$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe9bdca-4fb7-315f-ad37-43c7f64c5c4f.roa File: dfe9bdca-4fb7-315f-ad37-43c7f64c5c4f.roa (raw, json) Hash identifier: 9V3SOwTWojvq22yGfLTk2u7X6vtXAXJkwGlIBKBoYWs= Subject key identifier: BF:05:5D:FC:D0:3E:C5:A6:41:C7:6C:5B:5E:D8:7C:5E:0E:29:EA:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7E7B7FAE4E2F6E2BD18AA5A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe9bdca-4fb7-315f-ad37-43c7f64c5c4f.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 396566 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:7f:ae:4e:2f:6e:2b:d1:8a:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=182eab57-f034-455d-9646-e6d6cda32446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:d1:56:98:a5:32:fb:74:5b:d7:09:a3:a3: f7:da:20:e2:0f:f4:6a:1b:19:9d:34:c2:7a:87:10: f6:5e:08:bb:2e:6b:12:6e:48:61:78:b4:2b:62:c3: d9:ab:e3:16:ab:55:bc:b4:c3:aa:f7:fd:06:de:c2: 62:bd:97:82:d6:bb:8b:b2:1e:a2:71:ff:5d:68:d7: e2:8c:74:61:57:c4:85:fd:1b:e8:57:bf:27:06:3a: cc:6d:25:ca:0e:e1:92:3d:ee:82:4b:ca:22:4d:ff: e3:ad:da:17:45:ee:dd:9d:99:e3:87:05:ae:b3:2f: 43:11:fe:77:19:ec:72:dc:2b:ba:6e:01:c7:ff:d0: 24:1d:20:61:2b:be:d2:94:fa:4b:08:6f:03:73:bd: da:c6:d4:a5:28:a7:37:1d:47:71:47:c9:7f:11:e9: 71:c7:59:d7:0e:f1:5b:63:97:ce:3f:45:a4:d7:06: d0:d9:67:a8:ad:86:14:7b:8d:26:38:4e:41:53:df: e7:18:5c:1b:5d:b2:2f:7d:f5:fd:e8:06:84:4c:38: e8:93:a5:5b:2d:00:d8:48:8b:a7:82:b7:23:d2:c2: 46:80:e6:71:7f:d1:d8:89:a1:0d:35:d4:ef:c7:89: ea:3a:b0:62:15:c1:0b:ed:9c:5d:a8:b6:be:64:c8: 40:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:05:5D:FC:D0:3E:C5:A6:41:C7:6C:5B:5E:D8:7C:5E:0E:29:EA:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe9bdca-4fb7-315f-ad37-43c7f64c5c4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:33:44:cd:36:ae:88:f0:45:86:8c:11:0b:d7:6a:01:2f:72: d6:29:b2:88:f8:d3:9c:7a:5d:67:35:0e:a7:90:e4:b5:f0:0f: 71:ae:92:6a:2d:a5:ec:73:50:7a:4f:30:0f:b2:3a:3e:39:03: 8f:09:4b:d2:f9:f7:fd:18:b0:9d:fa:78:8f:21:c3:4c:94:48: e8:e0:78:ce:0b:83:7f:59:bc:4e:3c:8e:43:a9:fa:56:c8:a2: 8a:b3:4a:ee:e7:62:09:64:b1:b5:02:cd:b7:17:6c:f8:8f:bb: c6:b1:0a:9f:31:d8:23:9f:41:53:7d:53:c8:c1:20:7b:6a:60: 00:b8:87:2c:ff:3b:59:ee:62:df:37:93:a3:f3:70:59:28:a3: bb:7a:1b:99:c7:5a:1f:3c:ac:3b:f8:6d:25:16:53:f1:a5:5b: 7f:c9:5f:74:49:21:f2:eb:22:a9:31:35:3d:01:be:10:38:fc: 89:c7:72:0e:3b:9e:97:fb:46:bd:68:fd:82:aa:44:b3:0a:8f: ec:bf:cc:14:43:24:3a:38:64:85:10:fc:02:b2:79:c6:5f:09: 04:f8:01:a2:2e:f9:db:8f:18:07:71:74:7d:65:09:8e:a1:1f: d2:c4:1e:05:5c:a8:5a:2a:63:8e:04:0f:42:89:eb:28:40:26: 13:5a:f4:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp+e3+uTi9uK9GKpaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTgyZWFiNTctZjAzNC00NTVkLTk2NDYtZTZkNmNkYTMyNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE/RVpilMvt0W9cJo6P32iDiD/RqGxmdNMJ6 hxD2Xgi7LmsSbkhheLQrYsPZq+MWq1W8tMOq9/0G3sJivZeC1ruLsh6icf9daNfi jHRhV8SF/RvoV78nBjrMbSXKDuGSPe6CS8oiTf/jrdoXRe7dnZnjhwWusy9DEf53 Gexy3Cu6bgHH/9AkHSBhK77SlPpLCG8Dc73axtSlKKc3HUdxR8l/Eelxx1nXDvFb Y5fOP0Wk1wbQ2WeorYYUe40mOE5BU9/nGFwbXbIvffX96AaETDjok6VbLQDYSIun grcj0sJGgOZxf9HYiaENNdTvx4nqOrBiFcEL7ZxdqLa+ZMhAyQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFL8FXfzQPsWmQcdsW17YfF4OKeoYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZlOWJkY2EtNGZiNy0z MTVmLWFkMzctNDNjN2Y2NGM1YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCcM0TNNq6I8EWGjBEL12oBL3LWKbKI+NOcel1n NQ6nkOS18A9xrpJqLaXsc1B6TzAPsjo+OQOPCUvS+ff9GLCd+niPIcNMlEjo4HjO C4N/WbxOPI5DqfpWyKKKs0ru52IJZLG1As23F2z4j7vGsQqfMdgjn0FTfVPIwSB7 amAAuIcs/ztZ7mLfN5Oj83BZKKO7ehuZx1ofPKw7+G0lFlPxpVt/yV90SSHy6yKp MTU9Ab4QOPyJx3IOO56X+0a9aP2CqkSzCo/sv8wUQyQ6OGSFEPwCsnnGXwkE+AGi LvnbjxgHcXR9ZQmOoR/SxB4FXKhaKmOOBA9CiesoQCYTWvSR -----END CERTIFICATE-----Generated at Wed Jul 23 17:18:05 2025 by rpki-client