$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa File: c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa (raw, json) Hash identifier: FHjTfT1YRELWX6RCh+j5k+oYiHdYhWnTyBUOfm/oY5I= Subject key identifier: 95:4C:88:7F:A1:36:EC:1B:E3:A5:BB:BC:B2:C5:8F:C3:07:65:A4:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7E7B83C0CC0A381BCF4CA380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396581 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:83:c0:cc:0a:38:1b:cf:4c:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=1600dcb2-b102-44f0-9127-1c16c09c2b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d2:2c:e8:84:8f:41:83:2a:f9:ee:b4:be:60: 97:a6:a2:0f:66:55:57:f6:13:a2:09:05:ec:c6:da: 78:9e:a3:93:d4:3f:23:17:7e:eb:e2:54:8a:1f:e2: b4:6f:a8:15:04:f2:ad:73:7a:13:ff:10:07:a1:b3: bc:bb:6d:2d:ea:ba:5a:b8:54:7b:3c:e2:d9:d0:20: 77:6b:9b:67:b4:c3:e3:54:59:6d:97:86:48:b4:6d: 74:23:db:fd:30:ea:bb:30:75:45:78:0a:80:a8:41: fe:0b:1f:8e:45:ab:a2:38:62:67:29:20:85:7c:d4: 75:88:07:32:61:93:56:6c:2f:86:b9:70:15:5f:cc: 89:7e:04:93:c3:be:9f:ac:57:9f:e6:44:81:09:6b: 6c:f3:02:9d:2c:33:e1:a1:cb:c2:af:52:23:94:5f: 92:97:d2:df:d0:86:54:20:7d:fe:99:7c:5b:d4:fa: a6:11:48:70:b3:99:e6:00:7a:bc:35:14:53:98:07: a1:b7:5d:66:34:ce:57:b6:ae:ba:db:98:be:a8:7f: 2d:e1:5d:05:3c:88:65:61:fe:7b:84:46:f2:20:42: 0b:38:3b:5d:00:37:ba:da:14:86:82:d5:01:00:72: 46:af:a3:6c:1c:1d:ea:65:fa:fe:5a:aa:49:92:af: d3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4C:88:7F:A1:36:EC:1B:E3:A5:BB:BC:B2:C5:8F:C3:07:65:A4:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:df:84:d3:4e:be:c8:52:a9:9d:4c:04:1d:b2:ce:8a:1b:3e: 17:22:a8:25:3a:99:2e:fd:58:24:95:01:17:03:65:3a:25:43: 26:0a:69:03:17:26:a6:83:60:1e:31:8b:03:b6:2e:e1:5c:27: 18:c7:e5:f9:15:76:dc:ef:e0:19:43:8d:32:c4:69:35:7f:7e: c9:93:76:cc:74:3b:75:69:7b:35:cd:2d:7f:3b:c7:ef:ea:51: e7:89:be:fb:31:19:7f:d9:cd:83:ea:b9:56:90:da:5f:fb:a6: 42:cc:97:88:16:93:da:06:02:61:2c:4c:65:df:16:0c:d8:5f: 17:8f:96:28:76:99:46:a6:67:62:61:76:e2:7e:93:23:61:eb: 90:3b:dc:c7:19:88:74:bb:12:33:48:ee:f0:7f:44:24:48:06: 2a:40:62:ff:a9:41:fb:6d:99:8c:a1:5c:1b:32:a9:12:77:6b: e2:a2:0a:5e:88:d6:f0:ae:5b:e2:91:5d:b9:ca:67:71:c3:87: 4c:6e:30:3f:fa:7d:85:f9:4c:08:23:d2:ae:98:6b:e5:68:19: 3a:da:48:2b:de:5e:56:c1:bf:02:a0:44:90:75:e7:03:b8:24: 89:75:87:a9:ab:83:c1:28:3d:67:15:0e:7b:fa:d3:79:b7:e2: 3a:d1:d7:f2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp+e4PAzAo4G89Mo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTYwMGRjYjItYjEwMi00NGYwLTkxMjctMWMxNmMwOWMyYjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdIs6ISPQYMq+e60vmCXpqIPZlVX9hOiCQXs xtp4nqOT1D8jF37r4lSKH+K0b6gVBPKtc3oT/xAHobO8u20t6rpauFR7POLZ0CB3 a5tntMPjVFltl4ZItG10I9v9MOq7MHVFeAqAqEH+Cx+ORauiOGJnKSCFfNR1iAcy YZNWbC+GuXAVX8yJfgSTw76frFef5kSBCWts8wKdLDPhocvCr1IjlF+Sl9Lf0IZU IH3+mXxb1PqmEUhws5nmAHq8NRRTmAeht11mNM5Xtq6625i+qH8t4V0FPIhlYf57 hEbyIEILODtdADe62hSGgtUBAHJGr6NsHB3qZfr+WqpJkq/TlwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJVMiH+hNuwb46W7vLLFj8MHZaTfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQzOGVlYzgtYTVhNS0z NmYxLWIwNzEtMmQ1ODFiZmUxNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB034TTTr7IUqmdTAQdss6KGz4XIqglOpku/Vgk lQEXA2U6JUMmCmkDFyamg2AeMYsDti7hXCcYx+X5FXbc7+AZQ40yxGk1f37Jk3bM dDt1aXs1zS1/O8fv6lHnib77MRl/2c2D6rlWkNpf+6ZCzJeIFpPaBgJhLExl3xYM 2F8Xj5YodplGpmdiYXbifpMjYeuQO9zHGYh0uxIzSO7wf0QkSAYqQGL/qUH7bZmM oVwbMqkSd2viogpeiNbwrlvikV25ymdxw4dMbjA/+n2F+UwII9KumGvlaBk62kgr 3l5Wwb8CoESQdecDuCSJdYepq4PBKD1nFQ57+tN5t+I60dfy -----END CERTIFICATE-----Generated at Wed Jul 23 23:22:42 2025 by rpki-client