZDE0Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALRgSiK78I2HN50RDx6g0MBZipABuddisR4etsHCab/9sXsGq2wN WhsX2kK4ejF5+U0XIepZqZK6acjex4kfL6Qr1RKn6hvOMbNOv0TKWpTb83Xq9I3m UqC5UpvF24cHTPTszt0sNpkL1ptVjdVQf9il7K/rseicgmLO1CLz3C8h63tvFH7x SiolgaBK06Fx0v42fwtNaJ1sxwLjmIF7vRpuuPB4tiZqyvzYtmgUfybK6qR4X0od r7tbE7naFOS9EZ6y2FePCpZpY1cYMMmGSMq1HbRuEankmocsg3bP5LBe6qbEkeyy 1yXxqpVu6GBVA2fOf1veBApX3edCF5uLWDo= -----END CERTIFICATE-----Generated at Fri Jul 25 10:54:08 2025 by rpki-client