$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf36a253-64f4-31a8-9c96-c596b5a948e6.roa File: cf36a253-64f4-31a8-9c96-c596b5a948e6.roa (raw, json) Hash identifier: JTqGtJGGg/E5GsFzVlPRgBLFizfnUok1yBO6HKr2wYY= Subject key identifier: 50:4A:F6:6E:D3:29:30:5C:F2:F8:C7:7B:B3:A1:53:44:8D:39:9D:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A78E6055FFE6F7903454BF680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf36a253-64f4-31a8-9c96-c596b5a948e6.roa Signing time: Thu 10 Jul 2025 13:01:02 +0000 ROA not before: Thu 10 Jul 2025 13:01:02 +0000 ROA not after: Wed 08 Oct 2025 13:01:02 +0000 asID: 396540 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:78:e6:05:5f:fe:6f:79:03:45:4b:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 10 13:01:02 2025 GMT Not After : Oct 8 13:01:02 2025 GMT Subject: CN=f8b17673-ca75-4dff-91dd-e50d6880c974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:8f:e6:e7:98:36:bf:9f:07:02:4b:3a:c8: 04:e4:64:53:f9:bd:80:c4:b6:71:39:09:7f:6f:b1: b4:b7:83:48:ad:42:f2:6c:2b:03:d0:0a:87:0c:1b: 98:e7:de:f6:1d:bd:9b:16:71:9c:5d:35:b1:8f:8e: 82:25:38:78:af:d4:74:ee:49:2c:6c:8b:d7:38:1b: cc:07:cd:f0:09:e6:f2:76:fe:f1:5f:2f:82:be:3b: e9:ba:60:fa:94:64:0e:ba:d7:a5:49:60:5c:f9:c9: 4a:55:6c:70:7a:8c:de:fc:c4:46:7f:a4:f3:24:f0: 50:e1:61:9f:ec:be:6a:8b:25:36:51:5e:7f:de:89: b2:3f:16:7a:89:80:19:dd:fe:bb:c8:25:a1:38:a3: 47:48:2b:0c:31:14:08:34:7e:2a:53:06:db:98:6c: f6:57:d4:84:79:d4:d0:b0:c7:d8:be:ea:b3:70:6b: 2f:85:10:51:47:a8:89:f8:5d:10:16:77:ce:cf:53: ad:42:bf:12:a9:b0:a3:d6:e0:9c:37:08:b7:8f:cc: 02:15:2e:54:0c:95:c6:f3:9c:0a:4f:6b:63:0c:ce: aa:15:85:83:d9:9b:90:2e:bf:e3:1d:8b:f2:6b:d0: 67:4f:8f:27:81:f3:c6:68:2c:d3:4b:28:02:70:fd: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4A:F6:6E:D3:29:30:5C:F2:F8:C7:7B:B3:A1:53:44:8D:39:9D:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf36a253-64f4-31a8-9c96-c596b5a948e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0e:cc:66:6f:4e:e9:f3:d1:67:2f:70:4b:c0:70:05:9a:d8: a3:ce:ee:cc:29:88:c9:87:ac:b8:d4:06:f2:cf:6f:c8:9f:56: 8c:15:7c:45:a2:8e:1f:ce:e5:d9:58:05:2d:b7:86:af:de:be: 08:b0:35:e4:2b:8c:67:a9:84:60:9c:f1:64:6f:1e:c7:f3:14: 39:e8:f3:e4:28:96:e2:96:44:70:dd:1e:d9:c5:0f:d3:f3:af: c5:eb:a1:bf:7d:c1:24:33:9e:44:82:35:fb:1c:e6:4f:f9:7b: f3:b3:46:ef:20:41:a0:f5:4a:39:00:64:a6:4a:c3:9b:79:ca: 47:bf:be:8f:7f:21:b0:cb:c1:51:e0:1d:37:20:71:fa:b6:bc: e5:aa:a2:2c:2d:48:7c:d6:8c:19:11:b2:d6:1c:76:4f:bd:2d: 82:ca:af:20:cc:c5:98:90:fc:2a:2b:5a:10:fd:3a:d1:e7:b9: 19:3e:6b:8c:8e:96:65:18:62:25:8a:62:9f:21:fa:f2:a2:9c: 42:75:53:c5:e4:6d:67:04:d7:e7:03:c2:ca:f2:0d:28:66:6a: ab:29:a7:84:d6:9c:18:41:17:7c:06:aa:29:0d:9a:b3:2b:5a: d1:52:0f:9f:80:43:2c:22:8d:d7:a8:f5:f6:47:e9:ec:70:58: 41:3c:bb:76 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp45gVf/m95A0VL9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk ZjhiMTc2NzMtY2E3NS00ZGZmLTkxZGQtZTUwZDY4ODBjOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoaP5ueYNr+fBwJLOsgE5GRT+b2AxLZxOQl/ b7G0t4NIrULybCsD0AqHDBuY5972Hb2bFnGcXTWxj46CJTh4r9R07kksbIvXOBvM B83wCebydv7xXy+CvjvpumD6lGQOutelSWBc+clKVWxweoze/MRGf6TzJPBQ4WGf 7L5qiyU2UV5/3omyPxZ6iYAZ3f67yCWhOKNHSCsMMRQINH4qUwbbmGz2V9SEedTQ sMfYvuqzcGsvhRBRR6iJ+F0QFnfOz1OtQr8SqbCj1uCcNwi3j8wCFS5UDJXG85wK T2tjDM6qFYWD2ZuQLr/jHYvya9BnT48ngfPGaCzTSygCcP33ZwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFBK9m7TKTBc8vjHe7OhU0SNOZ2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzNmEyNTMtNjRmNC0z MWE4LTljOTYtYzU5NmI1YTk0OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLDsxmb07p89FnL3BLwHAFmtijzu7MKYjJh6y4 1Abyz2/In1aMFXxFoo4fzuXZWAUtt4av3r4IsDXkK4xnqYRgnPFkbx7H8xQ56PPk KJbilkRw3R7ZxQ/T86/F66G/fcEkM55EgjX7HOZP+Xvzs0bvIEGg9Uo5AGSmSsOb ecpHv76PfyGwy8FR4B03IHH6trzlqqIsLUh81owZEbLWHHZPvS2Cyq8gzMWYkPwq K1oQ/TrR57kZPmuMjpZlGGIlimKfIfryopxCdVPF5G1nBNfnA8LK8g0oZmqrKaeE 1pwYQRd8BqopDZqzK1rRUg+fgEMsIo3XqPX2R+nscFhBPLt2 -----END CERTIFICATE-----Generated at Wed Jul 23 17:14:04 2025 by rpki-client