$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa File: defae45a-66a3-332f-95cd-9ffa0e1ab851.roa (raw, json) Hash identifier: As/y5vrlbidAymG44GW5EaM15kePWoWbQcqkdNxVp78= Subject key identifier: 43:FB:77:BC:8B:CA:0C:95:E0:41:DA:0A:64:01:F8:65:4C:2E:CE:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CFA2804160B3B95DF0BC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa Signing time: Tue 15 Jul 2025 12:37:26 +0000 ROA not before: Tue 15 Jul 2025 12:37:26 +0000 ROA not after: Mon 13 Oct 2025 12:37:26 +0000 asID: 396595 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:a2:80:41:60:b3:b9:5d:f0:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:26 2025 GMT Not After : Oct 13 12:37:26 2025 GMT Subject: CN=deb42cb6-6386-415a-be5f-a285d9ada0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:1d:59:15:75:c3:04:8b:1a:f8:f7:da:7d: 4d:cd:b4:39:00:09:34:24:88:8d:c3:53:97:02:d7: 42:e1:d8:cb:6e:08:4b:89:5c:5a:18:ac:c5:6c:7b: 87:61:17:4d:d4:ca:0f:e2:02:93:6b:b5:2b:1f:a1: 9b:88:09:6d:36:d3:0d:f9:c6:ab:d3:b8:37:f8:d1: fa:29:2c:0a:dd:21:15:e0:5b:c1:27:5e:88:29:68: 0d:07:c8:e9:45:e7:3d:26:0a:30:12:07:5b:ee:b5: 6e:c1:9f:e1:1e:a4:e6:c9:a0:ee:44:25:b8:31:73: e0:d1:84:02:9a:73:46:97:e2:8e:2a:9a:76:e2:1b: a1:69:35:cc:87:55:fa:60:18:e0:9b:5c:06:6d:92: c1:c7:00:8b:5d:16:a7:e6:a3:4d:9e:31:e5:f5:2d: 1e:d2:a2:5b:64:24:94:44:f3:1d:c9:78:1e:6a:ad: 45:a1:c4:f0:58:90:03:86:aa:ed:df:0f:78:5a:5c: cc:70:25:11:64:e3:50:55:2d:70:be:a6:3e:e4:04: 05:2d:48:f9:f9:c5:ed:f9:b0:61:d6:36:01:2b:8f: fb:02:db:0f:de:71:a5:2b:00:d3:4b:76:2c:86:70: 6a:1c:38:c4:cf:17:79:16:d6:2d:82:be:22:97:42: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:77:BC:8B:CA:0C:95:E0:41:DA:0A:64:01:F8:65:4C:2E:CE:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e9:a6:ac:b4:ce:2a:ed:7e:57:3c:b4:7d:0e:10:92:35:0a: 4b:8e:5c:f0:c9:23:7b:ff:af:88:2b:f1:08:e5:20:8e:fd:65: 17:46:9d:92:63:c7:09:59:b1:fa:32:53:b9:9f:e0:6b:ff:76: de:97:38:76:fc:39:c6:47:bf:17:26:c5:f1:5f:d9:65:41:1b: c4:b4:47:d1:fe:fd:f5:e9:70:dc:15:f0:04:8f:8c:db:a9:32: b3:c8:f3:a4:59:9e:59:ac:0b:ea:2f:82:cb:c6:af:8b:fc:66: 98:30:e6:df:8f:1f:09:5c:11:74:2f:39:dc:ea:29:e9:30:20: 28:33:af:6f:03:3c:46:12:a6:6d:f2:52:32:90:51:b8:5e:74: c7:39:78:fd:4b:57:21:5c:9d:86:ed:98:81:62:43:55:16:7a: af:fc:6b:33:c2:7b:ee:52:ff:fc:1f:61:b9:98:91:3a:f8:5d: 0a:f3:f0:7d:30:72:76:a0:f9:8b:ee:40:65:b4:8f:d0:ff:4a: 1b:36:e4:17:e4:41:80:e5:a9:fb:b0:ce:cc:bd:e0:ff:13:de: e0:86:56:be:61:7f:b6:a3:32:77:57:44:84:c6:68:c2:d3:d4: 6d:e1:eb:ca:63:12:83:b4:0a:74:2d:6a:d9:11:af:a9:46:80: 75:48:54:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz6KAQWCzuV3wvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNloXDTI1MTAxMzEyMzcyNlowLzEtMCsGA1UEAxMk ZGViNDJjYjYtNjM4Ni00MTVhLWJlNWYtYTI4NWQ5YWRhMGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCgdWRV1wwSLGvj32n1NzbQ5AAk0JIiNw1OX AtdC4djLbghLiVxaGKzFbHuHYRdN1MoP4gKTa7UrH6GbiAltNtMN+car07g3+NH6 KSwK3SEV4FvBJ16IKWgNB8jpRec9JgowEgdb7rVuwZ/hHqTmyaDuRCW4MXPg0YQC mnNGl+KOKpp24huhaTXMh1X6YBjgm1wGbZLBxwCLXRan5qNNnjHl9S0e0qJbZCSU RPMdyXgeaq1FocTwWJADhqrt3w94WlzMcCURZONQVS1wvqY+5AQFLUj5+cXt+bBh 1jYBK4/7AtsP3nGlKwDTS3YshnBqHDjEzxd5FtYtgr4il0JHMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEP7d7yLygyV4EHaCmQB+GVMLs6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVmYWU0NWEtNjZhMy0z MzJmLTk1Y2QtOWZmYTBlMWFiODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnppqy0zirtflc8tH0OEJI1CkuOXPDJI3v/r4gr8QjlII79ZRdG nZJjxwlZsfoyU7mf4Gv/dt6XOHb8OcZHvxcmxfFf2WVBG8S0R9H+/fXpcNwV8ASP jNupMrPI86RZnlmsC+ovgsvGr4v8Zpgw5t+PHwlcEXQvOdzqKekwICgzr28DPEYS pm3yUjKQUbhedMc5eP1LVyFcnYbtmIFiQ1UWeq/8azPCe+5S//wfYbmYkTr4XQrz 8H0wcnag+YvuQGW0j9D/Shs25BfkQYDlqfuwzsy94P8T3uCGVr5hf7ajMndXRITG aMLT1G3h68pjEoO0CnQtatkRr6lGgHVIVHI= -----END CERTIFICATE-----Generated at Wed Jul 23 17:15:58 2025 by rpki-client