$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7881e9-a30d-3b5b-9f8a-04717fdbf348.roa File: cf7881e9-a30d-3b5b-9f8a-04717fdbf348.roa (raw, json) Hash identifier: W4AG6+GRf5M/rD7Y2MDpIM/2TScNM11CahjDsHzkuww= Subject key identifier: A0:8B:6F:06:34:F9:CD:61:BB:E8:58:F1:82:61:4F:93:7D:4F:85:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CF9DFBE78E9A6FC65261A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7881e9-a30d-3b5b-9f8a-04717fdbf348.roa Signing time: Tue 15 Jul 2025 12:37:24 +0000 ROA not before: Tue 15 Jul 2025 12:37:24 +0000 ROA not after: Mon 13 Oct 2025 12:37:24 +0000 asID: 36619 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:9d:fb:e7:8e:9a:6f:c6:52:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:24 2025 GMT Not After : Oct 13 12:37:24 2025 GMT Subject: CN=95532134-3bba-4c8b-9f74-778a357951fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:f1:e4:30:12:97:69:73:65:0a:fc:df:d8: 53:5d:9b:ae:99:a3:c0:a0:f0:f5:3c:f9:55:61:d4: b7:fc:ac:04:a9:03:e2:ac:12:71:da:1e:3c:57:c4: 3e:ed:07:d3:cf:74:2f:59:ef:b6:fb:f6:36:5c:09: a7:27:68:44:ec:82:5f:db:7f:8d:e2:7b:f9:90:ea: 2e:dd:23:dc:d5:cb:71:e4:43:6b:8c:92:0d:05:76: 1d:e3:9e:ab:22:3e:fb:56:62:78:47:3d:c4:d1:96: 01:ee:1e:a1:02:cb:1b:6b:5d:b9:32:4e:3a:ef:4d: d0:05:08:07:0e:9e:8f:a3:d7:54:2a:1d:66:cd:1b: 5e:c8:e4:bf:3e:31:15:13:4f:36:a8:c0:fd:3f:06: 17:2c:c9:7e:0c:ef:c4:ae:5c:e6:8a:88:b1:6e:09: c0:36:7d:26:74:71:8d:b9:43:3b:2e:a2:10:40:d8: 36:ca:c1:e8:ca:df:32:f5:92:12:7c:89:4b:71:6d: 01:f7:4f:b3:5b:53:40:6f:7d:98:2c:ba:32:d1:72: 85:01:c8:b2:ce:8f:2e:44:d6:0d:d6:f8:e5:0a:38: c4:0a:c4:11:15:2a:e7:52:11:8d:91:b6:35:d9:63: 4b:34:9c:67:f8:e0:ae:0b:31:c8:d2:ae:9a:d9:42: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:6F:06:34:F9:CD:61:BB:E8:58:F1:82:61:4F:93:7D:4F:85:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf7881e9-a30d-3b5b-9f8a-04717fdbf348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ef:84:9b:a8:df:92:f1:df:69:86:73:1b:92:6c:e6:f8:d9: 28:b2:8a:c8:1e:51:77:0b:00:05:34:f9:09:90:c3:d2:5a:c6: 9f:d0:ae:a7:9f:79:34:e6:aa:f6:c7:98:fc:e9:46:d8:e3:48: b9:b6:60:8a:4b:48:18:83:54:b6:e8:73:86:f4:07:0c:52:5e: 5a:93:16:b4:ce:22:c4:a7:db:18:b2:c9:e5:7d:30:68:8a:87: 65:61:4e:18:35:18:92:07:94:30:01:f3:21:a8:84:23:0a:91: a5:35:0b:a1:93:5e:0b:33:80:19:8c:83:4a:93:bf:19:fa:9b: af:00:ea:08:f9:c6:b4:dd:da:5e:3a:da:22:c2:aa:f6:64:e2: c0:40:b5:1a:70:96:a3:4a:35:bf:42:14:28:6a:82:07:ed:d1: 35:bd:6c:a3:ce:3d:e8:8e:eb:cd:04:a2:4b:1c:8d:a8:fe:fa: 28:1e:1c:b1:c0:5c:0e:f0:01:de:24:88:3d:bd:b3:95:48:73: 30:94:a8:33:6c:33:cd:aa:37:cf:35:fe:35:2d:07:c5:17:3f: 45:ed:0a:ab:e5:75:2b:8c:e7:3c:ed:71:e5:43:84:e3:db:41: 36:72:0a:d1:95:22:cb:3d:54:df:8a:04:89:61:ee:e6:33:ac: c6:6e:6e:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz537546ab8ZSYaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNFoXDTI1MTAxMzEyMzcyNFowLzEtMCsGA1UEAxMk OTU1MzIxMzQtM2JiYS00YzhiLTlmNzQtNzc4YTM1Nzk1MWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHzx5DASl2lzZQr839hTXZuumaPAoPD1PPlV YdS3/KwEqQPirBJx2h48V8Q+7QfTz3QvWe+2+/Y2XAmnJ2hE7IJf23+N4nv5kOou 3SPc1ctx5ENrjJINBXYd456rIj77VmJ4Rz3E0ZYB7h6hAssba125Mk46703QBQgH Dp6Po9dUKh1mzRteyOS/PjEVE082qMD9PwYXLMl+DO/ErlzmioixbgnANn0mdHGN uUM7LqIQQNg2ysHoyt8y9ZISfIlLcW0B90+zW1NAb32YLLoy0XKFAciyzo8uRNYN 1vjlCjjECsQRFSrnUhGNkbY12WNLNJxn+OCuCzHI0q6a2UK30wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKCLbwY0+c1hu+hY8YJhT5N9T4UPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y3ODgxZTktYTMwZC0z YjViLTlmOGEtMDQ3MTdmZGJmMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFDvhJuo35Lx32mGcxuSbOb42SiyisgeUXcLAAU0+QmQw9Jaxp/Q rqefeTTmqvbHmPzpRtjjSLm2YIpLSBiDVLboc4b0BwxSXlqTFrTOIsSn2xiyyeV9 MGiKh2VhThg1GJIHlDAB8yGohCMKkaU1C6GTXgszgBmMg0qTvxn6m68A6gj5xrTd 2l462iLCqvZk4sBAtRpwlqNKNb9CFChqggft0TW9bKPOPeiO680Eokscjaj++ige HLHAXA7wAd4kiD29s5VIczCUqDNsM82qN881/jUtB8UXP0XtCqvldSuM5zztceVD hOPbQTZyCtGVIss9VN+KBIlh7uYzrMZubsM= -----END CERTIFICATE-----Generated at Wed Jul 23 17:11:50 2025 by rpki-client