$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb656be-bdbb-3237-9b26-f8a81b2af263.roa File: dfb656be-bdbb-3237-9b26-f8a81b2af263.roa (raw, json) Hash identifier: vmJF211a8SKCmXF29Z4kmefXgf+r93opA+0reqeSq1Y= Subject key identifier: 64:1A:47:91:D3:94:DD:86:38:31:BA:B0:D2:5D:14:3D:CA:AC:BD:45 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CF9EDC58D408E04BD7CFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb656be-bdbb-3237-9b26-f8a81b2af263.roa Signing time: Tue 15 Jul 2025 12:37:25 +0000 ROA not before: Tue 15 Jul 2025 12:37:25 +0000 ROA not after: Mon 13 Oct 2025 12:37:25 +0000 asID: 396599 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:9e:dc:58:d4:08:e0:4b:d7:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:25 2025 GMT Not After : Oct 13 12:37:25 2025 GMT Subject: CN=fa304c77-b3c4-4a3d-bb68-c0052ea68340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:f0:c2:30:4a:5a:e0:0f:d8:af:6d:ae:1a: 89:29:63:d8:d1:67:eb:05:a9:b5:5b:b0:3b:7c:e6: f7:39:28:26:3a:62:87:d1:44:21:90:28:c4:f7:06: 48:9b:56:53:7f:74:1e:c1:e4:34:20:30:cb:da:83: 27:78:20:17:56:81:bf:0e:83:bc:db:a6:75:84:5d: af:37:2e:c1:46:7c:d2:2f:5d:21:c4:d5:c8:e7:d4: 74:8a:b3:f2:71:b4:3e:b2:c7:d9:ad:31:07:a3:72: a8:e6:ca:92:fd:e7:81:33:92:f3:a9:55:c4:be:4c: 72:1d:05:e1:a3:93:44:2b:8e:80:12:6a:86:db:d8: f8:b5:79:e5:7a:f4:33:c0:c9:39:db:7b:7d:d0:3b: c5:92:48:30:57:bc:5b:1d:be:42:51:ef:0e:4c:44: 8a:78:9b:19:59:23:6a:b7:58:f7:34:bc:99:81:4b: 00:fc:ba:6a:34:ef:45:c0:00:56:63:84:d4:91:ef: 41:2e:24:a0:77:8d:01:b0:1e:9f:37:2b:d4:c8:a9: db:77:eb:a7:50:39:db:c9:a9:f6:9e:12:41:37:94: d0:b5:99:89:54:61:41:92:e2:3b:d9:d7:91:27:54: 70:35:46:21:85:b0:f4:b4:e5:d8:52:0e:65:aa:4c: 1d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1A:47:91:D3:94:DD:86:38:31:BA:B0:D2:5D:14:3D:CA:AC:BD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfb656be-bdbb-3237-9b26-f8a81b2af263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:58:3b:db:f0:e7:bb:a3:5f:3c:3e:64:bc:17:0c:39:bb:f8: 91:91:73:da:9e:b2:b7:6c:61:3c:b6:57:38:d5:2d:9f:77:ee: 35:bf:46:15:31:ba:58:65:dc:f6:34:4f:1c:83:73:ff:f7:fb: 47:94:e0:25:87:73:d7:45:34:03:bf:94:f6:a0:0b:20:c4:53: bf:70:99:a5:b1:4f:66:c8:c4:98:e8:b2:28:09:ab:68:be:a2: e8:5d:e9:9e:2a:2d:22:b6:7a:ed:03:ff:50:2e:a5:5f:a8:5b: 3e:7d:dc:f3:bb:11:0e:a8:1b:7e:be:77:fb:54:ec:3a:1e:43: bc:f6:33:21:06:3b:db:36:5e:ad:54:4d:f8:36:81:3e:ec:12: ea:11:26:81:b6:0c:47:4c:22:15:8b:64:45:e5:d8:59:0f:a4: 81:65:ae:4a:2f:6f:4f:45:4f:8a:d6:1f:14:18:7a:cc:d1:09: f8:f2:ee:fb:1a:f2:2d:8c:2a:70:b2:3f:5d:4f:08:39:cd:43: 16:2f:88:4b:54:5a:2d:e4:90:2a:9d:40:5a:76:d4:9c:73:a0: b3:7c:e9:d5:57:9b:18:30:88:90:c5:f8:d3:f8:71:b9:a1:58: d3:f7:c4:13:b3:68:4e:c0:a3:dd:a5:d9:ae:1c:8e:b9:96:f1: d4:c8:9c:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz57cWNQI4EvXz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNVoXDTI1MTAxMzEyMzcyNVowLzEtMCsGA1UEAxMk ZmEzMDRjNzctYjNjNC00YTNkLWJiNjgtYzAwNTJlYTY4MzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0bwwjBKWuAP2K9trhqJKWPY0WfrBam1W7A7 fOb3OSgmOmKH0UQhkCjE9wZIm1ZTf3QeweQ0IDDL2oMneCAXVoG/DoO826Z1hF2v Ny7BRnzSL10hxNXI59R0irPycbQ+ssfZrTEHo3Ko5sqS/eeBM5LzqVXEvkxyHQXh o5NEK46AEmqG29j4tXnlevQzwMk523t90DvFkkgwV7xbHb5CUe8OTESKeJsZWSNq t1j3NLyZgUsA/LpqNO9FwABWY4TUke9BLiSgd40BsB6fNyvUyKnbd+unUDnbyan2 nhJBN5TQtZmJVGFBkuI72deRJ1RwNUYhhbD0tOXYUg5lqkwduwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGQaR5HTlN2GODG6sNJdFD3KrL1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZiNjU2YmUtYmRiYi0z MjM3LTliMjYtZjhhODFiMmFmMjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL9YO9vw57ujXzw+ZLwXDDm7+JGRc9qesrdsYTy2VzjVLZ937jW/ RhUxulhl3PY0TxyDc//3+0eU4CWHc9dFNAO/lPagCyDEU79wmaWxT2bIxJjosigJ q2i+ouhd6Z4qLSK2eu0D/1AupV+oWz593PO7EQ6oG36+d/tU7DoeQ7z2MyEGO9s2 Xq1UTfg2gT7sEuoRJoG2DEdMIhWLZEXl2FkPpIFlrkovb09FT4rWHxQYeszRCfjy 7vsa8i2MKnCyP11PCDnNQxYviEtUWi3kkCqdQFp21JxzoLN86dVXmxgwiJDF+NP4 cbmhWNP3xBOzaE7Ao92l2a4cjrmW8dTInL4= -----END CERTIFICATE-----Generated at Wed Jul 23 17:25:16 2025 by rpki-client