$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbbe8f97-c7eb-373f-88e0-0fed86111b1e.roa File: bbbe8f97-c7eb-373f-88e0-0fed86111b1e.roa (raw, json) Hash identifier: KkCtwlbxf79KZRyaaxAkHyVPxw+ai+fEEshGdMiJBJE= Subject key identifier: 31:31:C2:08:C0:0D:F8:6B:C7:42:37:A6:85:40:EC:10:EB:D7:29:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ABBE63C6D134CF28FFA2CFBF0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbbe8f97-c7eb-373f-88e0-0fed86111b1e.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 396546 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:3c:6d:13:4c:f2:8f:fa:2c:fb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=5ec92248-3f53-48c6-941b-b9a9c5b550df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:ec:38:02:54:81:ea:5a:20:d3:05:b2:ae: 37:0f:a0:be:27:7e:2d:32:ea:75:f1:04:9b:81:30: 4b:c8:2f:f0:4a:8e:74:19:da:3a:bc:53:cb:6f:18: 97:14:83:c0:cb:a8:97:67:a8:64:f5:fd:44:03:87: 41:67:ad:49:2c:22:62:69:13:04:52:5a:f6:13:5e: 02:95:b3:ef:86:3e:ac:dd:99:da:35:d4:a4:06:08: 7e:b6:4e:71:f1:d1:48:0c:09:52:fd:db:b1:90:25: 31:59:96:ac:9d:ce:d5:5f:9a:88:be:41:8f:c9:ab: 87:ea:ec:32:c5:1e:e9:37:7d:75:22:71:f5:98:41: f0:26:da:f1:58:38:c8:6f:aa:80:13:49:d8:ef:6d: ab:4a:f6:fc:ec:38:09:73:7f:49:d3:75:97:94:1e: 45:5f:a2:88:13:db:aa:ca:82:d1:eb:69:a0:06:d6: ee:21:71:61:da:53:5f:b3:36:ba:f4:db:8e:87:a9: 5a:aa:6a:5f:3a:c3:d7:7b:48:9f:63:6d:53:4e:62: 22:16:2f:1e:a5:b7:dc:a5:ba:82:72:72:3b:de:1c: fa:df:de:89:ff:3a:8c:43:7a:a1:1f:e6:bc:c4:ab: 96:d1:a7:15:6e:cd:b3:cd:6d:73:93:18:7e:29:a9: eb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:31:C2:08:C0:0D:F8:6B:C7:42:37:A6:85:40:EC:10:EB:D7:29:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbbe8f97-c7eb-373f-88e0-0fed86111b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:24:ee:cf:86:5e:5b:59:17:c7:15:05:19:78:31:88:66:20: b6:b5:6d:bf:d8:23:f1:1c:0d:0a:bb:71:6e:b5:66:01:7d:8a: 60:b5:52:99:87:20:3a:25:d3:4f:76:2b:0c:52:83:5a:f1:5f: dc:6e:fd:64:67:fe:64:09:21:9c:6d:2a:94:b2:4a:36:87:71: 06:f3:f0:f3:98:ac:a9:59:1b:fe:cb:d0:24:2a:23:68:9f:ad: dc:ba:6c:d7:82:79:04:7f:b8:f1:0e:bc:84:b3:46:75:68:06: e1:44:06:5c:03:5e:c5:c4:64:65:2a:ae:72:eb:a0:00:cd:b9: 48:d2:61:01:49:4f:a8:2e:fb:53:2c:c4:cc:4b:91:b8:51:5e: e2:c0:c9:6f:6f:2b:2b:e7:3e:18:cb:fb:8f:c7:51:89:41:ef: 7e:6f:6a:b0:37:71:11:59:5e:a0:b0:39:25:a2:75:2d:49:23: 28:7f:a9:65:5d:d7:64:4e:66:e4:80:21:11:f5:15:4d:34:db: 99:b2:1b:55:48:a2:6a:be:c5:8b:28:3e:a2:12:9d:97:7c:e1: cf:58:3d:3d:49:03:e5:a4:2a:f2:0d:85:d4:84:20:21:2a:f9: a8:92:23:ad:ca:03:46:42:e8:c1:74:52:6a:18:48:c0:ff:5d: d3:10:8d:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq75jxtE0zyj/os+/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk NWVjOTIyNDgtM2Y1My00OGM2LTk0MWItYjlhOWM1YjU1MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEHsOAJUgepaINMFsq43D6C+J34tMup18QSb gTBLyC/wSo50Gdo6vFPLbxiXFIPAy6iXZ6hk9f1EA4dBZ61JLCJiaRMEUlr2E14C lbPvhj6s3ZnaNdSkBgh+tk5x8dFIDAlS/duxkCUxWZasnc7VX5qIvkGPyauH6uwy xR7pN311InH1mEHwJtrxWDjIb6qAE0nY722rSvb87DgJc39J03WXlB5FX6KIE9uq yoLR62mgBtbuIXFh2lNfsza69NuOh6laqmpfOsPXe0ifY21TTmIiFi8epbfcpbqC cnI73hz6396J/zqMQ3qhH+a8xKuW0acVbs2zzW1zkxh+Kanr4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDExwgjADfhrx0I3poVA7BDr1ylYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJiZThmOTctYzdlYi0z NzNmLTg4ZTAtMGZlZDg2MTExYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABQk7s+GXltZF8cVBRl4MYhmILa1bb/YI/EcDQq7cW61ZgF9imC1 UpmHIDol0092KwxSg1rxX9xu/WRn/mQJIZxtKpSySjaHcQbz8POYrKlZG/7L0CQq I2ifrdy6bNeCeQR/uPEOvISzRnVoBuFEBlwDXsXEZGUqrnLroADNuUjSYQFJT6gu +1MsxMxLkbhRXuLAyW9vKyvnPhjL+4/HUYlB735varA3cRFZXqCwOSWidS1JIyh/ qWVd12ROZuSAIRH1FU0025myG1VIomq+xYsoPqISnZd84c9YPT1JA+WkKvINhdSE ICEq+aiSI63KA0ZC6MF0UmoYSMD/XdMQjUw= -----END CERTIFICATE-----Generated at Wed Sep 10 20:40:32 2025 by rpki-client