$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa File: 662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa (raw, json) Hash identifier: YkHSoLRNs/9AXZsWwmLD0EQGp4W1uOVxqlWJBCpEjWY= Subject key identifier: 86:C6:43:83:F6:18:1A:C7:5A:93:B2:B8:E2:D1:C3:05:AA:AE:E4:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A6AF0A312314C26BF362AABE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 397195 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:a3:12:31:4c:26:bf:36:2a:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=329f8255-82dc-44d8-b5ea-06948952f5ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:1f:c0:61:9a:32:1a:08:44:b8:e1:a2:40: c7:27:f0:e1:fd:c1:2d:22:89:80:fc:dd:d9:f3:bf: 84:1a:98:7b:1f:78:15:c6:93:0a:a5:f2:23:be:1d: a5:18:08:f9:d9:d7:93:b1:6c:98:db:ad:4f:99:68: f3:8f:27:53:fd:93:7d:15:cd:ac:2c:37:74:81:cc: 11:d4:4f:96:d7:18:86:71:3b:29:43:90:03:8d:e5: 6b:77:56:35:9e:bd:d5:6e:4d:6f:26:e0:71:95:c4: bf:5e:b8:c7:f7:36:6c:45:d7:ad:5d:fc:d2:1f:3c: 9e:1e:c6:d8:5f:12:5f:b3:20:3b:4d:1c:dc:08:c9: 3a:4e:25:01:eb:fd:d2:74:2b:c5:f1:1d:03:c9:11: 41:a6:98:4f:a9:ec:c0:20:ba:44:23:7f:87:7c:bc: c8:b9:e9:b2:80:bb:f3:d1:dd:2e:16:c0:63:4e:be: 0c:af:a1:71:67:2c:a7:b0:db:51:88:80:fc:20:27: d4:ca:46:03:f6:88:81:61:f0:46:7d:b9:f3:94:f6: f5:d6:52:a3:57:08:bc:7c:74:0f:8b:71:81:08:22: 82:00:d8:6d:64:56:13:f5:ae:b2:ed:65:85:24:70: 91:81:c0:0d:02:ca:41:87:1d:5a:26:04:9e:3e:ed: 66:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C6:43:83:F6:18:1A:C7:5A:93:B2:B8:E2:D1:C3:05:AA:AE:E4:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/662ff329-1786-3bb4-a7ab-fe627b7e3b8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:69:89:7b:96:56:97:cb:11:d3:6b:d9:2f:1a:27:72:8d:ef: 7e:b1:9d:4c:69:5f:80:40:5e:7c:73:44:e5:53:e8:a5:27:2c: 17:e5:73:f1:40:7d:39:d2:a0:b5:7e:f2:2a:45:74:95:09:a2: 67:3c:46:4d:d0:0b:e8:d3:08:a5:7c:95:d9:07:d0:f4:d0:8c: 3f:03:6a:1e:55:2b:61:48:3a:18:96:0d:df:df:f0:84:f3:ea: 16:a0:15:87:ad:d0:93:5a:62:06:20:84:ec:ad:29:e6:4b:33: 27:a8:35:1f:d2:90:21:0d:7f:13:bd:c8:ee:99:1f:27:2a:28: 34:b7:8f:72:b8:de:a2:08:f9:f4:59:3f:60:a6:51:ab:43:00: 6b:8f:30:77:c8:65:a3:a4:d5:88:cb:6f:48:9e:c7:0f:87:7a: 56:ae:47:d1:80:0a:3a:c8:68:ee:b5:21:24:36:d9:a5:07:2f: 9b:11:a4:e7:83:49:4f:40:c0:a4:a5:b3:3c:98:ef:23:0a:90: fc:aa:0b:63:8f:fd:e0:80:a6:22:c9:ed:67:05:a8:dc:27:c9: 3b:0b:1a:1e:66:96:40:e5:e5:30:03:d2:63:a4:4a:e8:86:2d: f5:04:be:11:f5:01:75:20:8d:be:79:c3:b4:30:ce:87:c3:e4: a8:e5:16:eb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpq8KMSMUwmvzYqq+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk MzI5ZjgyNTUtODJkYy00NGQ4LWI1ZWEtMDY5NDg5NTJmNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjMfwGGaMhoIRLjhokDHJ/Dh/cEtIomA/N3Z 87+EGph7H3gVxpMKpfIjvh2lGAj52deTsWyY261PmWjzjydT/ZN9Fc2sLDd0gcwR 1E+W1xiGcTspQ5ADjeVrd1Y1nr3Vbk1vJuBxlcS/XrjH9zZsRdetXfzSHzyeHsbY XxJfsyA7TRzcCMk6TiUB6/3SdCvF8R0DyRFBpphPqezAILpEI3+HfLzIuemygLvz 0d0uFsBjTr4Mr6FxZyynsNtRiID8ICfUykYD9oiBYfBGfbnzlPb11lKjVwi8fHQP i3GBCCKCANhtZFYT9a6y7WWFJHCRgcANAspBhx1aJgSePu1mDwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIbGQ4P2GBrHWpOyuOLRwwWqruQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjYyZmYzMjktMTc4Ni0z YmI0LWE3YWItZmU2MjdiN2UzYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCIaYl7llaXyxHTa9kvGidyje9+sZ1MaV+AQF58 c0TlU+ilJywX5XPxQH050qC1fvIqRXSVCaJnPEZN0Avo0wilfJXZB9D00Iw/A2oe VSthSDoYlg3f3/CE8+oWoBWHrdCTWmIGIITsrSnmSzMnqDUf0pAhDX8TvcjumR8n Kig0t49yuN6iCPn0WT9gplGrQwBrjzB3yGWjpNWIy29InscPh3pWrkfRgAo6yGju tSEkNtmlBy+bEaTng0lPQMCkpbM8mO8jCpD8qgtjj/3ggKYiye1nBajcJ8k7Cxoe ZpZA5eUwA9JjpErohi31BL4R9QF1II2+ecO0MM6Hw+So5Rbr -----END CERTIFICATE-----Generated at Wed Jul 23 17:18:38 2025 by rpki-client