$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88047bb4-7f65-3a01-9d5d-65302e959695.roa File: 88047bb4-7f65-3a01-9d5d-65302e959695.roa (raw, json) Hash identifier: grTFSEqBc9Bodd1j4GBhxXaGNi1z7bZdXk2xYCewS20= Subject key identifier: 51:2A:6C:E5:3D:67:91:9A:41:DB:BD:41:C5:97:CD:07:E7:88:04:C7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF68698E1C0F9BA36BAB6EB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88047bb4-7f65-3a01-9d5d-65302e959695.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396540 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:98:e1:c0:f9:ba:36:ba:b6:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=885429d8-aec2-4144-974c-a987c329bdb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:74:b3:27:88:f9:43:ed:c2:f4:d4:5e:57:d4: e6:16:b3:c6:55:81:bb:2d:88:34:b4:98:61:1e:45: 54:9e:90:ae:c3:39:54:60:6f:d7:a9:32:3d:eb:ae: 61:8b:5c:6a:07:91:00:26:a1:97:e6:0c:d5:f0:4f: 28:04:03:d4:3b:08:9e:6e:d8:05:20:73:2c:c6:e6: 3a:a8:40:b9:34:63:52:f5:4b:07:05:e1:ee:8d:48: 52:26:1d:34:a0:a9:e6:44:7d:a7:21:b0:ef:58:78: 58:a9:91:06:3b:14:8c:e9:a6:7c:01:56:d9:2e:91: a7:b7:0c:79:b0:ac:60:eb:18:64:ae:7e:c0:08:ed: 60:51:5e:74:eb:53:b3:3c:83:bc:9d:b1:ad:a9:47: dd:aa:8b:6d:27:c4:2c:90:0c:45:60:6e:47:aa:44: cd:0a:ee:7d:e3:1d:76:c2:ec:49:11:2b:df:64:81: 42:b0:f9:17:81:af:40:21:ad:0d:c3:7a:2b:ad:f1: 4a:6a:7d:74:e6:2c:f5:81:c1:43:e3:e8:7e:fb:58: 24:48:d7:6c:0d:c6:a2:e5:b7:20:d1:3b:2d:26:e3: ff:ff:11:3f:a0:be:00:f6:e3:f0:d1:75:45:ac:6a: 08:3e:b9:26:6a:bb:43:49:69:f3:95:9a:03:db:dd: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2A:6C:E5:3D:67:91:9A:41:DB:BD:41:C5:97:CD:07:E7:88:04:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88047bb4-7f65-3a01-9d5d-65302e959695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:23:e7:8f:d9:c5:a4:9b:38:2d:1a:40:9b:af:40:22:1d:5b: 43:67:5d:bc:ca:0e:06:2b:86:5e:c6:31:76:0e:9f:48:86:f8: 3e:98:1a:1a:f1:3f:1e:97:c8:fb:b8:12:83:6e:27:00:77:56: d9:f1:49:8d:36:f0:59:73:db:9c:b3:fe:8b:d7:85:97:b6:22: c0:f6:c5:0d:e3:1a:df:fc:96:38:ba:2e:32:8a:f7:8e:35:11: b5:ec:f4:6a:db:ff:4f:63:92:e9:98:8b:64:42:a7:a2:25:0e: da:7d:39:e3:86:e6:5d:ce:d3:57:c7:10:67:2f:7a:83:9d:7e: d9:38:86:51:0f:2a:0e:a6:23:9d:9d:e4:13:97:81:14:32:d0: ab:29:74:b8:c7:7c:45:d5:ec:38:c2:58:73:70:28:f7:24:d9: 9e:03:30:25:2a:6e:13:50:55:50:75:89:97:7e:9d:e0:5b:43: 85:cd:17:27:bd:a8:47:2e:04:8a:10:97:40:2c:f2:17:b2:5b: 90:93:3a:b0:77:3d:ae:e3:73:3e:f5:b4:fa:94:70:7f:2e:45: 28:49:a6:28:a7:dc:63:ab:99:af:17:c3:44:7b:ab:96:f8:97: 6e:3f:21:16:7f:ea:e9:67:29:dc:d0:d0:01:3e:33:36:60:6d: da:0d:ba:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hpjhwPm6Nrq26wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ODg1NDI5ZDgtYWVjMi00MTQ0LTk3NGMtYTk4N2MzMjliZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nSzJ4j5Q+3C9NReV9TmFrPGVYG7LYg0tJhh HkVUnpCuwzlUYG/XqTI9665hi1xqB5EAJqGX5gzV8E8oBAPUOwiebtgFIHMsxuY6 qEC5NGNS9UsHBeHujUhSJh00oKnmRH2nIbDvWHhYqZEGOxSM6aZ8AVbZLpGntwx5 sKxg6xhkrn7ACO1gUV5061OzPIO8nbGtqUfdqottJ8QskAxFYG5HqkTNCu594x12 wuxJESvfZIFCsPkXga9AIa0Nw3orrfFKan105iz1gcFD4+h++1gkSNdsDcai5bcg 0TstJuP//xE/oL4A9uPw0XVFrGoIPrkmartDSWnzlZoD292y8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFEqbOU9Z5GaQdu9QcWXzQfniATHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODgwNDdiYjQtN2Y2NS0z YTAxLTlkNWQtNjUzMDJlOTU5Njk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACIj54/ZxaSbOC0aQJuvQCIdW0NnXbzKDgYrhl7GMXYOn0iG+D6Y GhrxPx6XyPu4EoNuJwB3VtnxSY028Flz25yz/ovXhZe2IsD2xQ3jGt/8lji6LjKK 9441EbXs9Grb/09jkumYi2RCp6IlDtp9OeOG5l3O01fHEGcveoOdftk4hlEPKg6m I52d5BOXgRQy0KspdLjHfEXV7DjCWHNwKPck2Z4DMCUqbhNQVVB1iZd+neBbQ4XN Fye9qEcuBIoQl0As8heyW5CTOrB3Pa7jcz71tPqUcH8uRShJpiin3GOrma8Xw0R7 q5b4l24/IRZ/6ulnKdzQ0AE+MzZgbdoNuo4= -----END CERTIFICATE-----Generated at Wed Sep 10 20:48:44 2025 by rpki-client