$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/639a0a1a-aca1-3f3b-9c17-9a7d23c24ba2.roa File: 639a0a1a-aca1-3f3b-9c17-9a7d23c24ba2.roa (raw, json) Hash identifier: GwCn8heUhPk7FekK+j5IJQN2BRGsIoJu97zqUfrQeGg= Subject key identifier: 20:54:26:60:49:1A:42:F3:72:EE:24:A3:34:7D:C4:EE:83:AD:0A:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686A72F0FFED9599666C9A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/639a0a1a-aca1-3f3b-9c17-9a7d23c24ba2.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396545 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:a7:2f:0f:fe:d9:59:96:66:c9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=b834cd9a-b0e0-415e-b25d-c6f5bb067196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:f1:a7:a5:e0:f0:90:62:1d:3b:4a:8f:32: 7e:b7:f2:3c:14:41:fc:1f:b8:55:ff:54:1f:96:60: 37:10:7c:12:31:5a:1a:e4:1b:29:ca:67:0a:1f:44: 0c:f3:38:1b:cc:b0:f6:a4:0b:07:7a:7a:39:95:14: d4:87:3c:43:a2:18:e7:d0:93:df:9a:3c:69:43:0d: 20:a6:48:17:76:4c:4c:b5:a9:ea:e7:4c:8a:a3:36: c9:d1:aa:a6:d4:81:6e:04:d3:6c:6c:19:86:e8:4d: 69:c9:9a:04:1a:ab:bf:97:1a:a8:a4:64:1c:39:1a: a3:7c:d2:fe:94:ad:a0:86:f2:76:18:2a:1b:13:1e: f0:48:0a:b5:ef:f8:bc:79:d1:4f:ba:5b:4e:39:71: bd:35:6e:cb:39:aa:2c:2f:3f:40:64:e5:32:c4:9b: 56:b2:1a:d9:53:c2:28:b1:4e:c9:42:b3:bc:fa:e5: 4a:d7:0e:ba:dc:4b:5c:7b:12:f1:2f:eb:e6:7b:6f: cf:d3:20:0f:d6:75:1a:21:5c:3c:b8:bd:45:a5:32: 17:eb:3c:02:b4:a0:78:63:f8:38:56:9e:82:6e:52: 11:ec:d8:da:1c:43:ad:4d:4a:a0:28:f4:0f:c6:a7: ed:6f:40:f1:d2:25:84:0b:36:6b:41:ac:e3:b1:a3: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:54:26:60:49:1A:42:F3:72:EE:24:A3:34:7D:C4:EE:83:AD:0A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/639a0a1a-aca1-3f3b-9c17-9a7d23c24ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:94:47:b7:eb:0a:53:7a:dd:a1:5f:5c:4a:19:77:0a:c3:64: 52:80:bf:4c:7c:67:fb:67:dc:dd:72:6c:88:46:ea:4c:6b:12: 1c:0f:fe:e2:f9:37:a7:be:e6:dc:43:c4:32:c9:3d:62:f3:0d: c2:a1:60:fc:7e:6d:0c:8d:16:9e:0e:77:1f:c8:af:a2:74:7f: 57:95:5e:94:e6:7c:02:10:40:09:33:b9:5f:48:d9:24:16:ac: 7e:59:7e:7a:a7:6a:b7:da:68:7c:30:0f:c9:44:91:d6:f1:fb: af:e3:f2:71:ad:71:e4:ec:ca:f8:d0:3f:63:68:1e:1c:cb:7f: 0e:e8:ad:a6:b3:a8:73:48:f1:3b:b5:72:72:4e:4f:e5:6e:26: d1:1c:39:e4:64:6e:fa:29:cc:2f:b4:8f:32:36:51:72:96:47: ce:09:5d:11:75:84:f1:5c:e6:61:6d:1d:4d:9b:64:27:a7:15: 84:0b:02:de:fe:82:2c:6e:5b:48:18:e2:64:b6:25:c2:cd:74: f7:17:70:0d:19:16:31:ec:a8:ce:9d:a7:b9:aa:fd:30:17:9d: 2b:4b:83:3b:eb:90:9b:5c:69:5e:93:ef:74:f3:63:a6:1f:0c: f1:d7:a8:f8:cf:79:42:a8:c8:55:75:85:b7:d1:87:ed:80:68: e7:18:d4:91 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hqcvD/7ZWZZmyaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YjgzNGNkOWEtYjBlMC00MTVlLWIyNWQtYzZmNWJiMDY3MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyR/xp6Xg8JBiHTtKjzJ+t/I8FEH8H7hV/1Qf lmA3EHwSMVoa5BspymcKH0QM8zgbzLD2pAsHeno5lRTUhzxDohjn0JPfmjxpQw0g pkgXdkxMtanq50yKozbJ0aqm1IFuBNNsbBmG6E1pyZoEGqu/lxqopGQcORqjfNL+ lK2ghvJ2GCobEx7wSAq17/i8edFPultOOXG9NW7LOaosLz9AZOUyxJtWshrZU8Io sU7JQrO8+uVK1w663EtcexLxL+vme2/P0yAP1nUaIVw8uL1FpTIX6zwCtKB4Y/g4 Vp6CblIR7NjaHEOtTUqgKPQPxqftb0Dx0iWECzZrQazjsaPCawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBUJmBJGkLzcu4kozR9xO6DrQpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjM5YTBhMWEtYWNhMS0z ZjNiLTljMTctOWE3ZDIzYzI0YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABCUR7frClN63aFfXEoZdwrDZFKAv0x8Z/tn3N1ybIhG6kxrEhwP /uL5N6e+5txDxDLJPWLzDcKhYPx+bQyNFp4Odx/Ir6J0f1eVXpTmfAIQQAkzuV9I 2SQWrH5ZfnqnarfaaHwwD8lEkdbx+6/j8nGtceTsyvjQP2NoHhzLfw7oraazqHNI 8Tu1cnJOT+VuJtEcOeRkbvopzC+0jzI2UXKWR84JXRF1hPFc5mFtHU2bZCenFYQL At7+gixuW0gY4mS2JcLNdPcXcA0ZFjHsqM6dp7mq/TAXnStLgzvrkJtcaV6T73Tz Y6YfDPHXqPjPeUKoyFV1hbfRh+2AaOcY1JE= -----END CERTIFICATE-----Generated at Wed Sep 10 20:49:24 2025 by rpki-client