$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d735525e-f25b-3177-8a61-3e6c48b2db5d.roa File: d735525e-f25b-3177-8a61-3e6c48b2db5d.roa (raw, json) Hash identifier: 1/z6/wJDG+ozxstZpNAGdaeZTMny5uh6t4mEqQh0vm4= Subject key identifier: 64:AE:51:DA:6C:67:48:6B:A5:FD:23:CD:56:FE:82:14:21:2C:4F:D5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF68699FB1458614A01B501C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d735525e-f25b-3177-8a61-3e6c48b2db5d.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396580 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:99:fb:14:58:61:4a:01:b5:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=e5a1ca6c-3877-4079-9234-86258c2b0ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d1:f8:a3:79:b7:58:45:3a:03:e0:3b:c1:bf: 5b:b4:ff:42:bd:c2:8b:d0:b2:06:53:c3:0e:ee:4f: 5f:84:bd:c8:4a:c1:ab:a8:4a:5a:5d:ff:58:a7:9e: d2:d0:fc:5e:67:8b:8a:22:cd:a0:64:a8:ca:2a:a5: 66:43:48:27:00:55:96:30:f0:6e:c2:a7:14:69:27: 3f:08:61:c7:01:0f:21:f7:35:4b:6c:96:72:77:92: 38:b7:aa:e4:57:16:bd:9c:54:3d:cb:c1:48:90:a5: 75:f6:15:59:f8:27:1e:a0:be:36:b7:97:ab:eb:f8: 78:79:a2:5f:0d:d7:d9:1b:0e:e3:90:26:6d:a2:0e: 1f:74:41:82:b0:5c:a9:18:82:67:32:cb:0a:2e:2d: 5d:1a:5f:89:89:71:62:1e:7d:fa:d0:66:3c:69:de: 73:db:b6:7f:e4:ae:a7:bf:7d:99:19:b7:5b:5a:12: 05:d1:e8:a6:0e:c5:c5:4d:39:e9:21:47:e9:e5:76: 86:fb:16:3c:63:08:75:f2:74:a3:93:15:8f:1c:eb: 1d:38:31:cd:61:72:d6:76:e5:a7:d4:e1:a4:41:c1: 00:8e:3f:55:3e:09:79:97:d6:fb:f5:4a:9a:3c:c7: 75:32:4c:32:e0:74:64:fc:a4:05:ef:b6:fd:df:9d: 7b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AE:51:DA:6C:67:48:6B:A5:FD:23:CD:56:FE:82:14:21:2C:4F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d735525e-f25b-3177-8a61-3e6c48b2db5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:8e:f7:74:78:55:47:60:b9:92:0a:93:10:81:c9:aa:c1:a0: 94:52:a2:d3:86:92:8a:ac:32:31:50:eb:31:bb:cf:2f:23:3b: 00:e3:04:58:d7:5d:7f:5b:1a:f5:02:39:bf:65:e7:ce:9d:9a: a1:d7:b2:77:43:ed:c2:55:f1:10:b9:fc:e7:55:dc:46:a8:b1: f1:f1:00:4c:3b:64:5e:ed:07:86:49:62:52:b6:b6:00:47:85: fe:cb:b7:11:c9:68:6b:86:5c:10:86:f9:98:52:f8:ea:aa:b1: ca:5e:2e:ba:06:46:fa:73:1a:6b:c2:01:51:7a:44:78:d9:81: ee:3f:e6:4f:95:40:1e:11:d8:af:5d:bd:bc:25:9c:41:3a:2a: a3:0f:3c:f4:9f:fa:6b:1e:06:ef:30:cc:c4:fe:ed:0c:82:67: f0:81:53:53:36:32:75:05:8e:e8:65:a6:2a:a2:0b:52:61:03: 37:6e:33:d1:6b:81:c4:e8:24:db:31:7c:29:0b:29:34:7b:9b: 83:00:c3:27:34:04:c1:1a:6f:34:c7:4d:15:6c:6c:70:b7:32: c6:c6:f1:37:02:11:0a:e8:aa:87:5d:be:d1:5e:b2:a1:5d:b6: e4:0c:54:81:43:b2:a3:11:a3:e5:a4:d5:4a:84:67:e0:ab:4e: a8:5d:31:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hpn7FFhhSgG1AcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZTVhMWNhNmMtMzg3Ny00MDc5LTkyMzQtODYyNThjMmIwZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtH4o3m3WEU6A+A7wb9btP9CvcKL0LIGU8MO 7k9fhL3ISsGrqEpaXf9Yp57S0PxeZ4uKIs2gZKjKKqVmQ0gnAFWWMPBuwqcUaSc/ CGHHAQ8h9zVLbJZyd5I4t6rkVxa9nFQ9y8FIkKV19hVZ+CceoL42t5er6/h4eaJf DdfZGw7jkCZtog4fdEGCsFypGIJnMssKLi1dGl+JiXFiHn360GY8ad5z27Z/5K6n v32ZGbdbWhIF0eimDsXFTTnpIUfp5XaG+xY8Ywh18nSjkxWPHOsdODHNYXLWduWn 1OGkQcEAjj9VPgl5l9b79UqaPMd1Mkwy4HRk/KQF77b93517twIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGSuUdpsZ0hrpf0jzVb+ghQhLE/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDczNTUyNWUtZjI1Yi0z MTc3LThhNjEtM2U2YzQ4YjJkYjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALuO93R4VUdguZIKkxCByarBoJRSotOGkoqsMjFQ6zG7zy8jOwDj BFjXXX9bGvUCOb9l586dmqHXsndD7cJV8RC5/OdV3EaosfHxAEw7ZF7tB4ZJYlK2 tgBHhf7LtxHJaGuGXBCG+ZhS+OqqscpeLroGRvpzGmvCAVF6RHjZge4/5k+VQB4R 2K9dvbwlnEE6KqMPPPSf+mseBu8wzMT+7QyCZ/CBU1M2MnUFjuhlpiqiC1JhAzdu M9FrgcToJNsxfCkLKTR7m4MAwyc0BMEabzTHTRVsbHC3MsbG8TcCEQroqoddvtFe sqFdtuQMVIFDsqMRo+Wk1UqEZ+CrTqhdMUs= -----END CERTIFICATE-----Generated at Wed Sep 10 17:54:30 2025 by rpki-client