$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef4e081e-4c3a-3fdc-a701-36305e66916a.roa File: ef4e081e-4c3a-3fdc-a701-36305e66916a.roa (raw, json) Hash identifier: 6edUnIJG7h1ZnhQPGw2w7Foq9m8JkdAWIyLXj1SHA1Y= Subject key identifier: 70:A6:F2:9D:11:1E:5D:7A:EF:C2:03:C0:06:A4:99:DD:C2:94:F9:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A9A5C4951C9F5B04647A6E380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef4e081e-4c3a-3fdc-a701-36305e66916a.roa Signing time: Tue 22 Jul 2025 12:41:12 +0000 ROA not before: Tue 22 Jul 2025 12:41:12 +0000 ROA not after: Mon 20 Oct 2025 12:41:12 +0000 asID: 397203 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:5c:49:51:c9:f5:b0:46:47:a6:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 22 12:41:12 2025 GMT Not After : Oct 20 12:41:12 2025 GMT Subject: CN=d07c588e-ca84-4398-b629-f83797ac7442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:f6:69:9f:43:a5:43:a1:ba:ea:06:a9:52: 25:6c:ab:86:65:9a:31:b6:51:76:57:51:a8:37:5d: 44:c7:f7:a9:f2:46:89:48:6f:82:13:3f:7c:31:1c: db:87:53:9d:d0:73:c6:d1:b2:dc:15:03:e6:a0:6c: 84:3d:7c:8c:d4:46:85:df:95:81:29:9f:4d:b4:71: fd:12:f7:01:11:60:7b:8d:30:b2:e6:75:14:ff:07: ca:6f:95:68:c3:b5:1b:cd:95:61:b7:52:12:dd:0d: 4a:0d:64:5d:60:88:b4:78:1a:a2:9f:63:40:2e:b2: 86:24:a7:f3:36:2a:b4:e5:e9:68:95:e6:37:e2:30: 12:36:57:66:24:c1:db:41:44:ef:53:5a:ae:14:6c: ce:13:ab:79:05:28:b2:9b:85:f0:0b:f5:c5:ec:a5: 3c:46:ed:db:85:62:85:57:58:3d:72:d0:5d:7d:7a: 87:b7:0b:d8:11:e3:c5:bc:b7:7f:b0:5f:b7:7d:16: 5b:a9:32:90:ff:d0:1c:b3:28:87:9b:f4:18:63:6e: 06:e2:99:a9:17:54:89:46:dc:1c:46:62:8e:02:1a: 0a:20:a3:45:56:79:8b:be:d5:2d:9f:fa:bd:48:26: 8e:f6:be:64:da:64:0e:29:da:8f:0e:0a:1e:19:36: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A6:F2:9D:11:1E:5D:7A:EF:C2:03:C0:06:A4:99:DD:C2:94:F9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef4e081e-4c3a-3fdc-a701-36305e66916a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:88:c5:6e:b6:94:b9:90:da:8b:63:9c:88:be:22:cb:ae:71: af:98:27:34:ec:23:61:5e:9a:98:4b:6a:68:a1:21:da:3f:e8: 2b:50:3c:70:80:d0:6c:95:95:8d:f6:d9:f5:dc:7b:3c:6f:41: 33:3e:95:94:b2:60:48:12:33:49:0b:c8:f4:58:33:55:76:8d: f4:76:91:9d:35:31:87:62:e8:e9:40:c7:f8:eb:fd:b5:a3:ee: 05:4e:6b:d3:9a:1b:07:ba:e5:57:e6:fc:3f:e9:74:e2:40:17: a0:14:af:d1:88:6b:8a:6b:af:8c:6e:88:5a:0a:a8:dd:28:f7: 70:31:50:f7:06:05:54:f5:a7:be:f9:98:0d:e3:1a:98:6e:0f: 2a:0a:8b:4b:ad:58:e9:f2:6d:a3:35:f5:45:8f:c4:08:38:30: ca:d1:b2:59:35:fb:d4:89:c2:96:76:dc:52:bc:8a:aa:53:c1: 5e:c4:dd:cf:5a:45:fd:f8:71:08:b6:d2:d8:a1:05:e3:34:29: 19:75:34:81:e6:b0:d2:a2:f6:d9:f2:5b:d4:3e:88:92:63:0f: 2f:f0:8a:d5:4e:10:5a:ae:25:ba:e3:04:a3:85:85:5a:58:c9: 9e:78:c0:a8:2d:6a:fd:c7:b4:88:fa:cf:51:9b:3f:15:6e:f8: c8:b6:51:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXElRyfWwRkem44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyMjEyNDExMloXDTI1MTAyMDEyNDExMlowLzEtMCsGA1UEAxMk ZDA3YzU4OGUtY2E4NC00Mzk4LWI2MjktZjgzNzk3YWM3NDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvL2aZ9DpUOhuuoGqVIlbKuGZZoxtlF2V1Go N11Ex/ep8kaJSG+CEz98MRzbh1Od0HPG0bLcFQPmoGyEPXyM1EaF35WBKZ9NtHH9 EvcBEWB7jTCy5nUU/wfKb5Vow7UbzZVht1IS3Q1KDWRdYIi0eBqin2NALrKGJKfz Niq05eloleY34jASNldmJMHbQUTvU1quFGzOE6t5BSiym4XwC/XF7KU8Ru3bhWKF V1g9ctBdfXqHtwvYEePFvLd/sF+3fRZbqTKQ/9AcsyiHm/QYY24G4pmpF1SJRtwc RmKOAhoKIKNFVnmLvtUtn/q9SCaO9r5k2mQOKdqPDgoeGTbXywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHCm8p0RHl1678IDwAakmd3ClPkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWY0ZTA4MWUtNGMzYS0z ZmRjLWE3MDEtMzYzMDVlNjY5MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL+IxW62lLmQ2otjnIi+Isuuca+YJzTsI2FemphLamihIdo/6CtQ PHCA0GyVlY322fXcezxvQTM+lZSyYEgSM0kLyPRYM1V2jfR2kZ01MYdi6OlAx/jr /bWj7gVOa9OaGwe65Vfm/D/pdOJAF6AUr9GIa4prr4xuiFoKqN0o93AxUPcGBVT1 p775mA3jGphuDyoKi0utWOnybaM19UWPxAg4MMrRslk1+9SJwpZ23FK8iqpTwV7E 3c9aRf34cQi20tihBeM0KRl1NIHmsNKi9tnyW9Q+iJJjDy/witVOEFquJbrjBKOF hVpYyZ54wKgtav3HtIj6z1GbPxVu+Mi2UQE= -----END CERTIFICATE-----Generated at Wed Jul 23 17:14:31 2025 by rpki-client