$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb50fae2-ed39-3d86-a0c4-f6963a3ff5ed.roa File: cb50fae2-ed39-3d86-a0c4-f6963a3ff5ed.roa (raw, json) Hash identifier: wMn0uLYh3SwsjQzKWut1iFO9l+dlI7qtCWYrqpn8vuE= Subject key identifier: E5:48:BA:E3:AE:19:1A:CC:86:62:B1:08:B6:CE:8B:7E:4B:ED:4F:D1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A6AF0A3686BD7CE96B9C3B480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb50fae2-ed39-3d86-a0c4-f6963a3ff5ed.roa Signing time: Sat 05 Jul 2025 13:01:04 +0000 ROA not before: Sat 05 Jul 2025 13:01:04 +0000 ROA not after: Fri 03 Oct 2025 13:01:04 +0000 asID: 396826 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6a:f0:a3:68:6b:d7:ce:96:b9:c3:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 5 13:01:04 2025 GMT Not After : Oct 3 13:01:04 2025 GMT Subject: CN=7d744f70-e8da-473d-a8c8-ec7573704e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:31:81:60:70:40:5d:b8:3d:e4:aa:ab:fc: a3:d8:f1:5d:90:7b:17:7d:7c:69:be:e0:d0:8c:e3: 50:16:a2:6e:54:00:69:82:08:55:0e:fa:64:85:c5: 47:fb:e4:0e:83:1f:d8:8b:68:70:81:88:6f:05:bc: 97:00:19:a5:88:c0:47:94:8f:3c:d1:62:1c:64:51: a4:a8:1d:67:0b:41:26:53:43:5e:10:a2:b6:ef:fe: 57:ec:d7:f8:94:65:a3:ee:41:a9:2b:dc:62:2f:3b: fb:36:b4:8f:0c:90:01:a8:65:6a:b3:01:70:96:6f: d3:9c:fb:ca:9d:00:b8:a1:03:cd:43:e9:29:1d:61: 00:79:00:fa:61:15:25:4a:36:0e:74:9d:b1:c1:76: b1:5c:9c:5c:a8:49:9a:99:c8:8a:cf:50:89:29:b4: ec:4c:c6:25:2b:d8:b1:d9:cb:90:76:85:35:f5:fd: 9d:c9:1e:be:08:c4:62:c1:bb:d1:93:bb:f5:e1:ba: c5:3e:8b:e6:bb:df:c8:d4:5d:d0:be:93:c7:92:e9: 39:b1:da:1f:39:06:4a:2f:a3:cc:1d:72:45:cf:d5: 9a:52:9a:a1:fb:cc:e5:5f:50:95:1a:bf:7d:b4:c9: a8:ad:1d:20:fc:fb:6d:c0:0b:04:75:c3:8e:b7:0e: d9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:48:BA:E3:AE:19:1A:CC:86:62:B1:08:B6:CE:8B:7E:4B:ED:4F:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb50fae2-ed39-3d86-a0c4-f6963a3ff5ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:69:58:fe:07:25:07:cf:d4:0c:b9:a3:28:47:71:86:23:70: 61:c8:52:6e:9f:d2:81:44:d0:22:8e:26:5a:20:56:80:94:b5: e7:06:9c:06:5a:83:35:55:5a:97:aa:40:4b:6b:84:4e:87:c2: 01:d0:ea:7f:63:40:92:1d:0d:a4:77:0b:19:24:c7:0f:13:65: 50:45:f0:23:0e:90:48:2b:b9:38:f2:3f:ea:4f:1f:7b:c6:5d: ea:0d:3f:68:f8:fc:4c:23:5a:13:f5:7c:ca:7b:80:d2:e0:c9: 66:ad:69:86:22:1d:50:43:85:6b:7a:6e:a1:10:9c:75:22:e0: 57:d8:62:3f:d9:28:6f:98:c4:29:dc:7d:00:23:e9:13:0c:33: 5b:87:a3:08:bd:b1:c0:bd:2b:fe:f7:9a:30:db:18:8f:b7:62: 94:78:f9:76:b4:46:2e:ed:50:4d:1b:a9:85:a6:df:fc:45:9d: 4a:be:ba:d8:96:2f:49:c9:bb:d3:b9:56:17:a8:83:04:04:3a: b9:d8:55:23:f4:f4:6d:c4:e9:50:51:e0:e0:86:8c:85:66:d0: 69:25:ca:62:b2:7c:1e:f5:ec:2a:97:ca:72:a7:70:0a:68:3a: 55:32:8c:2c:67:3b:a8:7f:ea:35:ec:61:47:68:9c:c7:60:a1: fa:4f:c5:64 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpq8KNoa9fOlrnDtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk N2Q3NDRmNzAtZThkYS00NzNkLWE4YzgtZWM3NTczNzA0ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRcxgWBwQF24PeSqq/yj2PFdkHsXfXxpvuDQ jONQFqJuVABpgghVDvpkhcVH++QOgx/Yi2hwgYhvBbyXABmliMBHlI880WIcZFGk qB1nC0EmU0NeEKK27/5X7Nf4lGWj7kGpK9xiLzv7NrSPDJABqGVqswFwlm/TnPvK nQC4oQPNQ+kpHWEAeQD6YRUlSjYOdJ2xwXaxXJxcqEmamciKz1CJKbTsTMYlK9ix 2cuQdoU19f2dyR6+CMRiwbvRk7v14brFPovmu9/I1F3QvpPHkuk5sdofOQZKL6PM HXJFz9WaUpqh+8zlX1CVGr99tMmorR0g/PttwAsEdcOOtw7Z+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOVIuuOuGRrMhmKxCLbOi35L7U/RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I1MGZhZTItZWQzOS0z ZDg2LWEwYzQtZjY5NjNhM2ZmNWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA5aVj+ByUHz9QMuaMoR3GGI3BhyFJun9KBRNAi jiZaIFaAlLXnBpwGWoM1VVqXqkBLa4ROh8IB0Op/Y0CSHQ2kdwsZJMcPE2VQRfAj DpBIK7k48j/qTx97xl3qDT9o+PxMI1oT9XzKe4DS4MlmrWmGIh1QQ4Vrem6hEJx1 IuBX2GI/2ShvmMQp3H0AI+kTDDNbh6MIvbHAvSv+95ow2xiPt2KUePl2tEYu7VBN G6mFpt/8RZ1KvrrYli9JybvTuVYXqIMEBDq52FUj9PRtxOlQUeDghoyFZtBpJcpi snwe9ewql8pyp3AKaDpVMowsZzuof+o17GFHaJzHYKH6T8Vk -----END CERTIFICATE-----Generated at Wed Jul 23 17:10:19 2025 by rpki-client