$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/905c96e1-4dc1-375e-93e6-3e7effa3d58c.roa File: 905c96e1-4dc1-375e-93e6-3e7effa3d58c.roa (raw, json) Hash identifier: E+9TLIOPJNCh1SQnxkCb1BYeCS1+LDhmtpki9Pj+IuY= Subject key identifier: 85:13:DA:8C:E2:8B:D8:67:CC:5F:A9:21:08:29:FC:FF:9E:32:0A:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CF9F51F874CE63A1152AC8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/905c96e1-4dc1-375e-93e6-3e7effa3d58c.roa Signing time: Tue 15 Jul 2025 12:37:25 +0000 ROA not before: Tue 15 Jul 2025 12:37:25 +0000 ROA not after: Mon 13 Oct 2025 12:37:25 +0000 asID: 19836 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:9f:51:f8:74:ce:63:a1:15:2a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:25 2025 GMT Not After : Oct 13 12:37:25 2025 GMT Subject: CN=76a5edad-4102-4cf9-b4dc-c930fc8b0ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:7a:74:e8:cb:a9:15:88:1e:49:4c:d9:23: fb:d2:1d:88:c0:d3:84:86:30:06:f0:85:50:5c:00: 69:b5:78:96:da:4b:99:34:61:6d:6e:ad:69:5a:2d: dd:a1:56:64:83:4c:52:41:f8:0e:cb:9e:03:23:51: 79:8b:d9:db:d9:e6:79:36:1e:3b:6e:2a:c8:85:f9: fb:b6:b3:a4:bc:da:24:15:c8:22:eb:f0:1a:81:e5: fb:e1:c6:c8:b8:70:0d:93:02:a2:da:cb:92:44:11: 43:96:44:78:47:28:75:e1:f7:c0:ce:d9:6f:9e:ba: 1b:e6:e3:c2:84:3b:00:f9:c0:d4:37:c6:27:88:64: d8:fe:26:2a:2b:9e:0f:a4:1b:19:42:9a:8b:e4:00: 00:6a:8b:b4:3d:a4:0a:e4:08:a5:47:e0:bc:d2:2a: 0e:a0:a0:41:a9:b5:31:3a:63:13:97:ce:f7:03:6e: ce:1a:08:c3:25:4a:a2:f3:dc:d5:34:0b:9d:5e:cf: 81:f0:0a:8b:61:4c:a1:b2:65:47:90:81:a7:10:25: 75:70:b0:fa:71:f3:f8:48:60:1c:3d:92:9a:92:a1: b2:4d:48:17:7c:19:55:d8:0c:75:90:75:e0:80:05: 83:0d:3b:85:3e:d3:8c:a3:17:61:67:42:75:4a:0a: d5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:13:DA:8C:E2:8B:D8:67:CC:5F:A9:21:08:29:FC:FF:9E:32:0A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/905c96e1-4dc1-375e-93e6-3e7effa3d58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:31:ec:b6:3b:cf:e1:23:9d:d2:5f:5c:78:93:37:ff:ae:18: 30:ce:75:b4:18:ec:a6:36:a2:97:57:0c:07:7b:ba:0f:96:ea: c9:67:d9:5e:d9:52:ed:cc:58:23:96:bd:76:43:1e:86:25:20: a3:be:19:7b:d5:86:eb:45:cd:ea:46:be:8a:7d:93:54:86:cb: b4:39:4f:7b:c0:ae:81:5f:30:80:44:cc:a2:0b:11:4d:eb:10: 7e:36:42:6b:a2:1f:48:c6:58:ce:d0:de:df:47:2a:ad:3a:5a: bf:46:6b:72:d6:e6:ab:cb:a9:06:09:43:4a:da:12:9e:48:49: 21:e2:39:5c:1a:00:e7:c4:03:a1:92:05:75:a9:58:ec:87:ee: f4:d1:c7:62:2c:a5:51:da:63:72:72:fe:a7:6f:a0:7e:f6:be: 96:94:8a:0e:b8:dc:5f:f1:ab:19:7c:1c:6a:21:38:02:f6:87: 32:dd:1e:1f:d5:87:06:5b:4a:3c:32:de:67:47:e6:d1:e6:fc: dc:64:ca:11:6e:6c:62:8f:45:0f:76:b2:aa:56:ba:89:86:0d: 40:66:40:23:64:c1:87:13:32:3f:1c:16:f0:b2:03:1b:16:f3: 20:6d:54:22:df:0d:c9:92:67:fb:9d:01:55:e6:9e:eb:2a:e1: 61:56:5b:ca -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz59R+HTOY6EVKsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNVoXDTI1MTAxMzEyMzcyNVowLzEtMCsGA1UEAxMk NzZhNWVkYWQtNDEwMi00Y2Y5LWI0ZGMtYzkzMGZjOGIwYWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc16dOjLqRWIHklM2SP70h2IwNOEhjAG8IVQ XABptXiW2kuZNGFtbq1pWi3doVZkg0xSQfgOy54DI1F5i9nb2eZ5Nh47birIhfn7 trOkvNokFcgi6/AageX74cbIuHANkwKi2suSRBFDlkR4Ryh14ffAztlvnrob5uPC hDsA+cDUN8YniGTY/iYqK54PpBsZQpqL5AAAaou0PaQK5AilR+C80ioOoKBBqbUx OmMTl873A27OGgjDJUqi89zVNAudXs+B8AqLYUyhsmVHkIGnECV1cLD6cfP4SGAc PZKakqGyTUgXfBlV2Ax1kHXggAWDDTuFPtOMoxdhZ0J1SgrVxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIUT2ozii9hnzF+pIQgp/P+eMgo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTA1Yzk2ZTEtNGRjMS0z NzVlLTkzZTYtM2U3ZWZmYTNkNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFYx7LY7z+EjndJfXHiTN/+uGDDOdbQY7KY2opdXDAd7ug+W6sln 2V7ZUu3MWCOWvXZDHoYlIKO+GXvVhutFzepGvop9k1SGy7Q5T3vAroFfMIBEzKIL EU3rEH42QmuiH0jGWM7Q3t9HKq06Wr9Ga3LW5qvLqQYJQ0raEp5ISSHiOVwaAOfE A6GSBXWpWOyH7vTRx2IspVHaY3Jy/qdvoH72vpaUig643F/xqxl8HGohOAL2hzLd Hh/VhwZbSjwy3mdH5tHm/NxkyhFubGKPRQ92sqpWuomGDUBmQCNkwYcTMj8cFvCy AxsW8yBtVCLfDcmSZ/udAVXmnusq4WFWW8o= -----END CERTIFICATE-----Generated at Wed Jul 23 23:22:44 2025 by rpki-client