$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba40a58b-4dd3-391b-805f-ff1da2d1b877.roa File: ba40a58b-4dd3-391b-805f-ff1da2d1b877.roa (raw, json) Hash identifier: e1hNxGlgaqmATT8VJSvBcLhQixEnBPtR3jYsp7cNFy4= Subject key identifier: 98:68:32:19:EA:2E:C0:88:9F:3C:73:0F:14:BF:44:8E:CA:A1:00:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9FF08B22D026CAD954562800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba40a58b-4dd3-391b-805f-ff1da2d1b877.roa Signing time: Thu 24 Jul 2025 12:38:57 +0000 ROA not before: Thu 24 Jul 2025 12:38:57 +0000 ROA not after: Wed 22 Oct 2025 12:38:57 +0000 asID: 397200 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:f0:8b:22:d0:26:ca:d9:54:56:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 24 12:38:57 2025 GMT Not After : Oct 22 12:38:57 2025 GMT Subject: CN=8cc19d94-46e0-473b-a2a4-effb22a81b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a4:cb:7f:34:9c:91:b9:96:57:dc:8b:19:30: c5:aa:04:96:98:d4:da:20:29:32:f6:5a:44:df:7f: e0:97:4c:4b:6f:f8:4f:44:91:8f:d0:5d:29:d6:9f: 1d:06:90:69:35:12:67:33:e7:f9:fa:b9:78:76:da: 91:03:cc:85:8b:b0:37:57:ae:4b:37:b4:7a:8e:e8: 7c:a7:6f:78:3f:1e:b9:3f:44:b6:14:f5:f4:bb:b1: 9c:35:4e:d0:ca:72:8e:7f:db:50:7f:b7:ff:1a:8d: 06:c0:6e:e7:5e:11:50:a8:8b:2d:0a:f7:9e:11:22: d5:80:b2:a4:32:26:5a:3c:90:2b:79:c3:00:f0:f0: c7:63:85:ea:33:45:f2:8c:ce:a9:8c:ac:1c:ea:ad: db:36:ba:a1:39:63:7a:c7:05:63:37:31:a3:e3:84: 28:87:0b:50:16:df:5f:5a:24:aa:5d:0d:46:c4:5b: 19:18:59:64:b6:40:89:6e:12:3c:f2:ac:9a:fd:8a: 64:44:b2:32:e1:3a:0e:31:47:42:20:58:3c:39:80: fc:68:9b:8b:f6:7a:5f:20:38:2e:70:d9:24:46:1d: c7:c3:a7:36:9a:0b:5a:51:cb:60:c2:a4:e2:73:f8: aa:f7:56:18:18:6e:9d:fa:38:6e:6f:98:f9:14:2a: aa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:68:32:19:EA:2E:C0:88:9F:3C:73:0F:14:BF:44:8E:CA:A1:00:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba40a58b-4dd3-391b-805f-ff1da2d1b877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:7e:10:40:63:da:d4:b3:1a:1c:71:20:db:49:d9:54:b4:b7: 6b:7e:59:33:35:8c:27:5b:09:ab:9b:ab:49:b7:fe:e0:79:f2: ee:2c:4f:d9:5b:63:44:26:cc:d3:92:a0:19:c0:69:04:2a:bb: f5:ca:39:bf:fb:6f:d6:7d:4e:c5:49:ec:1d:76:e7:04:35:00: af:4b:8e:e0:39:97:5e:be:1e:58:99:09:3c:c0:cf:f9:35:f1: 9a:f7:11:96:dc:a7:5d:9d:f4:f1:11:76:4f:ee:80:85:e9:f4: 87:a3:73:34:23:67:fa:ec:76:a7:2f:3c:37:71:9e:c7:80:58: 4d:3c:fb:92:2f:c0:66:b0:49:d8:31:07:4f:48:dd:66:3f:6d: a7:61:c1:a7:e1:01:30:26:61:1d:c1:02:22:dc:f0:b5:08:77: c6:3c:dd:d8:ba:38:cf:24:0d:53:12:90:3c:9c:f4:5c:4d:ad: fe:88:17:ee:f3:92:71:94:5d:66:1f:bd:bc:24:0b:96:3c:2f: 77:a7:ca:52:09:90:89:ea:51:3c:ee:3e:cc:37:5f:bb:7c:08: df:69:1e:e3:79:59:3b:fa:0c:e8:22:d8:0c:26:32:d9:86:a0: 7e:7f:8c:89:bc:07:d0:ad:d2:3b:a6:30:bd:f4:4f:3b:0e:4c: 3d:56:a9:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8Isi0CbK2VRWKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNDEyMzg1N1oXDTI1MTAyMjEyMzg1N1owLzEtMCsGA1UEAxMk OGNjMTlkOTQtNDZlMC00NzNiLWEyYTQtZWZmYjIyYTgxYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqTLfzSckbmWV9yLGTDFqgSWmNTaICky9lpE 33/gl0xLb/hPRJGP0F0p1p8dBpBpNRJnM+f5+rl4dtqRA8yFi7A3V65LN7R6juh8 p294Px65P0S2FPX0u7GcNU7QynKOf9tQf7f/Go0GwG7nXhFQqIstCveeESLVgLKk MiZaPJArecMA8PDHY4XqM0XyjM6pjKwc6q3bNrqhOWN6xwVjNzGj44QohwtQFt9f WiSqXQ1GxFsZGFlktkCJbhI88qya/YpkRLIy4ToOMUdCIFg8OYD8aJuL9npfIDgu cNkkRh3Hw6c2mgtaUctgwqTic/iq91YYGG6d+jhub5j5FCqqhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJhoMhnqLsCInzxzDxS/RI7KoQDeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE0MGE1OGItNGRkMy0z OTFiLTgwNWYtZmYxZGEyZDFiODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK9+EEBj2tSzGhxxINtJ2VS0t2t+WTM1jCdbCaubq0m3/uB58u4s T9lbY0QmzNOSoBnAaQQqu/XKOb/7b9Z9TsVJ7B125wQ1AK9LjuA5l16+HliZCTzA z/k18Zr3EZbcp12d9PERdk/ugIXp9IejczQjZ/rsdqcvPDdxnseAWE08+5IvwGaw SdgxB09I3WY/badhwafhATAmYR3BAiLc8LUId8Y83di6OM8kDVMSkDyc9FxNrf6I F+7zknGUXWYfvbwkC5Y8L3enylIJkInqUTzuPsw3X7t8CN9pHuN5WTv6DOgi2Awm MtmGoH5/jIm8B9Ct0jumML30TzsOTD1Wqb0= -----END CERTIFICATE-----Generated at Sat Jul 26 05:38:47 2025 by rpki-client