$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77e8e43-de90-3a24-9fdf-5cd6fa907580.roa File: f77e8e43-de90-3a24-9fdf-5cd6fa907580.roa (raw, json) Hash identifier: YMqBkwovD12yQZIW6vjYgXmxtPiSPUTJfX3qXWhr7e4= Subject key identifier: E3:DE:28:7D:1B:76:F0:C2:DD:19:88:5A:1D:F2:5E:D8:AF:EC:59:CF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A7E7B83A5256C3F1469F65C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77e8e43-de90-3a24-9fdf-5cd6fa907580.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 40647 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:83:a5:25:6c:3f:14:69:f6:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=67333857-c7d3-4cff-80cd-653a448d1b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:d6:8c:5b:5d:08:80:15:18:70:ee:90:45: 64:03:da:d0:15:53:de:9f:1b:48:47:8f:d9:91:e1: 3b:83:68:9e:ef:f2:95:be:1a:0e:aa:2c:18:25:9a: ff:56:47:fc:5c:2a:04:c6:ef:f1:ac:25:b9:6d:c9: 90:50:2a:15:29:36:be:a8:04:cc:4c:dc:ee:3a:e4: 1d:0d:01:f1:55:f5:ab:16:cd:0a:0b:56:3e:d4:3c: 14:37:c1:9e:5b:ca:89:d5:7c:8f:49:1b:47:02:7b: af:68:ea:a9:01:2e:71:8e:2b:0b:c9:0e:a8:70:0c: d6:17:35:cf:c0:61:a8:d0:34:06:f4:05:4e:82:0c: a2:6b:f0:69:d7:84:2b:09:a7:75:76:1a:f9:ff:34: 10:96:6d:63:c4:aa:5e:a0:ff:8e:5f:a8:d7:2d:a2: 5a:3c:65:ec:da:6d:d1:a9:2d:ca:16:60:75:9c:03: 50:75:0c:c3:b7:ef:a9:91:b1:39:5a:a5:62:7b:27: 15:49:42:6f:d6:10:cc:f0:15:2c:c5:bf:e5:c6:2e: 03:62:8d:24:40:2c:7b:3e:71:6b:e2:bb:40:12:82: db:e6:f6:51:3d:55:1e:d8:15:0d:24:cd:f1:40:fe: 47:1f:d9:c8:9c:0c:f8:06:bd:23:36:6a:af:61:fc: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DE:28:7D:1B:76:F0:C2:DD:19:88:5A:1D:F2:5E:D8:AF:EC:59:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f77e8e43-de90-3a24-9fdf-5cd6fa907580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b3:94:0d:02:9b:af:7d:92:81:ce:cf:ec:3f:55:ba:6c:0e: ab:54:94:f9:f9:f6:4c:e6:26:99:b0:39:b9:e0:79:09:48:2a: 65:65:18:51:54:0e:96:96:11:3c:8d:d6:60:4c:13:bb:e0:2b: e2:16:54:fd:42:13:f4:c0:17:3f:df:2b:76:fc:50:04:18:04: 0e:08:53:5a:65:c0:54:02:64:57:a3:09:c9:8f:09:d6:86:43: 3d:2e:2d:99:80:a4:cd:5a:50:74:d6:0f:ee:ba:76:e6:a0:ac: a5:36:81:49:25:a1:b3:86:b1:56:8f:0f:98:3d:d5:b4:12:84: 6e:a0:b4:ae:03:4b:b6:d7:8d:60:e1:01:45:ab:2c:4d:f1:1a: 06:0a:d8:ed:2e:33:dc:83:03:aa:06:6c:f9:41:e4:98:4c:b9: 00:fb:46:65:be:7f:25:48:b7:d5:44:66:6e:90:44:ad:29:f0: 34:61:a7:94:bb:af:f4:8c:2b:90:18:6f:f9:4e:82:9e:26:2c: 72:c7:a6:de:c7:83:4b:41:55:ca:0c:38:e3:a2:ac:35:4e:32: b7:7a:02:5c:d7:0e:9e:d2:8d:20:55:bf:76:ce:74:4a:6f:1a: fc:35:fb:6d:2b:df:fb:0e:e7:d3:79:a5:42:88:47:d5:41:6b: 0d:0d:41:0f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp+e4OlJWw/FGn2XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NjczMzM4NTctYzdkMy00Y2ZmLTgwY2QtNjUzYTQ0OGQxYjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtHWjFtdCIAVGHDukEVkA9rQFVPenxtIR4/Z keE7g2ie7/KVvhoOqiwYJZr/Vkf8XCoExu/xrCW5bcmQUCoVKTa+qATMTNzuOuQd DQHxVfWrFs0KC1Y+1DwUN8GeW8qJ1XyPSRtHAnuvaOqpAS5xjisLyQ6ocAzWFzXP wGGo0DQG9AVOggyia/Bp14QrCad1dhr5/zQQlm1jxKpeoP+OX6jXLaJaPGXs2m3R qS3KFmB1nANQdQzDt++pkbE5WqVieycVSUJv1hDM8BUsxb/lxi4DYo0kQCx7PnFr 4rtAEoLb5vZRPVUe2BUNJM3xQP5HH9nInAz4Br0jNmqvYfy2FQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOPeKH0bdvDC3RmIWh3yXtiv7FnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjc3ZThlNDMtZGU5MC0z YTI0LTlmZGYtNWNkNmZhOTA3NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCms5QNApuvfZKBzs/sP1W6bA6rVJT5+fZM5iaZ sDm54HkJSCplZRhRVA6WlhE8jdZgTBO74CviFlT9QhP0wBc/3yt2/FAEGAQOCFNa ZcBUAmRXownJjwnWhkM9Li2ZgKTNWlB01g/uunbmoKylNoFJJaGzhrFWjw+YPdW0 EoRuoLSuA0u2141g4QFFqyxN8RoGCtjtLjPcgwOqBmz5QeSYTLkA+0Zlvn8lSLfV RGZukEStKfA0YaeUu6/0jCuQGG/5ToKeJixyx6bex4NLQVXKDDjjoqw1TjK3egJc 1w6e0o0gVb92znRKbxr8NfttK9/7DufTeaVCiEfVQWsNDUEP -----END CERTIFICATE-----Generated at Fri Jul 25 00:55:58 2025 by rpki-client