$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d4597a-c2a1-36e9-b1f8-40e9864da2a3.roa File: b5d4597a-c2a1-36e9-b1f8-40e9864da2a3.roa (raw, json) Hash identifier: DJqh6RNEryyTubdw4scYZPD/0xCdMOJ1jSEhkzdPkAA= Subject key identifier: 19:1F:92:86:B5:27:8A:80:19:66:D2:70:CF:39:C6:0A:8B:A6:21:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF6869E85E79071D895D72100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d4597a-c2a1-36e9-b1f8-40e9864da2a3.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 397197 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:9e:85:e7:90:71:d8:95:d7:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=cdd3d6ee-156f-4f3c-bf3c-daeeed102d61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4c:9a:86:e7:4d:a5:be:52:16:a0:37:6b:b7: 5c:e5:37:ec:0b:07:b7:92:61:8c:e7:4c:c3:ce:88: 85:c4:3a:3d:70:a2:be:6b:b9:bb:4f:ef:ce:3a:1a: 6a:7c:a4:bb:46:49:cd:51:f4:3b:11:c7:20:bb:9d: 54:4c:3d:98:61:98:8e:00:3d:f8:b8:5d:48:8c:3b: 7f:2a:d2:fb:4a:c7:02:5a:bc:5d:fa:5f:9b:b0:64: 9f:7f:3c:72:1d:ce:ae:e5:73:42:e6:2c:92:3d:c4: 3b:07:f1:8b:51:79:10:f0:a7:b7:29:56:8d:0c:21: 75:e3:57:d4:82:7c:9c:01:9f:cb:d7:15:42:ac:da: 53:6d:ed:8f:6b:09:3b:5b:19:db:f9:e2:7a:f5:ff: d9:0c:5f:70:ae:11:b9:23:17:49:b9:5b:11:5f:4b: f0:d5:6d:f5:2e:15:63:68:37:15:44:ad:34:31:1a: c9:69:af:54:b7:cd:78:56:83:b6:f4:6b:80:60:9d: c6:62:ea:25:c3:79:87:7b:e8:a3:72:09:18:89:3f: 1c:62:af:a6:e6:c5:9a:26:bb:9d:7b:bd:29:26:15: e6:16:63:d7:3c:d0:80:c5:48:44:8f:0d:4e:b1:84: 9a:94:b6:de:b0:31:b0:fe:33:65:17:ad:35:23:f7: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1F:92:86:B5:27:8A:80:19:66:D2:70:CF:39:C6:0A:8B:A6:21:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d4597a-c2a1-36e9-b1f8-40e9864da2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:76:b9:ce:3d:91:d0:4f:50:13:24:60:01:28:bc:89:a8:11: 86:7d:7a:1f:7d:29:34:b9:84:40:64:04:ab:b8:b1:a6:72:c3: 41:5e:fd:a3:26:0d:fe:a6:f1:17:d7:44:8e:59:09:5a:0f:87: 32:72:c5:f1:4f:e7:4b:05:ee:e7:e9:c9:d3:13:de:5b:83:e1: bf:e8:e6:66:81:dd:d4:73:7b:30:0f:fc:ab:23:5b:42:87:be: 14:a1:a5:87:c0:66:8e:c9:9e:60:3c:9f:e7:6a:c4:25:30:b5: 6b:3b:ba:83:10:f1:96:9f:e6:dd:3b:17:d1:22:c7:9a:f8:86: 2c:ca:e4:09:61:c0:d4:19:07:98:97:f2:1e:e7:7f:a0:bb:cb: 4d:29:de:16:a5:53:f0:f2:e0:88:2a:a4:e4:0f:3c:07:f6:ff: 99:3d:5d:14:9b:75:0f:ca:ae:de:4e:8c:91:ea:b4:58:07:5b: 95:8c:f6:a1:b6:18:dc:49:26:2b:e8:17:98:28:aa:71:aa:98: 2b:e7:be:63:78:67:c4:4d:f4:97:04:98:c5:84:c1:4b:6e:c4: 91:a6:f5:7d:3b:9d:3f:d4:cc:75:a9:ed:10:94:1f:14:01:91: be:92:21:b4:5f:98:ad:41:c2:11:7f:be:33:db:e0:eb:c9:6e: 5e:83:42:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hp6F55Bx2JXXIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk Y2RkM2Q2ZWUtMTU2Zi00ZjNjLWJmM2MtZGFlZWVkMTAyZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkyahudNpb5SFqA3a7dc5TfsCwe3kmGM50zD zoiFxDo9cKK+a7m7T+/OOhpqfKS7RknNUfQ7Eccgu51UTD2YYZiOAD34uF1IjDt/ KtL7SscCWrxd+l+bsGSffzxyHc6u5XNC5iySPcQ7B/GLUXkQ8Ke3KVaNDCF141fU gnycAZ/L1xVCrNpTbe2Pawk7Wxnb+eJ69f/ZDF9wrhG5IxdJuVsRX0vw1W31LhVj aDcVRK00MRrJaa9Ut814VoO29GuAYJ3GYuolw3mHe+ijcgkYiT8cYq+m5sWaJrud e70pJhXmFmPXPNCAxUhEjw1OsYSalLbesDGw/jNlF601I/c2QwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBkfkoa1J4qAGWbScM85xgqLpiEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjVkNDU5N2EtYzJhMS0z NmU5LWIxZjgtNDBlOTg2NGRhMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIl2uc49kdBPUBMkYAEovImoEYZ9eh99KTS5hEBkBKu4saZyw0Fe /aMmDf6m8RfXRI5ZCVoPhzJyxfFP50sF7ufpydMT3luD4b/o5maB3dRzezAP/Ksj W0KHvhShpYfAZo7JnmA8n+dqxCUwtWs7uoMQ8Zaf5t07F9Eix5r4hizK5AlhwNQZ B5iX8h7nf6C7y00p3halU/Dy4IgqpOQPPAf2/5k9XRSbdQ/Krt5OjJHqtFgHW5WM 9qG2GNxJJivoF5goqnGqmCvnvmN4Z8RN9JcEmMWEwUtuxJGm9X07nT/UzHWp7RCU HxQBkb6SIbRfmK1BwhF/vjPb4OvJbl6DQiE= -----END CERTIFICATE-----Generated at Wed Sep 10 17:47:45 2025 by rpki-client