$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa File: ddc02893-df28-3f75-97c1-785b64e1dafd.roa (raw, json) Hash identifier: klVxK0tq5H2HKtMAsnDyfgMpC1+GOCNz788YAvYe+rU= Subject key identifier: 17:59:2F:E9:97:91:2D:F9:39:F9:11:68:A9:C8:DE:B3:8F:39:F7:46 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C54764EF4BB51D3CE077C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa Signing time: Tue 22 Jul 2025 12:41:17 +0000 ROA not before: Tue 22 Jul 2025 12:41:17 +0000 ROA not after: Mon 20 Oct 2025 12:41:17 +0000 asID: 27544 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:54:76:4e:f4:bb:51:d3:ce:07:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:17 2025 GMT Not After : Oct 20 12:41:17 2025 GMT Subject: CN=bd407eab-b7d3-4fac-aba0-f94bf7b0f7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:84:9c:de:4e:26:53:86:72:0a:c2:90:e2: 25:99:d0:fd:7e:60:36:59:8f:40:52:82:4d:6b:f2: a0:33:4f:66:f3:e5:33:06:ae:07:93:76:da:e7:2b: 69:56:d9:d0:7b:3a:e2:73:5b:a8:3a:69:07:e0:f7: 8e:70:27:6d:e6:4b:19:cf:6c:f2:01:5d:c3:a2:a4: 3a:eb:6b:45:48:c2:e0:39:8e:7b:c9:b7:8a:ae:17: b0:50:d7:76:46:39:69:40:d0:fc:1b:09:5b:a9:49: 2f:0a:a2:69:02:65:95:f7:ec:f4:d9:a2:33:3e:82: 81:6d:14:32:03:42:c3:dc:3f:26:6f:e2:f6:28:23: 52:c1:26:4e:d6:d6:27:1e:47:19:e7:03:69:14:3a: 31:14:be:43:9f:1e:1a:56:db:79:c3:fc:24:e6:4f: ad:8a:0c:a6:b7:ce:0b:59:2b:9d:be:48:23:89:30: fa:63:7d:ef:a9:77:a4:b9:35:29:b9:6d:f3:a5:05: 1d:1c:60:ab:a2:c6:87:5b:87:77:65:12:ad:c1:65: 3d:b8:f3:17:28:10:45:31:6b:f5:1d:c5:9e:d5:29: e7:89:84:ba:3a:16:5c:46:cb:f5:34:1c:e5:a8:85: 19:70:51:47:b4:fd:b8:f1:1b:ae:77:ae:e1:0a:ce: 11:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:59:2F:E9:97:91:2D:F9:39:F9:11:68:A9:C8:DE:B3:8F:39:F7:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddc02893-df28-3f75-97c1-785b64e1dafd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:f0:d1:66:ed:4e:64:df:72:e9:a1:50:fe:d0:d5:5b:67:f1: 97:1f:0f:2b:48:31:b7:b1:39:9d:ea:bf:cf:aa:cb:9d:63:73: 93:ca:9a:a3:0c:16:fa:f6:93:81:c7:97:40:f7:58:71:e9:3c: fe:05:55:c5:99:03:7b:1c:9d:29:03:25:6f:d4:0c:8d:0a:7d: 02:c3:93:0a:e3:3c:fd:b3:eb:af:c7:3b:35:9c:37:c7:6c:ff: 34:5b:89:c5:6a:80:ba:d3:91:43:60:c0:f6:2f:98:18:a3:d3: cb:27:64:53:d6:ca:28:ac:db:b0:dd:b7:b8:f7:79:44:90:e6: a8:34:64:fe:06:15:43:4e:77:36:da:66:51:e0:98:63:cd:e1: 34:63:c6:b3:8d:0c:31:fd:e1:71:f5:be:4c:5c:0e:a7:eb:93: e3:0a:fe:05:02:d6:b5:e8:10:7d:7d:a5:72:d8:2b:ea:09:5d: fe:0e:d0:c5:f8:73:af:97:74:e1:17:43:8b:76:9b:4f:a8:4e: 6e:f6:29:8b:5c:d7:cf:81:ca:bb:52:54:e9:0c:dc:05:5a:05: 9d:28:d1:59:d2:43:66:fb:5f:a3:a1:07:98:78:a8:1a:ae:71: 38:3f:20:99:57:19:c8:83:07:ca:e2:04:02:06:22:2e:86:de: 60:38:87:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFR2TvS7UdPOB3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExN1oXDTI1MTAyMDEyNDExN1owLzEtMCsGA1UEAxMk YmQ0MDdlYWItYjdkMy00ZmFjLWFiYTAtZjk0YmY3YjBmN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5qEnN5OJlOGcgrCkOIlmdD9fmA2WY9AUoJN a/KgM09m8+UzBq4Hk3ba5ytpVtnQezric1uoOmkH4PeOcCdt5ksZz2zyAV3DoqQ6 62tFSMLgOY57ybeKrhewUNd2RjlpQND8GwlbqUkvCqJpAmWV9+z02aIzPoKBbRQy A0LD3D8mb+L2KCNSwSZO1tYnHkcZ5wNpFDoxFL5Dnx4aVtt5w/wk5k+tigymt84L WSudvkgjiTD6Y33vqXekuTUpuW3zpQUdHGCrosaHW4d3ZRKtwWU9uPMXKBBFMWv1 HcWe1SnniYS6OhZcRsv1NBzlqIUZcFFHtP248Ruud67hCs4RtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBdZL+mXkS35OfkRaKnI3rOPOfdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRjMDI4OTMtZGYyOC0z Zjc1LTk3YzEtNzg1YjY0ZTFkYWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACfw0WbtTmTfcumhUP7Q1Vtn8ZcfDytIMbexOZ3qv8+qy51jc5PK mqMMFvr2k4HHl0D3WHHpPP4FVcWZA3scnSkDJW/UDI0KfQLDkwrjPP2z66/HOzWc N8ds/zRbicVqgLrTkUNgwPYvmBij08snZFPWyiis27Ddt7j3eUSQ5qg0ZP4GFUNO dzbaZlHgmGPN4TRjxrONDDH94XH1vkxcDqfrk+MK/gUC1rXoEH19pXLYK+oJXf4O 0MX4c6+XdOEXQ4t2m0+oTm72KYtc18+ByrtSVOkM3AVaBZ0o0VnSQ2b7X6OhB5h4 qBqucTg/IJlXGciDB8riBAIGIi6G3mA4h3Q= -----END CERTIFICATE-----Generated at Fri Jul 25 10:58:15 2025 by rpki-client