$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6b46c1d-d1e8-3159-97b9-f62a8c1f6c8f.roa File: b6b46c1d-d1e8-3159-97b9-f62a8c1f6c8f.roa (raw, json) Hash identifier: j8ucl9ga0BVs+L3x450nWRDf7nUG3zI4UmOmI+34jCI= Subject key identifier: 5B:61:BC:32:1B:05:94:2A:B7:4F:E5:73:92:B3:2D:43:FC:59:25:28 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C4E4E77A26D7802A05E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6b46c1d-d1e8-3159-97b9-f62a8c1f6c8f.roa Signing time: Tue 22 Jul 2025 12:41:14 +0000 ROA not before: Tue 22 Jul 2025 12:41:14 +0000 ROA not after: Mon 20 Oct 2025 12:41:14 +0000 asID: 396595 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:4e:4e:77:a2:6d:78:02:a0:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:14 2025 GMT Not After : Oct 20 12:41:14 2025 GMT Subject: CN=85f894a5-640d-4f88-ae29-97ffeb4ee4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:a7:5a:48:3b:9b:a9:5c:fe:a5:ac:d2:90: 30:e6:04:0c:f7:c9:d7:0e:d8:e6:fe:4e:28:68:99: df:32:df:33:cc:01:cd:e4:20:94:03:59:17:9d:97: 0b:e5:dc:62:22:f8:b9:70:bf:1f:d1:7a:3a:35:f8: 1d:25:3e:dc:3f:b0:d6:1e:75:06:6e:2a:7d:a6:3f: 3f:11:0d:a2:a0:9a:5f:79:b4:ed:c4:7a:ea:8e:ce: bc:e7:9a:b2:8d:88:95:40:0a:a3:af:24:d3:7c:cb: d5:6c:91:8c:07:d6:02:be:b0:fc:f4:cf:29:1b:e2: 81:8c:7f:14:14:de:74:48:cf:34:b5:cd:95:eb:1a: 0c:56:56:0d:f8:d4:4b:2a:ee:f4:59:ca:fd:5b:35: fd:e5:72:3c:e4:fe:b9:d6:17:4c:8e:c6:00:b9:ca: 7f:f4:43:ea:d0:e0:64:88:7a:03:f5:2d:42:b9:97: 32:76:a9:ad:91:32:42:e9:a1:1e:69:0e:6a:e9:bb: 46:92:d1:22:bd:6c:59:47:45:5f:76:4b:97:a9:bc: 72:37:d1:6d:ef:fe:bc:53:46:ec:e0:45:c3:d2:ef: 32:e7:e7:2e:c9:b3:9f:68:a4:2c:ca:70:e0:72:2a: fe:e7:db:d2:83:66:3a:00:ae:30:07:af:ce:f9:9e: b6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:61:BC:32:1B:05:94:2A:B7:4F:E5:73:92:B3:2D:43:FC:59:25:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6b46c1d-d1e8-3159-97b9-f62a8c1f6c8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:a9:c0:ce:f0:3f:1d:01:09:2f:bf:77:fe:e4:fa:8d:b8:60: b7:cf:8f:15:fd:55:64:99:92:99:4e:c6:33:09:70:e0:39:65: 82:cb:2b:f2:8e:86:6b:5f:b7:b1:77:ed:89:73:79:f8:39:c4: 0d:73:0d:09:46:c4:f8:de:35:7a:d5:fe:b8:68:0d:54:0f:ed: 2c:b8:1d:b5:1d:90:07:b5:4e:a7:02:75:5f:45:cf:7a:18:8e: c4:42:5f:33:1c:d5:66:f6:52:ae:82:02:d1:9a:4a:65:a8:5d: 02:08:da:41:02:da:44:83:1b:c2:1a:4c:66:c6:5b:68:72:86: 8d:40:79:96:c5:91:01:2f:9f:6e:2d:01:dc:11:66:bd:c1:ec: f7:16:05:36:ed:65:2e:9c:12:50:31:22:57:92:97:a0:a1:63: e2:68:7b:1e:b8:50:ba:da:9c:35:c1:2b:32:8d:38:06:ab:ed: 4a:0e:4d:d7:ed:70:17:cb:79:ae:99:bc:d2:81:06:68:ed:c5: 91:3b:c4:cf:59:22:fd:88:33:ce:f4:da:d3:8c:84:6e:d9:ce: 60:18:4a:50:53:cc:17:71:d1:d1:58:49:45:e7:4f:98:22:24: dc:92:27:e4:31:e0:df:cb:bd:2b:87:7a:40:d8:d5:ca:87:2f: 50:d2:54:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXE5Od6JteAKgXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExNFoXDTI1MTAyMDEyNDExNFowLzEtMCsGA1UEAxMk ODVmODk0YTUtNjQwZC00Zjg4LWFlMjktOTdmZmViNGVlNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEqnWkg7m6lc/qWs0pAw5gQM98nXDtjm/k4o aJnfMt8zzAHN5CCUA1kXnZcL5dxiIvi5cL8f0Xo6NfgdJT7cP7DWHnUGbip9pj8/ EQ2ioJpfebTtxHrqjs6855qyjYiVQAqjryTTfMvVbJGMB9YCvrD89M8pG+KBjH8U FN50SM80tc2V6xoMVlYN+NRLKu70Wcr9WzX95XI85P651hdMjsYAucp/9EPq0OBk iHoD9S1CuZcydqmtkTJC6aEeaQ5q6btGktEivWxZR0VfdkuXqbxyN9Ft7/68U0bs 4EXD0u8y5+cuybOfaKQsynDgcir+59vSg2Y6AK4wB6/O+Z622wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFthvDIbBZQqt0/lc5KzLUP8WSUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjZiNDZjMWQtZDFlOC0z MTU5LTk3YjktZjYyYThjMWY2YzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEepwM7wPx0BCS+/d/7k+o24YLfPjxX9VWSZkplOxjMJcOA5ZYLL K/KOhmtft7F37Ylzefg5xA1zDQlGxPjeNXrV/rhoDVQP7Sy4HbUdkAe1TqcCdV9F z3oYjsRCXzMc1Wb2Uq6CAtGaSmWoXQII2kEC2kSDG8IaTGbGW2hyho1AeZbFkQEv n24tAdwRZr3B7PcWBTbtZS6cElAxIleSl6ChY+Joex64ULranDXBKzKNOAar7UoO TdftcBfLea6ZvNKBBmjtxZE7xM9ZIv2IM8702tOMhG7ZzmAYSlBTzBdx0dFYSUXn T5giJNySJ+Qx4N/LvSuHekDY1cqHL1DSVN0= -----END CERTIFICATE-----Generated at Wed Jul 23 23:21:07 2025 by rpki-client