$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa File: bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa (raw, json) Hash identifier: h4fn1R52PiFoMV+fAOVydCGouZRsCr/Xz37cvtuCbUk= Subject key identifier: 7C:48:91:E0:50:96:B5:D6:A5:03:2B:D8:8D:1E:C4:4C:95:D1:E7:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7E7B80A47657CF8CB9B52B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396554 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:80:a4:76:57:cf:8c:b9:b5:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=532d62a4-3d97-40d1-8b24-3d220f85ed66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:f8:fd:23:fa:21:33:94:fc:b6:bf:a5:f0: 57:fc:03:32:d4:85:00:8c:c7:20:86:71:b7:7e:1f: 3b:4b:a3:45:92:71:a9:2b:d4:5c:a2:8e:64:d7:96: 22:e9:8d:2a:00:0b:2f:d9:5e:1c:25:1c:55:b7:10: 33:5b:eb:fe:a2:8e:24:51:ba:06:2c:c1:e2:a0:f2: f5:f2:bd:3a:24:2d:b9:a0:3b:b8:de:a8:04:f8:dd: 68:89:45:a2:86:46:9b:1c:32:64:8e:2c:d9:81:84: 64:ef:a0:c0:60:2c:14:83:23:06:0c:01:e3:29:78: 67:d6:12:5e:51:d3:20:26:61:81:d0:75:7c:bf:10: 23:01:15:f4:d0:bc:1d:f4:cf:fc:2f:27:5c:fd:49: 84:71:9c:96:bb:23:7e:86:79:73:e9:e7:df:8f:72: 5a:c7:53:9a:3e:ae:7e:05:dd:d8:a4:31:ae:3e:27: 4d:74:f6:d6:9a:47:70:f8:a2:b1:cd:67:e8:e1:e7: 56:e6:aa:4a:5d:47:f7:39:5a:38:73:ba:1a:42:21: 46:ab:df:87:17:91:d9:db:5f:b6:74:30:93:ea:df: 81:0c:89:09:69:62:53:14:2a:da:45:6e:d9:ba:cc: e5:6f:ce:89:6f:23:36:1c:24:bc:f9:ed:21:ba:14: dd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:48:91:E0:50:96:B5:D6:A5:03:2B:D8:8D:1E:C4:4C:95:D1:E7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb3a2a47-fd80-3a8b-83e9-5fe9bb43c954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a3:7e:4f:8e:34:d8:26:c2:c2:bf:6b:e9:f7:65:f9:45:c8: ba:55:39:99:62:82:dd:bf:84:20:c5:95:c6:d4:7c:58:24:76: b9:4c:e4:e8:e4:88:3b:cb:83:39:a4:0b:60:82:6b:10:93:de: 6a:d9:d7:e2:c7:a0:9d:5d:2c:bc:68:01:20:a6:22:a0:c4:ac: 76:88:a4:c3:44:03:88:94:b2:23:a5:3d:ec:2c:8f:46:e4:d7: 5a:4a:21:f4:8a:6d:c1:1b:d7:86:06:14:34:d4:e6:f8:98:72: 5f:37:b5:d2:bf:08:8f:d0:e9:01:9f:45:76:75:b3:2d:de:2f: a1:e1:82:91:4b:29:0d:58:5b:21:15:53:b5:58:32:0b:65:70: 54:fa:eb:9e:25:c9:b3:c0:3e:4c:79:b2:58:1d:ef:65:41:4b: 49:5e:78:8f:cd:85:8c:59:b0:b3:82:06:25:9c:7e:97:86:76: da:fb:3f:b9:9c:07:f1:62:77:7e:62:fd:3a:3a:65:69:d8:be: a7:29:13:01:5d:55:59:2a:fa:7e:f9:24:5c:ad:47:7a:14:ff: 72:d4:0f:26:23:d1:69:2e:fa:27:24:fa:5b:6a:ab:e9:a1:e7: 35:0e:b7:89:d3:e0:9d:9d:bc:d6:ce:af:f9:86:72:e4:d8:71: 2c:40:ba:62 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp+e4CkdlfPjLm1K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NTMyZDYyYTQtM2Q5Ny00MGQxLThiMjQtM2QyMjBmODVlZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32b4/SP6ITOU/La/pfBX/AMy1IUAjMcghnG3 fh87S6NFknGpK9Rcoo5k15Yi6Y0qAAsv2V4cJRxVtxAzW+v+oo4kUboGLMHioPL1 8r06JC25oDu43qgE+N1oiUWihkabHDJkjizZgYRk76DAYCwUgyMGDAHjKXhn1hJe UdMgJmGB0HV8vxAjARX00Lwd9M/8Lydc/UmEcZyWuyN+hnlz6effj3Jax1OaPq5+ Bd3YpDGuPidNdPbWmkdw+KKxzWfo4edW5qpKXUf3OVo4c7oaQiFGq9+HF5HZ21+2 dDCT6t+BDIkJaWJTFCraRW7Zuszlb86JbyM2HCS8+e0huhTd9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHxIkeBQlrXWpQMr2I0exEyV0ecmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmIzYTJhNDctZmQ4MC0z YThiLTgzZTktNWZlOWJiNDNjOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGo35PjjTYJsLCv2vp92X5Rci6VTmZYoLdv4Qg xZXG1HxYJHa5TOTo5Ig7y4M5pAtggmsQk95q2dfix6CdXSy8aAEgpiKgxKx2iKTD RAOIlLIjpT3sLI9G5NdaSiH0im3BG9eGBhQ01Ob4mHJfN7XSvwiP0OkBn0V2dbMt 3i+h4YKRSykNWFshFVO1WDILZXBU+uueJcmzwD5MebJYHe9lQUtJXniPzYWMWbCz ggYlnH6Xhnba+z+5nAfxYnd+Yv06OmVp2L6nKRMBXVVZKvp++SRcrUd6FP9y1A8m I9FpLvonJPpbaqvpoec1DreJ0+CdnbzWzq/5hnLk2HEsQLpi -----END CERTIFICATE-----Generated at Wed Jul 23 17:16:36 2025 by rpki-client