$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa File: 505f44a6-7c87-3dda-9cc5-9238b86db84d.roa (raw, json) Hash identifier: VAol5eOJSAyiR0W+qmoH2BQDF8w3S3DEU1RG8JqpUZE= Subject key identifier: 1B:1F:04:00:C4:38:6C:6C:26:CB:34:1C:FB:03:63:C2:DE:07:CC:AE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686997F7EC709A060C58D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 36625 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:99:7f:7e:c7:09:a0:60:c5:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=669bc7a4-1502-4863-8eb7-7537e15bfd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:4b:42:73:fe:f8:f3:00:30:c2:a6:9d:34:34: 0d:6d:96:86:18:2a:2d:03:76:64:b8:26:9b:12:1c: ea:e3:3c:ec:ed:2b:89:ac:d1:f3:19:47:a3:cb:b8: a0:db:94:97:f7:81:08:9c:34:31:f5:06:85:76:1d: 31:c1:d1:21:29:b4:fc:be:2b:6a:e9:2a:cb:32:0f: fa:90:e2:6e:4d:7b:e2:92:a4:e4:d9:9c:92:f9:69: cd:ea:46:45:9c:6f:c4:60:b1:d1:e9:05:f6:d0:32: 1e:80:52:86:c1:d8:a1:31:2b:76:93:36:c0:29:b7: 5c:7a:c4:19:a8:d4:25:83:df:8e:0d:4b:f2:97:9a: 78:36:ac:c0:ec:fe:60:8f:cf:45:eb:45:4a:06:c9: 37:62:33:73:1c:f1:dc:66:be:c3:51:05:20:25:b3: 79:da:b5:c6:51:09:37:69:5a:42:6e:d9:17:f7:29: 98:f8:4a:f5:c1:7e:04:c4:c4:ac:61:e7:3f:af:78: ec:29:eb:18:71:57:90:7a:9b:ab:f1:de:56:ab:a5: 88:99:e9:a7:7c:a0:42:ce:87:9d:62:4b:da:8a:93: 14:b6:74:1f:f2:2f:c2:20:18:4e:84:ea:68:5f:4b: e4:dd:22:76:53:a9:66:63:d4:64:82:fb:62:7a:ff: dd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1F:04:00:C4:38:6C:6C:26:CB:34:1C:FB:03:63:C2:DE:07:CC:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:3e:e0:c2:78:c5:f6:2d:40:e4:08:d8:5f:0c:7f:cd:98:8d: cd:a0:a2:08:21:40:1f:ce:af:60:fa:1d:90:0b:19:76:e1:4c: bc:c0:0b:23:4f:de:46:05:de:4c:27:6a:65:a8:48:37:6e:66: 4e:1e:79:8b:8c:df:59:4a:a6:a0:e1:f2:8f:72:14:f0:cf:0b: a8:20:ba:c4:dc:e1:27:23:2e:4b:b0:c2:a0:fd:a6:e7:ea:5c: 2b:e6:97:33:fe:51:bd:a5:5d:c9:86:57:7f:8c:e6:6e:84:94: 86:ca:6a:e2:f8:51:e3:b7:5a:f7:db:fa:33:d7:15:84:68:57: 7b:7e:45:b6:d0:0c:51:5f:6f:25:f0:eb:ed:88:9f:bc:22:29: cb:b6:73:04:b9:75:64:4a:b9:ab:91:c9:ab:69:50:28:4f:7b: 8c:b9:7e:9f:29:bf:be:b2:17:19:ec:09:8a:f4:dd:74:a5:12: 74:9b:eb:8c:d5:2e:a7:91:d3:75:c6:59:0e:a9:53:23:18:f3: 65:e0:00:ce:22:33:3b:af:bb:40:fb:6b:76:85:85:0c:2f:a3: 65:4a:02:99:34:2b:56:e4:b1:44:6b:20:8a:bd:3c:09:57:4d: 50:4c:29:54:49:7e:f1:cb:ab:32:43:e4:2f:2c:fe:fa:21:24: 04:58:09:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hpl/fscJoGDFjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NjY5YmM3YTQtMTUwMi00ODYzLThlYjctNzUzN2UxNWJmZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0tCc/748wAwwqadNDQNbZaGGCotA3ZkuCab Ehzq4zzs7SuJrNHzGUejy7ig25SX94EInDQx9QaFdh0xwdEhKbT8vitq6SrLMg/6 kOJuTXvikqTk2ZyS+WnN6kZFnG/EYLHR6QX20DIegFKGwdihMSt2kzbAKbdcesQZ qNQlg9+ODUvyl5p4NqzA7P5gj89F60VKBsk3YjNzHPHcZr7DUQUgJbN52rXGUQk3 aVpCbtkX9ymY+Er1wX4ExMSsYec/r3jsKesYcVeQepur8d5Wq6WImemnfKBCzoed YkvaipMUtnQf8i/CIBhOhOpoX0vk3SJ2U6lmY9Rkgvtiev/dhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBsfBADEOGxsJss0HPsDY8LeB8yuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTA1ZjQ0YTYtN2M4Ny0z ZGRhLTljYzUtOTIzOGI4NmRiODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0+4MJ4xfYtQOQI2F8Mf82Yjc2gogghQB/Or2D6HZALGXbhTLzA CyNP3kYF3kwnamWoSDduZk4eeYuM31lKpqDh8o9yFPDPC6ggusTc4ScjLkuwwqD9 pufqXCvmlzP+Ub2lXcmGV3+M5m6ElIbKauL4UeO3Wvfb+jPXFYRoV3t+RbbQDFFf byXw6+2In7wiKcu2cwS5dWRKuauRyatpUChPe4y5fp8pv76yFxnsCYr03XSlEnSb 64zVLqeR03XGWQ6pUyMY82XgAM4iMzuvu0D7a3aFhQwvo2VKApk0K1bksURrIIq9 PAlXTVBMKVRJfvHLqzJD5C8s/vohJARYCbk= -----END CERTIFICATE-----Generated at Wed Sep 10 20:43:22 2025 by rpki-client