$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a304a077-1b0b-3663-ad2b-559a6c7c9497.roa File: a304a077-1b0b-3663-ad2b-559a6c7c9497.roa (raw, json) Hash identifier: pDAPNiFL9cuKq9j+eKQW+K1+yxIg5i0AUXu7onKxPpk= Subject key identifier: FB:E6:C7:73:4A:B4:6E:7A:D4:DB:AE:9D:58:FA:DC:36:DB:E8:E3:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C5D77E9FFA939615B8100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a304a077-1b0b-3663-ad2b-559a6c7c9497.roa Signing time: Tue 22 Jul 2025 12:41:21 +0000 ROA not before: Tue 22 Jul 2025 12:41:21 +0000 ROA not after: Mon 20 Oct 2025 12:41:21 +0000 asID: 396574 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:5d:77:e9:ff:a9:39:61:5b:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:21 2025 GMT Not After : Oct 20 12:41:21 2025 GMT Subject: CN=225e1888-0b39-41ff-a4bd-65a34755b708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:cc:30:2a:db:ad:69:15:fc:a6:e1:a6:69: a3:7e:e7:98:9f:fe:06:9f:83:e8:c9:65:ea:80:2a: 7b:77:75:28:10:f0:78:37:13:55:be:c0:7f:e5:80: c4:a8:8b:5c:5c:ba:c5:5d:96:75:73:ed:55:5c:5d: b2:d0:bc:a2:8c:1c:2a:c6:92:03:ec:01:8c:81:4e: 46:40:32:db:a7:71:b7:78:9c:72:99:f0:51:35:02: 19:a5:95:fc:e8:8b:e7:9a:82:de:0b:c2:4a:51:37: 16:fc:97:2c:39:f6:30:fc:00:e0:06:4d:6d:72:5b: 77:38:fd:27:ac:a6:f7:0e:f1:d1:4b:8e:ce:81:15: e5:c8:d6:25:34:62:fb:41:e0:eb:2b:eb:42:5f:c8: 14:88:dc:50:e5:ac:1d:5c:aa:f2:0e:67:66:1f:42: a6:cf:ee:44:3e:26:3d:ba:fe:38:da:26:d9:3b:35: 2d:ce:6f:3b:54:c8:65:39:1c:6d:2d:83:a9:84:5a: 1b:46:87:60:56:5a:e2:f9:87:ce:b7:db:62:6b:e4: f2:47:50:e0:78:b4:99:68:74:72:da:69:36:f8:46: bd:d2:d7:e0:ec:f7:e2:15:dd:87:66:bd:c8:49:a4: ab:34:06:8b:87:fd:91:63:c3:ee:40:05:51:8d:99: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E6:C7:73:4A:B4:6E:7A:D4:DB:AE:9D:58:FA:DC:36:DB:E8:E3:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a304a077-1b0b-3663-ad2b-559a6c7c9497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:02:07:c4:35:13:06:59:74:ac:68:1d:9c:6d:a0:22:9f:0e: 41:b2:0e:13:2c:9b:ab:69:2c:dc:1f:64:58:71:74:e7:1d:c5: 08:e4:b7:f4:56:85:c9:3e:d8:37:dd:7f:04:b9:ca:5c:9c:6d: 9e:f6:8d:3a:74:da:8c:00:55:34:e0:26:76:cb:79:ab:39:16: a4:0c:f3:2d:14:f4:e7:23:3c:ef:67:46:7a:8e:a2:00:45:1b: de:91:19:9f:d4:c6:86:36:e4:04:f2:e5:db:de:45:f8:e0:46: ab:47:95:4d:a1:58:50:05:8e:da:f4:c1:8d:f5:ae:df:f6:74: 68:d2:f3:68:ff:20:bf:ba:55:43:04:0c:18:79:20:8a:96:35: 7a:41:6c:8f:52:41:cb:c6:1f:3b:b3:f8:48:e5:c2:39:fe:07: 05:db:ef:1e:f5:39:16:97:e8:18:47:94:e4:6f:69:ca:45:58: 3a:66:fc:c6:b5:a9:f9:60:0c:15:1b:6f:c5:05:9e:95:5e:e6: 17:ef:b8:ea:e3:f9:c8:ec:a7:43:42:87:bd:bb:f5:ef:ab:d4: fd:4c:11:a5:89:67:b4:30:d1:98:42:20:9d:52:8a:51:e9:ae: 63:3e:b5:74:d9:0c:cc:4a:0c:d9:92:0c:8b:96:42:78:fa:52: ec:7e:fb:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXF136f+pOWFbgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDEyMVoXDTI1MTAyMDEyNDEyMVowLzEtMCsGA1UEAxMk MjI1ZTE4ODgtMGIzOS00MWZmLWE0YmQtNjVhMzQ3NTViNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpnMMCrbrWkV/KbhpmmjfueYn/4Gn4PoyWXq gCp7d3UoEPB4NxNVvsB/5YDEqItcXLrFXZZ1c+1VXF2y0LyijBwqxpID7AGMgU5G QDLbp3G3eJxymfBRNQIZpZX86IvnmoLeC8JKUTcW/JcsOfYw/ADgBk1tclt3OP0n rKb3DvHRS47OgRXlyNYlNGL7QeDrK+tCX8gUiNxQ5awdXKryDmdmH0Kmz+5EPiY9 uv442ibZOzUtzm87VMhlORxtLYOphFobRodgVlri+YfOt9tia+TyR1DgeLSZaHRy 2mk2+Ea90tfg7PfiFd2HZr3ISaSrNAaLh/2RY8PuQAVRjZkChQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPvmx3NKtG561NuunVj63Dbb6ONkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTMwNGEwNzctMWIwYi0z NjYzLWFkMmItNTU5YTZjN2M5NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADACB8Q1EwZZdKxoHZxtoCKfDkGyDhMsm6tpLNwfZFhxdOcdxQjk t/RWhck+2DfdfwS5ylycbZ72jTp02owAVTTgJnbLeas5FqQM8y0U9OcjPO9nRnqO ogBFG96RGZ/UxoY25ATy5dveRfjgRqtHlU2hWFAFjtr0wY31rt/2dGjS82j/IL+6 VUMEDBh5IIqWNXpBbI9SQcvGHzuz+Ejlwjn+BwXb7x71ORaX6BhHlORvacpFWDpm /Ma1qflgDBUbb8UFnpVe5hfvuOrj+cjsp0NCh7279e+r1P1MEaWJZ7Qw0ZhCIJ1S ilHprmM+tXTZDMxKDNmSDIuWQnj6Uux++8g= -----END CERTIFICATE-----Generated at Wed Jul 23 17:16:59 2025 by rpki-client