$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd416d5-0bfa-3254-a31a-c7214be0ae9c.roa File: 3cd416d5-0bfa-3254-a31a-c7214be0ae9c.roa (raw, json) Hash identifier: njCX7H3BQN2PKS1VrlnT4stvn0cvEOunM144r8oUpbw= Subject key identifier: F1:97:C5:90:40:80:19:C3:46:1F:2F:BF:AA:BD:DD:1C:21:C5:92:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C542848F2DB3EA2905480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd416d5-0bfa-3254-a31a-c7214be0ae9c.roa Signing time: Tue 22 Jul 2025 12:41:17 +0000 ROA not before: Tue 22 Jul 2025 12:41:17 +0000 ROA not after: Mon 20 Oct 2025 12:41:17 +0000 asID: 396600 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:54:28:48:f2:db:3e:a2:90:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:17 2025 GMT Not After : Oct 20 12:41:17 2025 GMT Subject: CN=de1df837-5a51-4c43-ba1b-4edb005fe3ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8c:8c:23:cb:92:63:d2:34:8d:bc:b5:69:7c: 59:1a:ad:fd:fd:99:ad:ea:6d:f7:09:d7:c9:bc:36: be:a0:c0:8a:48:98:69:40:45:e6:8e:01:fc:af:de: ab:12:34:9a:cf:b9:53:c5:da:ec:0f:60:83:62:12: 55:96:80:1d:0c:b1:7e:96:d9:48:89:02:ae:36:d7: 60:93:a1:6e:21:6d:09:3e:7d:c2:a8:22:ae:7f:10: ef:1a:41:cb:82:d2:fb:55:e0:d8:7d:b1:30:69:6f: 75:97:a8:0e:0e:fe:98:6e:bd:0e:97:0f:78:43:a1: 24:2a:3f:8e:b8:c9:c1:58:7f:f9:92:39:a6:be:16: af:db:8f:f8:6c:32:70:99:41:08:26:97:4b:b4:e3: a4:31:60:54:ae:00:f0:80:6b:73:fd:78:86:93:a8: 2f:a2:c6:19:33:27:f3:c4:dd:48:ae:f8:20:b7:5a: 7d:2c:eb:3f:dc:a1:ab:a4:5e:86:ff:fc:cb:3d:7b: ab:11:8a:8d:6a:93:33:8a:ec:72:17:cb:e4:cf:39: ba:e7:4b:15:95:40:f2:01:a7:a3:f3:fc:0e:48:e4: d7:83:4d:42:87:aa:2e:cf:9f:52:52:1c:69:71:de: 94:7c:22:d7:5a:1c:1d:be:04:8e:18:bd:6c:96:83: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:97:C5:90:40:80:19:C3:46:1F:2F:BF:AA:BD:DD:1C:21:C5:92:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cd416d5-0bfa-3254-a31a-c7214be0ae9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:38:d4:3f:b2:9f:31:9b:95:9d:dc:9b:47:65:ff:b4:4a:23: 60:56:4d:14:37:1d:d2:04:d3:3e:af:28:4b:8a:c9:cd:60:5a: bc:f8:cd:97:29:03:73:46:d6:c6:1f:f9:81:27:dc:2d:e9:32: 44:b5:10:18:5f:b6:e2:9a:ab:9c:5d:8f:9a:40:d3:f5:47:4c: ba:02:26:50:e0:36:ba:6e:fd:7e:54:ec:2e:46:ef:19:37:ce: 9f:06:aa:06:39:2d:22:0c:e3:4e:98:3c:88:54:d7:7b:99:ab: 77:04:37:7e:62:66:4f:b7:8f:f3:8e:3e:fb:8a:9c:ca:f2:31: 0e:05:85:e3:dd:ef:db:ab:4c:cb:57:14:6e:23:2b:54:e2:ad: 8d:3a:92:31:ef:9c:e6:48:d7:68:d2:6f:da:3a:5a:2d:fc:c1: e6:fa:0b:5f:b4:e9:0e:b2:7d:af:35:91:f6:c4:41:7e:34:74: 9d:a5:c5:96:47:65:f8:b3:84:4e:97:b3:45:dc:9a:49:ed:45: 8c:0e:f7:95:9f:f8:a9:0d:fe:65:0b:b6:b3:a8:b8:0f:37:1e: 3a:74:14:8f:8f:ad:9a:17:28:4e:89:68:d3:16:88:1d:fc:e9: 9d:ca:05:68:72:ae:84:c7:b0:61:58:75:fc:0a:c5:6d:7f:2a: 7d:b5:7d:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFQoSPLbPqKQVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExN1oXDTI1MTAyMDEyNDExN1owLzEtMCsGA1UEAxMk ZGUxZGY4MzctNWE1MS00YzQzLWJhMWItNGVkYjAwNWZlM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIyMI8uSY9I0jby1aXxZGq39/Zmt6m33CdfJ vDa+oMCKSJhpQEXmjgH8r96rEjSaz7lTxdrsD2CDYhJVloAdDLF+ltlIiQKuNtdg k6FuIW0JPn3CqCKufxDvGkHLgtL7VeDYfbEwaW91l6gODv6Ybr0Olw94Q6EkKj+O uMnBWH/5kjmmvhav24/4bDJwmUEIJpdLtOOkMWBUrgDwgGtz/XiGk6gvosYZMyfz xN1Irvggt1p9LOs/3KGrpF6G//zLPXurEYqNapMziuxyF8vkzzm650sVlUDyAaej 8/wOSOTXg01Ch6ouz59SUhxpcd6UfCLXWhwdvgSOGL1sloM9owIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPGXxZBAgBnDRh8vv6q93RwhxZKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2NkNDE2ZDUtMGJmYS0z MjU0LWEzMWEtYzcyMTRiZTBhZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIo41D+ynzGblZ3cm0dl/7RKI2BWTRQ3HdIE0z6vKEuKyc1gWrz4 zZcpA3NG1sYf+YEn3C3pMkS1EBhftuKaq5xdj5pA0/VHTLoCJlDgNrpu/X5U7C5G 7xk3zp8GqgY5LSIM406YPIhU13uZq3cEN35iZk+3j/OOPvuKnMryMQ4FhePd79ur TMtXFG4jK1TirY06kjHvnOZI12jSb9o6Wi38web6C1+06Q6yfa81kfbEQX40dJ2l xZZHZfizhE6Xs0XcmkntRYwO95Wf+KkN/mULtrOouA83Hjp0FI+PrZoXKE6JaNMW iB386Z3KBWhyroTHsGFYdfwKxW1/Kn21fSE= -----END CERTIFICATE-----Generated at Wed Jul 23 23:22:45 2025 by rpki-client