$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c530c06b-f7aa-309f-8ae6-4a3ae65ece6e.roa File: c530c06b-f7aa-309f-8ae6-4a3ae65ece6e.roa (raw, json) Hash identifier: MkvG8aDtfdBGMS2Mqf/TzYPvoEqW5XIoohLLDZ4byhM= Subject key identifier: 2A:C3:03:21:B2:C7:12:A1:6A:1E:7F:EF:0A:78:F1:07:85:D1:33:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686A709AA4DE838D3736DC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c530c06b-f7aa-309f-8ae6-4a3ae65ece6e.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396547 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:a7:09:aa:4d:e8:38:d3:73:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=ae35822d-560b-42bd-b757-a25300d7f716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fb:f2:01:6f:fe:51:df:6a:a7:81:32:25:15: 83:07:a2:81:e2:41:25:3f:92:81:24:6e:1f:3e:a1: 80:f4:2b:81:55:d6:c4:c4:75:e0:68:fb:f4:d3:bf: d8:ed:52:24:fe:c7:a5:df:8d:bd:79:34:47:07:53: 42:b7:9a:3e:f9:0d:7a:ce:85:a8:d7:e5:b1:8b:11: f9:c1:bb:55:ab:17:2f:32:f8:81:94:a3:8e:a5:28: d7:41:38:95:9e:e6:8c:6d:71:97:c5:29:59:70:6a: 6d:ab:8b:e9:f4:41:9e:2c:db:3b:9c:fe:9c:bf:de: f0:35:b9:fd:91:55:bb:fe:cd:0b:4b:4d:99:2b:2a: 57:d6:1c:dd:07:86:9b:b0:fe:65:e1:73:d0:bf:1c: a0:5a:ef:2a:9a:9e:0e:f5:8d:95:e5:77:56:49:f7: 68:4a:8d:71:2f:46:36:fd:02:1a:ba:4c:27:40:92: 54:07:0c:38:51:6d:d8:33:aa:a6:90:90:db:ba:e2: 78:9b:36:ed:4e:d1:b9:f5:0f:07:70:0b:df:fe:10: a9:1f:09:f1:ac:b3:91:b6:c5:d9:4e:f6:68:51:9e: 51:b2:a8:0c:3f:a8:c3:a2:64:3a:ba:12:ab:27:c3: a8:66:99:bf:3e:87:60:a8:20:9b:3d:d2:a9:48:d3: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C3:03:21:B2:C7:12:A1:6A:1E:7F:EF:0A:78:F1:07:85:D1:33:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c530c06b-f7aa-309f-8ae6-4a3ae65ece6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:b3:f5:8c:3b:d3:2a:13:34:33:80:be:95:f0:cb:55:e5:9b: d0:d7:ab:76:e8:de:4c:8c:b2:3b:88:3c:4e:cd:56:57:54:a2: 8e:4b:b6:b4:71:5e:80:33:ce:8c:e2:11:f6:09:1e:df:04:b1: d0:3d:48:28:d1:7e:28:90:1e:2f:34:a1:17:67:db:1e:06:2e: 7e:82:c5:6a:62:6c:b8:1f:78:88:06:54:07:1a:6c:f8:fc:91: e5:8d:07:8e:25:40:86:9c:cd:5c:d1:0f:b4:40:b4:db:c3:d9: ea:c5:83:e9:17:9e:c6:a7:8b:d1:b4:b2:71:b2:4d:e2:5e:25: bc:49:b0:5f:12:05:f0:7f:bc:18:29:21:18:bd:01:76:de:c4: 83:2a:58:92:f8:28:c4:db:63:3f:a2:09:20:6e:c4:9f:dc:69: 04:9c:f6:c1:85:db:b1:5b:82:4e:0a:7d:1b:37:ad:4b:6b:01: 6a:a5:83:9a:ed:b1:4a:1c:e9:28:3b:6f:e7:19:55:da:3c:96: a8:f2:f3:a6:51:f7:77:00:65:9c:b5:1c:58:a8:ad:ad:4f:56: 3f:0c:aa:e2:29:ac:89:34:32:c0:89:02:98:98:32:db:5d:13: 61:9a:8a:05:b8:73:37:fd:2f:fa:41:63:55:43:1e:3d:f4:a2: be:b4:3a:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hqcJqk3oONNzbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YWUzNTgyMmQtNTYwYi00MmJkLWI3NTctYTI1MzAwZDdmNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufvyAW/+Ud9qp4EyJRWDB6KB4kElP5KBJG4f PqGA9CuBVdbExHXgaPv007/Y7VIk/sel3429eTRHB1NCt5o++Q16zoWo1+WxixH5 wbtVqxcvMviBlKOOpSjXQTiVnuaMbXGXxSlZcGptq4vp9EGeLNs7nP6cv97wNbn9 kVW7/s0LS02ZKypX1hzdB4absP5l4XPQvxygWu8qmp4O9Y2V5XdWSfdoSo1xL0Y2 /QIaukwnQJJUBww4UW3YM6qmkJDbuuJ4mzbtTtG59Q8HcAvf/hCpHwnxrLORtsXZ TvZoUZ5RsqgMP6jDomQ6uhKrJ8OoZpm/PodgqCCbPdKpSNOQ+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCrDAyGyxxKhah5/7wp48QeF0TOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzUzMGMwNmItZjdhYS0z MDlmLThhZTYtNGEzYWU2NWVjZTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCz9Yw70yoTNDOAvpXwy1Xlm9DXq3bo3kyMsjuIPE7NVldUoo5L trRxXoAzzoziEfYJHt8EsdA9SCjRfiiQHi80oRdn2x4GLn6CxWpibLgfeIgGVAca bPj8keWNB44lQIaczVzRD7RAtNvD2erFg+kXnsani9G0snGyTeJeJbxJsF8SBfB/ vBgpIRi9AXbexIMqWJL4KMTbYz+iCSBuxJ/caQSc9sGF27Fbgk4KfRs3rUtrAWql g5rtsUoc6Sg7b+cZVdo8lqjy86ZR93cAZZy1HFiora1PVj8MquIprIk0MsCJApiY MttdE2GaigW4czf9L/pBY1VDHj30or60OmE= -----END CERTIFICATE-----Generated at Wed Sep 10 17:50:46 2025 by rpki-client