$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa365817-e37f-3ab7-9515-b151c2ea2790.roa File: fa365817-e37f-3ab7-9515-b151c2ea2790.roa (raw, json) Hash identifier: pyG8IIB9i9cVLTEd+aG9aGqHa5jFaZJ7E1yYw3N+6wM= Subject key identifier: 8A:F7:B1:63:99:62:47:B9:2A:5F:F9:23:59:BE:AC:17:29:79:46:D0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A86CFA28F671DFBFE8DD9DE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa365817-e37f-3ab7-9515-b151c2ea2790.roa Signing time: Tue 15 Jul 2025 12:37:26 +0000 ROA not before: Tue 15 Jul 2025 12:37:26 +0000 ROA not after: Mon 13 Oct 2025 12:37:26 +0000 asID: 396580 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:cf:a2:8f:67:1d:fb:fe:8d:d9:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 15 12:37:26 2025 GMT Not After : Oct 13 12:37:26 2025 GMT Subject: CN=12a3aa64-7091-488e-9d33-fbf81e09d645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8b:fc:42:09:29:5d:4f:f4:79:0a:65:bb:c9: 7f:db:1b:88:87:4f:cf:4f:f8:17:77:a9:b2:3a:51: 2b:06:d4:43:e4:b7:54:7c:c5:ba:83:85:8f:00:50: 57:b2:e2:66:99:8c:ce:98:d2:31:be:74:ad:87:92: 41:fb:27:64:e8:27:35:88:9e:d3:27:51:ea:3b:0f: 0a:39:a7:cf:e8:d1:66:bf:5c:62:6e:63:38:28:d0: a6:cc:66:79:c8:8c:bf:90:8f:e3:2b:32:b1:89:60: 99:24:43:d7:bb:fc:ee:3a:01:81:b9:c2:33:ea:cf: 99:3c:3e:62:53:bc:ba:c0:4c:12:39:75:7e:65:af: 80:bc:e1:d4:02:1b:3d:af:e7:f7:cb:09:24:8d:ae: 8f:f1:e2:46:1c:66:44:c1:42:d6:93:f2:e9:df:74: a0:d4:85:b1:09:a0:b9:cf:a3:8c:e7:a7:36:b7:dd: 7e:74:41:b7:59:30:46:5a:5a:bd:9a:96:7b:b2:44: 2c:b6:95:45:d1:d7:bd:d0:85:b1:f8:ad:49:4f:e9: 39:5e:7e:f8:3c:17:85:1a:78:2b:c6:cd:1a:1a:30: 8b:90:8d:70:2d:bd:02:01:bc:d4:04:eb:41:7b:37: 5e:cf:cd:1b:89:59:45:5e:b6:9c:f0:29:dd:c0:4c: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:B1:63:99:62:47:B9:2A:5F:F9:23:59:BE:AC:17:29:79:46:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa365817-e37f-3ab7-9515-b151c2ea2790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:cc:88:e9:74:75:1b:a1:ea:7e:76:3d:6f:20:33:18:a0:c1: 38:f5:f3:0e:2d:51:7b:f0:80:1e:5e:53:27:4a:a1:b8:45:ef: 9b:5b:01:15:44:62:02:f0:1f:6d:e8:89:a6:c0:24:15:93:52: 60:db:ca:c1:03:d3:dd:ba:75:f6:de:14:d4:a2:6b:3e:af:75: 54:6e:8a:c0:d4:99:f2:e9:73:eb:1d:0b:aa:67:7e:f7:14:e3: ef:fc:32:3a:6f:2b:3a:8c:9b:7f:35:8d:7d:63:3e:ec:68:a8: 95:bf:aa:dc:66:3b:b3:4a:83:75:e8:e1:67:c0:a3:ec:ed:15: 10:2f:4b:cd:f0:06:8e:30:49:6f:84:cb:74:47:e2:6a:98:2a: 07:db:78:ba:16:b8:22:7f:0f:33:d4:14:72:9b:b0:20:9f:71: a9:4e:49:7e:ac:05:08:63:08:19:a3:b4:2c:f5:42:1a:0a:26: 69:f6:98:c7:41:64:dd:e0:5e:de:db:0a:77:25:12:c3:20:ee: 91:2b:67:b9:a8:a5:9b:7c:f8:6c:31:c3:83:54:6e:69:aa:e5: 56:6e:97:95:36:01:08:d2:7c:16:aa:aa:46:66:82:e4:a2:21: 32:f5:7a:da:97:9f:d6:8f:ed:54:8d:59:2a:f3:c6:d1:e2:89: 66:80:39:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz6KPZx37/o3Z3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxNTEyMzcyNloXDTI1MTAxMzEyMzcyNlowLzEtMCsGA1UEAxMk MTJhM2FhNjQtNzA5MS00ODhlLTlkMzMtZmJmODFlMDlkNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyov8QgkpXU/0eQplu8l/2xuIh0/PT/gXd6my OlErBtRD5LdUfMW6g4WPAFBXsuJmmYzOmNIxvnSth5JB+ydk6Cc1iJ7TJ1HqOw8K OafP6NFmv1xibmM4KNCmzGZ5yIy/kI/jKzKxiWCZJEPXu/zuOgGBucIz6s+ZPD5i U7y6wEwSOXV+Za+AvOHUAhs9r+f3ywkkja6P8eJGHGZEwULWk/Lp33Sg1IWxCaC5 z6OM56c2t91+dEG3WTBGWlq9mpZ7skQstpVF0de90IWx+K1JT+k5Xn74PBeFGngr xs0aGjCLkI1wLb0CAbzUBOtBezdez80biVlFXrac8CndwExJNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIr3sWOZYke5Kl/5I1m+rBcpeUbQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmEzNjU4MTctZTM3Zi0z YWI3LTk1MTUtYjE1MWMyZWEyNzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALnMiOl0dRuh6n52PW8gMxigwTj18w4tUXvwgB5eUydKobhF75tb ARVEYgLwH23oiabAJBWTUmDbysED0926dfbeFNSiaz6vdVRuisDUmfLpc+sdC6pn fvcU4+/8MjpvKzqMm381jX1jPuxoqJW/qtxmO7NKg3Xo4WfAo+ztFRAvS83wBo4w SW+Ey3RH4mqYKgfbeLoWuCJ/DzPUFHKbsCCfcalOSX6sBQhjCBmjtCz1QhoKJmn2 mMdBZN3gXt7bCnclEsMg7pErZ7mopZt8+Gwxw4NUbmmq5VZul5U2AQjSfBaqqkZm guSiITL1etqXn9aP7VSNWSrzxtHiiWaAORE= -----END CERTIFICATE-----Generated at Wed Jul 23 17:19:17 2025 by rpki-client