$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ec88c2-471c-3b0e-8d3d-cca4a76f6495.roa File: 59ec88c2-471c-3b0e-8d3d-cca4a76f6495.roa (raw, json) Hash identifier: dEsiPE+1GMbJ39vM6Y1n3loCtZ9dVk9lttqso08zeDg= Subject key identifier: 73:E2:97:29:01:F4:0A:DD:1D:5E:24:3D:B3:ED:B2:99:52:98:4F:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CF9EAFE5CD27986E577640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ec88c2-471c-3b0e-8d3d-cca4a76f6495.roa Signing time: Tue 15 Jul 2025 12:37:25 +0000 ROA not before: Tue 15 Jul 2025 12:37:25 +0000 ROA not after: Mon 13 Oct 2025 12:37:25 +0000 asID: 396543 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:9e:af:e5:cd:27:98:6e:57:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:25 2025 GMT Not After : Oct 13 12:37:25 2025 GMT Subject: CN=c6dc19c6-a548-44a6-ab2a-e13808ecf2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:cb:30:52:9e:7b:ef:00:c7:03:ef:25:cb: cf:07:1f:77:6d:b7:07:ca:d7:5c:a2:c9:16:52:54: 40:be:00:e1:11:e3:92:4a:aa:a7:1f:09:ab:b9:ac: 25:e7:39:02:20:55:27:72:78:4d:68:c4:d2:dc:e4: a3:ac:c3:b8:5a:87:5b:43:cd:2a:af:7d:79:73:a3: a3:d8:f9:9b:22:8a:64:68:da:44:ce:a6:f9:dc:e2: d0:05:de:67:56:37:5a:4c:45:2b:85:b8:d4:f8:bc: e1:3e:35:74:d5:2e:a5:97:4d:b9:5f:9c:b0:b8:67: 6f:85:cc:22:9c:a8:f5:d7:49:d3:df:b2:91:04:c5: 5e:6a:50:0c:27:c2:0c:70:be:0e:0e:25:8f:11:3b: 88:bf:94:fe:48:8e:2d:c5:77:83:2f:62:aa:de:6c: b9:48:75:15:2c:00:09:2f:9f:1d:d2:27:07:c3:b2: 30:f8:c8:91:66:61:2d:71:ca:5a:e1:0e:3e:d3:34: e4:58:4b:dc:92:5d:bd:aa:c9:ad:96:5e:16:0d:a4: 9e:9f:2e:b0:13:ac:da:01:30:01:d0:3b:87:32:54: 59:d3:0c:df:f3:06:96:1a:15:f4:9a:2b:11:db:c8: e8:fd:5c:16:b2:45:f1:9d:6f:a3:5a:52:11:e4:e9: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E2:97:29:01:F4:0A:DD:1D:5E:24:3D:B3:ED:B2:99:52:98:4F:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59ec88c2-471c-3b0e-8d3d-cca4a76f6495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:42:65:67:0f:88:49:ec:4c:52:c4:09:60:91:5e:e5:d8:ef: b4:45:a7:00:bc:12:6b:e3:09:41:18:55:71:1d:28:73:1f:4e: 33:ec:f6:e3:8d:d9:a5:68:d8:58:76:46:9e:7b:6f:f9:3e:ba: ea:2d:39:b7:7b:1c:2b:63:ad:fc:88:06:a3:8f:f4:4d:9f:e4: 5e:0f:46:bb:3f:7f:9c:6a:64:88:0e:fb:98:55:e2:0f:e3:2e: e5:fa:df:27:70:5e:b0:99:a3:6d:05:d0:72:eb:e4:e0:85:2b: c9:6c:6c:97:d8:f7:24:69:f8:24:68:bb:b4:f7:6f:0c:03:1a: 9f:52:f9:c8:85:c7:7c:d8:3c:da:a1:ec:b3:0b:69:ae:f7:d3: a2:e3:dc:db:59:fe:3f:86:f7:0d:f1:b9:63:16:ce:14:2c:73: a1:26:ed:e0:97:6a:b5:00:ec:23:8e:1b:04:18:43:7b:8f:4d: 6d:ae:a6:8e:b1:0c:a3:31:6f:3a:5e:f8:4e:9b:b6:ab:b1:5f: 21:8a:08:d1:ad:4b:8c:83:87:b5:57:89:49:7a:28:52:ed:a1: b8:eb:97:48:8c:85:43:1a:a2:ab:a3:97:34:3d:e1:df:fd:51: 30:fe:6b:c5:0b:98:97:4b:c8:d6:b4:00:21:70:6e:ff:c1:79: 32:fc:9f:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz56v5c0nmG5XdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNVoXDTI1MTAxMzEyMzcyNVowLzEtMCsGA1UEAxMk YzZkYzE5YzYtYTU0OC00NGE2LWFiMmEtZTEzODA4ZWNmMmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5TLMFKee+8AxwPvJcvPBx93bbcHytdcoskW UlRAvgDhEeOSSqqnHwmruawl5zkCIFUncnhNaMTS3OSjrMO4WodbQ80qr315c6Oj 2PmbIopkaNpEzqb53OLQBd5nVjdaTEUrhbjU+LzhPjV01S6ll025X5ywuGdvhcwi nKj110nT37KRBMVealAMJ8IMcL4ODiWPETuIv5T+SI4txXeDL2Kq3my5SHUVLAAJ L58d0icHw7Iw+MiRZmEtccpa4Q4+0zTkWEvckl29qsmtll4WDaSeny6wE6zaATAB 0DuHMlRZ0wzf8waWGhX0misR28jo/VwWskXxnW+jWlIR5OnDAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHPilykB9ArdHV4kPbPtsplSmE/JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTllYzg4YzItNDcxYy0z YjBlLThkM2QtY2NhNGE3NmY2NDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHBCZWcPiEnsTFLECWCRXuXY77RFpwC8EmvjCUEYVXEdKHMfTjPs 9uON2aVo2Fh2Rp57b/k+uuotObd7HCtjrfyIBqOP9E2f5F4PRrs/f5xqZIgO+5hV 4g/jLuX63ydwXrCZo20F0HLr5OCFK8lsbJfY9yRp+CRou7T3bwwDGp9S+ciFx3zY PNqh7LMLaa7306Lj3NtZ/j+G9w3xuWMWzhQsc6Em7eCXarUA7COOGwQYQ3uPTW2u po6xDKMxbzpe+E6btquxXyGKCNGtS4yDh7VXiUl6KFLtobjrl0iMhUMaoqujlzQ9 4d/9UTD+a8ULmJdLyNa0ACFwbv/BeTL8n2g= -----END CERTIFICATE-----Generated at Wed Jul 23 23:23:03 2025 by rpki-client