$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0c6ec8a-7aeb-3049-b0c9-9d268dd33b42.roa File: a0c6ec8a-7aeb-3049-b0c9-9d268dd33b42.roa (raw, json) Hash identifier: ijLgQiy+iKqbdTVwx1RUQI5y+N7zvSCjSI4Bpj2amlg= Subject key identifier: 8C:E9:C7:C0:60:17:1B:84:D8:DD:BD:17:80:54:6B:92:28:72:D6:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF6869AA20AB08FE62A57CBC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0c6ec8a-7aeb-3049-b0c9-9d268dd33b42.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396585 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:9a:a2:0a:b0:8f:e6:2a:57:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=f59f78b0-26c1-43f8-8fa9-673b17e5ca75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:cf:a8:0a:97:0b:df:ad:7b:ae:1c:7e:9b: f1:21:db:2d:b9:f3:30:d5:55:bf:d6:22:7b:7b:ec: 21:05:e8:69:98:ba:8e:c0:3c:ad:01:a0:b1:84:6d: a0:95:8d:7f:9d:1a:ce:72:95:5d:d1:02:25:c1:3f: a4:22:e8:a2:94:72:58:d7:70:bd:d5:79:a9:14:cd: 96:1f:39:28:c6:b3:5b:b8:76:48:d2:21:82:81:e7: 8b:d2:31:c1:ef:aa:80:8c:7b:79:28:d1:f1:47:50: 5d:c5:eb:e3:82:a6:55:3b:a3:2b:93:03:d9:c1:cc: 13:96:4a:3a:4f:8d:b2:fe:7f:d8:58:2e:4d:a4:14: e6:e1:93:cb:18:d0:40:58:7d:e7:3d:e5:ea:47:de: a4:62:f6:3b:fc:00:d4:39:60:fc:5d:70:9e:1e:d8: e5:6f:6b:ca:23:af:6a:6c:95:27:61:e7:9c:49:82: e9:f9:80:8c:01:2a:c0:02:6b:1a:88:9b:c5:33:94: 64:2c:77:bd:31:de:66:54:53:77:0c:cc:76:2d:41: 35:e1:05:5e:c5:a9:a6:df:38:56:8b:25:a3:a9:5e: 41:b2:1b:73:cf:b9:bb:0a:2e:6d:04:dc:ce:9e:f4: dd:e4:65:6c:82:7d:0c:00:49:6a:67:f5:14:1b:c0: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E9:C7:C0:60:17:1B:84:D8:DD:BD:17:80:54:6B:92:28:72:D6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0c6ec8a-7aeb-3049-b0c9-9d268dd33b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:42:06:bd:d0:80:76:23:ca:64:06:3d:b6:41:f9:2e:9b:fe: 09:22:9e:57:7d:a6:62:db:db:ef:5b:e1:73:b5:f3:e3:16:de: 21:08:f9:cd:90:1e:a3:11:ab:8a:88:2d:0e:ab:7e:1b:62:f7: ca:ab:a5:2d:36:8a:37:2d:b6:dd:12:a2:c7:48:74:20:d5:e8: 18:5c:b4:e3:8c:63:6f:38:a8:50:7e:74:02:67:a6:d2:18:2d: b1:c4:ac:ca:6e:32:b7:ac:7b:91:0b:f1:44:19:d5:43:07:82: 2a:ba:2d:8b:ad:af:e9:6e:b4:d0:8d:c8:c8:c5:8a:19:c6:9b: 1a:db:06:89:a2:72:6c:9e:5b:1a:b6:18:85:d0:f1:a4:59:f7: bb:7f:d4:e2:18:e9:5e:8b:38:95:fb:16:5f:a4:2e:4d:2e:cb: d1:3c:27:e6:ca:de:f0:0a:88:b1:0f:a1:9c:5e:e8:df:64:04: b4:2d:ae:46:08:28:02:6c:07:38:15:6b:4f:4c:e0:5d:ac:32: 37:97:9c:88:c5:de:e6:e0:51:b2:da:7b:fe:29:b8:39:92:08: aa:2a:24:38:64:6b:dc:87:3e:98:84:9d:7e:18:08:43:bc:d6: 72:ed:8a:f3:2a:ca:cf:02:84:dd:0c:97:75:6d:ad:db:f8:1a: 99:d1:e4:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hpqiCrCP5ipXy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZjU5Zjc4YjAtMjZjMS00M2Y4LThmYTktNjczYjE3ZTVjYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ/PqAqXC9+te64cfpvxIdstufMw1VW/1iJ7 e+whBehpmLqOwDytAaCxhG2glY1/nRrOcpVd0QIlwT+kIuiilHJY13C91XmpFM2W HzkoxrNbuHZI0iGCgeeL0jHB76qAjHt5KNHxR1BdxevjgqZVO6MrkwPZwcwTlko6 T42y/n/YWC5NpBTm4ZPLGNBAWH3nPeXqR96kYvY7/ADUOWD8XXCeHtjlb2vKI69q bJUnYeecSYLp+YCMASrAAmsaiJvFM5RkLHe9Md5mVFN3DMx2LUE14QVexamm3zhW iyWjqV5Bshtzz7m7Ci5tBNzOnvTd5GVsgn0MAElqZ/UUG8C8kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIzpx8BgFxuE2N29F4BUa5IoctZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTBjNmVjOGEtN2FlYi0z MDQ5LWIwYzktOWQyNjhkZDMzYjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKJCBr3QgHYjymQGPbZB+S6b/gkinld9pmLb2+9b4XO18+MW3iEI +c2QHqMRq4qILQ6rfhti98qrpS02ijcttt0SosdIdCDV6BhctOOMY284qFB+dAJn ptIYLbHErMpuMrese5EL8UQZ1UMHgiq6LYutr+lutNCNyMjFihnGmxrbBomicmye Wxq2GIXQ8aRZ97t/1OIY6V6LOJX7Fl+kLk0uy9E8J+bK3vAKiLEPoZxe6N9kBLQt rkYIKAJsBzgVa09M4F2sMjeXnIjF3ubgUbLae/4puDmSCKoqJDhka9yHPpiEnX4Y CEO81nLtivMqys8ChN0Ml3Vtrdv4GpnR5L4= -----END CERTIFICATE-----Generated at Wed Sep 10 20:42:24 2025 by rpki-client