$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/811f3ecb-6c53-384d-b070-dffb54a98060.roa File: 811f3ecb-6c53-384d-b070-dffb54a98060.roa (raw, json) Hash identifier: tC5BJDv73t4G0KYcqEAJdhJcgWLBAlPSiXAt5KOnsfw= Subject key identifier: EF:FC:0E:71:AD:EC:1C:7B:06:E9:54:21:9C:23:F8:DD:41:4F:85:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7E7B821DBE33C925F83E2600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/811f3ecb-6c53-384d-b070-dffb54a98060.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 397207 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:82:1d:be:33:c9:25:f8:3e:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=29c3e8f2-23a5-41a8-a20d-e4ab72216f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:74:50:48:c3:6d:41:74:1d:d6:6a:b9:0f:fa: ef:43:ea:63:44:b4:e2:38:0e:f8:9b:6c:ce:4d:3c: cf:8d:2b:32:95:17:68:c3:c5:68:9b:33:ff:f8:d0: dd:5c:81:38:21:ff:82:3b:b6:c5:c0:89:18:04:65: bf:61:78:af:bd:54:59:94:33:74:65:fc:3b:da:d1: b6:99:3d:e1:23:9e:eb:bc:ad:1d:05:f7:12:b6:b6: 3c:54:aa:1e:5c:4c:c0:d0:ce:06:44:ee:78:13:c2: 69:5c:e0:80:4d:b1:02:1d:e6:7c:44:be:94:06:43: d9:b9:8e:aa:8d:a7:3c:31:3d:73:76:9f:6f:91:44: a7:45:74:f2:14:a5:33:56:ed:df:5c:7d:0f:21:5e: 7f:a2:b1:73:ce:72:5c:23:ae:75:13:21:b1:53:ed: e6:93:d6:40:81:d1:e0:f6:9c:fb:e7:81:bd:d4:08: 76:8d:0d:4f:c4:72:62:80:96:8a:35:ca:11:ae:a4: ca:39:c2:e2:ba:c9:6c:9c:83:d5:69:b7:7c:32:72: b0:71:8d:f0:ee:52:3c:55:98:84:09:71:7b:ea:41: cd:b8:30:5e:61:85:cf:4e:b4:01:9c:11:98:1b:d2: 56:fc:52:b6:ba:24:00:db:22:af:72:44:e7:e5:5d: 90:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FC:0E:71:AD:EC:1C:7B:06:E9:54:21:9C:23:F8:DD:41:4F:85:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/811f3ecb-6c53-384d-b070-dffb54a98060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:52:58:af:e4:d0:c2:84:d3:d0:e4:c3:8a:82:ad:ee:f6:b7: 21:88:ba:b7:3d:5c:07:5e:d8:58:05:20:ec:07:ac:c2:c7:f5: 9e:28:d8:e8:cc:09:25:89:a0:79:da:92:c3:6f:71:4c:58:5d: 6d:ec:a3:12:c9:fe:5d:b2:6d:75:a7:5f:de:32:95:14:19:fe: 2d:54:53:15:ae:8d:17:0b:19:cf:9d:5f:73:e8:a7:ca:e5:b5: 52:df:68:e5:9a:9e:5f:45:88:45:72:27:36:0a:9d:e1:47:5e: f2:94:79:09:5f:c7:7c:fa:41:c5:88:bc:4d:ef:a5:71:93:11: d1:36:5d:dd:89:ec:a3:27:83:87:86:e5:3d:65:8f:81:0b:55: 55:a7:d4:3e:48:99:60:3f:85:5c:54:d4:69:7a:28:26:ce:9b: 41:60:a1:16:d1:2b:02:99:58:11:46:c0:c3:42:7c:32:87:19: db:b7:36:b3:b5:fb:09:d3:95:69:d1:5f:76:ee:29:b8:00:c0: 6e:93:85:b0:fb:bc:03:9b:ae:1e:45:e0:a2:91:44:d3:b8:83: 87:ce:95:a4:01:90:a9:09:9a:01:e3:9b:9d:80:0b:11:80:b0: 1d:57:b9:b9:57:63:29:f6:e2:2d:4d:71:ce:9e:14:1e:4d:c8: 5e:d2:11:7c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp+e4IdvjPJJfg+JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MjljM2U4ZjItMjNhNS00MWE4LWEyMGQtZTRhYjcyMjE2ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63RQSMNtQXQd1mq5D/rvQ+pjRLTiOA74m2zO TTzPjSsylRdow8VomzP/+NDdXIE4If+CO7bFwIkYBGW/YXivvVRZlDN0Zfw72tG2 mT3hI57rvK0dBfcStrY8VKoeXEzA0M4GRO54E8JpXOCATbECHeZ8RL6UBkPZuY6q jac8MT1zdp9vkUSnRXTyFKUzVu3fXH0PIV5/orFzznJcI651EyGxU+3mk9ZAgdHg 9pz754G91Ah2jQ1PxHJigJaKNcoRrqTKOcLiuslsnIPVabd8MnKwcY3w7lI8VZiE CXF76kHNuDBeYYXPTrQBnBGYG9JW/FK2uiQA2yKvckTn5V2Q4QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO/8DnGt7Bx7BulUIZwj+N1BT4UcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODExZjNlY2ItNmM1My0z ODRkLWIwNzAtZGZmYjU0YTk4MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB1Uliv5NDChNPQ5MOKgq3u9rchiLq3PVwHXthY BSDsB6zCx/WeKNjozAkliaB52pLDb3FMWF1t7KMSyf5dsm11p1/eMpUUGf4tVFMV ro0XCxnPnV9z6KfK5bVS32jlmp5fRYhFcic2Cp3hR17ylHkJX8d8+kHFiLxN76Vx kxHRNl3dieyjJ4OHhuU9ZY+BC1VVp9Q+SJlgP4VcVNRpeigmzptBYKEW0SsCmVgR RsDDQnwyhxnbtzaztfsJ05Vp0V927im4AMBuk4Ww+7wDm64eReCikUTTuIOHzpWk AZCpCZoB45udgAsRgLAdV7m5V2Mp9uItTXHOnhQeTche0hF8 -----END CERTIFICATE-----Generated at Fri Jul 25 01:01:45 2025 by rpki-client