$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa File: aaeab459-55b6-3d1b-8a79-b4db77e31200.roa (raw, json) Hash identifier: tDEAMPMt0N1vZ+x/sJjUkzt/lCWedpHeCAmZ5txBtL8= Subject key identifier: A6:CC:44:DE:34:2D:A9:4C:E2:55:B3:B2:27:88:04:6E:24:F7:D8:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CF9DB2BE831AEC4A54BF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa Signing time: Tue 15 Jul 2025 12:37:24 +0000 ROA not before: Tue 15 Jul 2025 12:37:24 +0000 ROA not after: Mon 13 Oct 2025 12:37:24 +0000 asID: 396590 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:9d:b2:be:83:1a:ec:4a:54:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:24 2025 GMT Not After : Oct 13 12:37:24 2025 GMT Subject: CN=2419ae6c-250d-4187-9c43-1f6c46d3f795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:7b:e0:e4:c7:6f:e8:5f:fc:d0:c1:31:a1: b8:a4:f5:3c:a2:03:7e:ac:ad:7b:72:8f:99:f1:0a: 63:4f:c2:a9:78:0a:61:17:fc:21:0c:8d:eb:9f:34: 58:01:fd:8c:e6:d0:bb:00:d9:49:fc:5c:18:fc:09: 5d:cd:18:de:d3:0b:0d:31:40:90:fa:c9:4d:67:b7: 25:36:b0:a6:fa:84:e0:9c:f2:93:b7:74:01:f2:82: 5a:18:16:ab:5a:61:6d:2d:ac:bd:43:98:3c:77:51: 90:88:c0:c1:63:d3:38:41:12:cd:e6:1d:9b:a8:ef: f3:aa:58:60:26:e2:d1:26:68:15:fb:02:c4:43:cb: 74:3c:0b:df:2a:bb:29:39:6f:69:37:da:34:43:8c: c8:87:e0:d0:0f:c5:c5:dc:9b:18:3f:1e:7b:34:c6: 48:68:e7:30:16:3f:b5:f7:97:b4:b3:9c:9d:86:c8: f0:b9:c9:6c:6e:6c:a2:7c:c8:72:c1:60:4b:e4:32: 6b:a0:1a:7e:4b:2e:ba:02:bc:97:a2:12:82:22:37: ff:01:66:c8:be:ce:ae:55:1c:8a:08:85:33:42:d7: fb:b5:b0:77:02:67:84:85:98:af:16:85:00:0a:18: da:68:72:77:94:db:b2:f8:b0:7f:71:0b:69:4d:fd: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CC:44:DE:34:2D:A9:4C:E2:55:B3:B2:27:88:04:6E:24:F7:D8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaeab459-55b6-3d1b-8a79-b4db77e31200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:6c:19:59:32:f1:ad:c8:c7:9d:0d:54:83:c3:51:b7:78:0e: ff:5a:ea:e3:97:b7:93:c3:57:6c:01:42:58:c8:ee:fb:b4:d2: f0:f3:b0:c4:89:c5:77:3e:81:a9:f3:72:ce:eb:fb:4a:a4:0d: 10:66:50:d1:b0:db:27:31:57:fa:51:56:7d:0e:9d:9d:b8:a9: 27:7d:27:4a:45:36:80:28:40:7f:f5:e3:12:09:20:52:a6:c5: a6:49:c2:38:a8:b2:f4:71:0f:d6:02:85:c7:e1:8b:db:d6:a5: ce:62:23:28:c7:80:cc:82:36:94:39:56:22:f8:bc:34:a1:49: e2:46:a3:a9:c3:94:47:67:06:db:ce:61:61:09:b5:2b:b1:4e: 79:63:7b:5e:4b:45:80:da:73:83:d0:37:2a:60:ce:01:a9:c5: 33:78:07:b0:f1:d8:39:f2:0b:c4:62:5c:9a:b1:98:d3:ac:aa: 34:a7:f7:a4:4a:29:b1:bc:84:7b:75:7c:fd:c8:d8:c4:41:9f: a4:28:f2:b6:4d:05:63:3a:1b:e7:3f:5c:a5:45:59:1d:36:20: 5e:3f:37:09:d8:79:f1:57:a1:aa:7b:53:44:e9:14:31:b6:bf: 56:b1:80:d9:72:01:e8:01:8e:74:67:d5:f4:0f:1d:85:20:b7: c2:f9:a6:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz52yvoMa7EpUv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNFoXDTI1MTAxMzEyMzcyNFowLzEtMCsGA1UEAxMk MjQxOWFlNmMtMjUwZC00MTg3LTljNDMtMWY2YzQ2ZDNmNzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj574OTHb+hf/NDBMaG4pPU8ogN+rK17co+Z 8QpjT8KpeAphF/whDI3rnzRYAf2M5tC7ANlJ/FwY/AldzRje0wsNMUCQ+slNZ7cl NrCm+oTgnPKTt3QB8oJaGBarWmFtLay9Q5g8d1GQiMDBY9M4QRLN5h2bqO/zqlhg JuLRJmgV+wLEQ8t0PAvfKrspOW9pN9o0Q4zIh+DQD8XF3JsYPx57NMZIaOcwFj+1 95e0s5ydhsjwuclsbmyifMhywWBL5DJroBp+Sy66AryXohKCIjf/AWbIvs6uVRyK CIUzQtf7tbB3AmeEhZivFoUAChjaaHJ3lNuy+LB/cQtpTf0t0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKbMRN40LalM4lWzsieIBG4k99iAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFlYWI0NTktNTViNi0z ZDFiLThhNzktYjRkYjc3ZTMxMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAElsGVky8a3Ix50NVIPDUbd4Dv9a6uOXt5PDV2wBQljI7vu00vDz sMSJxXc+ganzcs7r+0qkDRBmUNGw2ycxV/pRVn0OnZ24qSd9J0pFNoAoQH/14xIJ IFKmxaZJwjiosvRxD9YChcfhi9vWpc5iIyjHgMyCNpQ5ViL4vDShSeJGo6nDlEdn BtvOYWEJtSuxTnlje15LRYDac4PQNypgzgGpxTN4B7Dx2DnyC8RiXJqxmNOsqjSn 96RKKbG8hHt1fP3I2MRBn6Qo8rZNBWM6G+c/XKVFWR02IF4/NwnYefFXoap7U0Tp FDG2v1axgNlyAegBjnRn1fQPHYUgt8L5pjk= -----END CERTIFICATE-----Generated at Fri Jul 25 00:57:30 2025 by rpki-client