$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60d74bd6-fd38-32a0-8496-45d2d10240f3.roa File: 60d74bd6-fd38-32a0-8496-45d2d10240f3.roa (raw, json) Hash identifier: AwBqUxstGEKYII80n7Uk706VMgzSUFgI2QwuWO1RnZ8= Subject key identifier: 11:59:FD:25:4B:4A:89:AE:02:5B:74:D2:75:2C:7B:35:90:E9:F6:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CFA19FCB4B03F003C3AA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60d74bd6-fd38-32a0-8496-45d2d10240f3.roa Signing time: Tue 15 Jul 2025 12:37:26 +0000 ROA not before: Tue 15 Jul 2025 12:37:26 +0000 ROA not after: Mon 13 Oct 2025 12:37:26 +0000 asID: 396615 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:a1:9f:cb:4b:03:f0:03:c3:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:26 2025 GMT Not After : Oct 13 12:37:26 2025 GMT Subject: CN=2c00435c-39aa-424c-9fa4-3fb14c82eac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:45:9b:32:99:89:e7:60:93:b7:f3:02:35:7f: 99:1d:a3:d4:b3:8f:12:99:ca:57:23:7c:45:e8:84: f7:c0:c1:21:27:d8:06:3f:ad:01:27:40:d9:13:31: b2:ec:86:02:d3:e4:4e:74:2d:26:d4:2b:f3:5c:7e: 0a:37:6c:77:b4:84:d3:be:ce:28:68:c5:07:ef:d2: 55:41:9f:61:21:8e:41:47:b5:3b:2d:6b:99:80:19: 5b:b6:b3:cc:d2:09:d8:45:ba:06:dd:ef:a1:7d:78: 6f:4f:40:7d:05:72:73:e5:d1:40:89:de:93:03:d8: 85:b4:93:e1:03:ae:d8:e0:25:55:eb:3c:96:17:9f: 01:1f:8e:c8:74:78:a7:07:c7:f8:b4:51:0c:87:d1: aa:74:6a:1d:86:dd:f4:ff:16:20:32:68:1c:5e:d8: 33:f7:a9:8a:92:db:26:77:87:41:81:ac:ae:40:b9: 5c:5e:98:5c:3e:db:bb:74:af:a8:ff:e1:99:14:68: b4:70:fd:ff:50:82:0f:c5:e4:2b:c8:69:f4:85:de: 94:33:c8:1a:ad:eb:22:c6:91:47:1a:7f:b2:46:50: ec:e4:f6:37:a3:36:5f:10:8f:5d:c3:90:13:be:02: 15:0e:40:b4:42:f2:ee:0b:9c:48:84:f6:ea:56:85: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:59:FD:25:4B:4A:89:AE:02:5B:74:D2:75:2C:7B:35:90:E9:F6:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60d74bd6-fd38-32a0-8496-45d2d10240f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5e:c1:60:9a:68:12:a2:ec:b2:26:70:ad:35:6c:24:81:43: 15:81:43:59:7b:da:2b:f3:c2:65:8e:13:2b:de:d8:43:f9:95: 6c:e6:43:04:23:9a:5f:eb:d2:33:35:a7:4b:8a:5b:e8:bc:07: 14:c3:16:b1:4c:3b:1a:c4:11:a8:29:11:75:c6:ae:84:1a:f7: 15:db:29:d7:25:9c:70:78:59:5a:7f:26:73:b7:42:e6:6a:78: 4d:11:c1:46:65:c4:75:2f:42:19:d8:d3:3c:7c:5f:5b:fe:70: a5:21:a2:77:44:10:ff:c0:c0:55:83:14:66:a5:52:d1:6f:9f: 63:7b:94:de:4b:2f:44:b1:f9:95:bd:ea:89:3f:f5:89:9c:6b: 5c:d9:dc:a4:d7:d2:84:dc:df:f9:9f:60:86:f3:f3:b0:6a:dd: aa:d6:d3:2d:42:01:99:e8:1c:fa:82:cd:ec:3a:0c:f3:42:e1: 83:61:8f:08:e8:63:22:35:24:02:dd:d7:1a:25:05:75:18:fd: 1e:65:6c:f1:59:73:05:f9:a9:a9:3c:93:71:cb:16:02:00:d9: 3a:88:19:02:55:06:be:b8:cc:ea:f9:81:14:a7:1f:95:b7:1e: 8e:31:65:ed:a3:68:ec:d5:22:9d:5d:46:96:18:69:50:a8:9e: 89:e4:d1:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz6Gfy0sD8APDqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNloXDTI1MTAxMzEyMzcyNlowLzEtMCsGA1UEAxMk MmMwMDQzNWMtMzlhYS00MjRjLTlmYTQtM2ZiMTRjODJlYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/UWbMpmJ52CTt/MCNX+ZHaPUs48SmcpXI3xF 6IT3wMEhJ9gGP60BJ0DZEzGy7IYC0+ROdC0m1CvzXH4KN2x3tITTvs4oaMUH79JV QZ9hIY5BR7U7LWuZgBlbtrPM0gnYRboG3e+hfXhvT0B9BXJz5dFAid6TA9iFtJPh A67Y4CVV6zyWF58BH47IdHinB8f4tFEMh9GqdGodht30/xYgMmgcXtgz96mKktsm d4dBgayuQLlcXphcPtu7dK+o/+GZFGi0cP3/UIIPxeQryGn0hd6UM8garesixpFH Gn+yRlDs5PY3ozZfEI9dw5ATvgIVDkC0QvLuC5xIhPbqVoUL/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFZ/SVLSomuAlt00nUsezWQ6fYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjBkNzRiZDYtZmQzOC0z MmEwLTg0OTYtNDVkMmQxMDI0MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG5ewWCaaBKi7LImcK01bCSBQxWBQ1l72ivzwmWOEyve2EP5lWzm QwQjml/r0jM1p0uKW+i8BxTDFrFMOxrEEagpEXXGroQa9xXbKdclnHB4WVp/JnO3 QuZqeE0RwUZlxHUvQhnY0zx8X1v+cKUhondEEP/AwFWDFGalUtFvn2N7lN5LL0Sx +ZW96ok/9Ymca1zZ3KTX0oTc3/mfYIbz87Bq3arW0y1CAZnoHPqCzew6DPNC4YNh jwjoYyI1JALd1xolBXUY/R5lbPFZcwX5qak8k3HLFgIA2TqIGQJVBr64zOr5gRSn H5W3Ho4xZe2jaOzVIp1dRpYYaVCononk0do= -----END CERTIFICATE-----Generated at Wed Jul 23 17:19:13 2025 by rpki-client