$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/405a0247-f490-387f-8536-a9eae3d0cc88.roa File: 405a0247-f490-387f-8536-a9eae3d0cc88.roa (raw, json) Hash identifier: tKIX9YC7OW3zoUKavAehFM/zlYrfkBzxP3pi05EcjjU= Subject key identifier: B9:A2:BB:4B:B8:1E:7A:18:39:CA:63:49:45:DE:FD:63:8A:A7:E9:11 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C4EC15E67AEBAD25CDA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/405a0247-f490-387f-8536-a9eae3d0cc88.roa Signing time: Tue 22 Jul 2025 12:41:14 +0000 ROA not before: Tue 22 Jul 2025 12:41:14 +0000 ROA not after: Mon 20 Oct 2025 12:41:14 +0000 asID: 396540 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:4e:c1:5e:67:ae:ba:d2:5c:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:14 2025 GMT Not After : Oct 20 12:41:14 2025 GMT Subject: CN=4f2afb58-9bea-4d9f-8eb4-e722ae97f3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:96:50:e1:71:40:7d:4b:8f:ed:23:e0:92: fe:89:b2:da:a3:dd:4c:74:71:7b:a1:b8:f0:00:ae: ec:5e:5e:9c:4a:6b:61:2c:03:ae:90:17:98:12:76: 18:ea:be:77:69:df:4e:a8:e7:20:26:c9:80:59:e8: a9:11:4c:43:42:c6:f1:eb:69:8c:d0:33:40:de:a9: 12:d1:78:b1:ae:9f:92:12:8f:9e:65:21:79:7c:8b: 5a:3b:98:93:69:d1:4b:d1:b0:3e:6d:b2:83:37:7f: 99:bd:2e:51:55:c0:37:3f:f6:8a:34:aa:a0:2d:a7: 70:a9:b0:35:69:82:0b:2e:4b:14:23:f0:07:79:67: d4:78:c1:ce:48:bf:2f:3f:ef:31:8d:d1:b4:76:c8: d6:b1:8c:51:96:04:b3:d0:02:98:9c:e6:41:36:0a: 55:d8:cd:e1:a8:e8:62:e2:b5:3b:f4:ea:4a:35:f1: b1:fe:74:c9:3f:bf:7a:74:c1:34:c5:4a:91:ec:2d: 14:75:64:25:00:2b:fc:ce:42:d9:30:88:f0:e3:d8: 3d:98:a8:ff:0b:a2:5e:dd:1b:b1:e6:fb:2b:ba:ea: 13:9d:34:04:82:3a:0c:2c:0b:f3:27:2e:df:01:b4: d5:19:2c:e3:79:ed:21:69:07:61:f2:89:d1:53:cf: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A2:BB:4B:B8:1E:7A:18:39:CA:63:49:45:DE:FD:63:8A:A7:E9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/405a0247-f490-387f-8536-a9eae3d0cc88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ea:5d:25:9f:88:d2:91:92:5c:b4:7a:64:b8:86:cb:df:93: a6:ff:3a:8c:92:36:18:50:fd:3c:66:65:6b:5d:1a:08:81:9a: 04:0c:78:a8:8f:bd:65:2b:4e:ca:0d:98:7f:fa:c0:f0:5c:3b: 11:25:ba:98:ed:82:9b:86:3f:c6:dd:bb:38:c2:a0:71:47:5b: 19:0a:e5:cb:2f:11:21:3e:4d:bf:f4:dc:49:18:5e:3f:1f:2f: 21:49:c9:04:fd:31:ef:5a:a0:35:6a:c3:ab:1e:d3:95:24:5c: 73:18:f4:b1:87:01:36:2a:21:f0:0a:01:e7:f1:db:51:42:5d: 73:33:76:1c:96:47:d8:8f:fc:e2:aa:28:bc:53:5f:d5:4e:60: 73:51:0c:a6:87:42:e0:d8:7b:95:09:47:c5:f0:44:67:69:11: 78:7b:e4:8d:1d:08:2a:c2:e4:5c:09:44:78:49:fa:d4:3f:ff: cc:e2:02:e6:f4:8e:96:6b:87:35:5e:bf:25:36:dc:16:b1:60: eb:42:18:6c:1f:69:b5:49:0a:36:28:4e:6f:8b:72:ff:16:ae: 8d:a9:79:41:75:4a:e0:bf:62:34:b6:f9:fd:22:d3:0f:e7:fc: ba:f4:72:49:1b:7c:20:ef:df:9b:01:2b:2f:29:27:5a:e8:c8: 1c:43:fa:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXE7BXmeuutJc2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExNFoXDTI1MTAyMDEyNDExNFowLzEtMCsGA1UEAxMk NGYyYWZiNTgtOWJlYS00ZDlmLThlYjQtZTcyMmFlOTdmM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtyWUOFxQH1Lj+0j4JL+ibLao91MdHF7objw AK7sXl6cSmthLAOukBeYEnYY6r53ad9OqOcgJsmAWeipEUxDQsbx62mM0DNA3qkS 0Xixrp+SEo+eZSF5fItaO5iTadFL0bA+bbKDN3+ZvS5RVcA3P/aKNKqgLadwqbA1 aYILLksUI/AHeWfUeMHOSL8vP+8xjdG0dsjWsYxRlgSz0AKYnOZBNgpV2M3hqOhi 4rU79OpKNfGx/nTJP796dME0xUqR7C0UdWQlACv8zkLZMIjw49g9mKj/C6Je3Rux 5vsruuoTnTQEgjoMLAvzJy7fAbTVGSzjee0haQdh8onRU8+4ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLmiu0u4HnoYOcpjSUXe/WOKp+kRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA1YTAyNDctZjQ5MC0z ODdmLTg1MzYtYTllYWUzZDBjYzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALnqXSWfiNKRkly0emS4hsvfk6b/OoySNhhQ/TxmZWtdGgiBmgQM eKiPvWUrTsoNmH/6wPBcOxElupjtgpuGP8bduzjCoHFHWxkK5csvESE+Tb/03EkY Xj8fLyFJyQT9Me9aoDVqw6se05UkXHMY9LGHATYqIfAKAefx21FCXXMzdhyWR9iP /OKqKLxTX9VOYHNRDKaHQuDYe5UJR8XwRGdpEXh75I0dCCrC5FwJRHhJ+tQ//8zi Aub0jpZrhzVevyU23BaxYOtCGGwfabVJCjYoTm+Lcv8Wro2peUF1SuC/YjS2+f0i 0w/n/Lr0ckkbfCDv35sBKy8pJ1royBxD+nE= -----END CERTIFICATE-----Generated at Wed Jul 23 17:18:20 2025 by rpki-client