$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de2f2792-3ec7-32af-9341-70082b2f2cff.roa File: de2f2792-3ec7-32af-9341-70082b2f2cff.roa (raw, json) Hash identifier: CWuyg3KmXo+SGsimZrCS3KbkgI0M6FVQUNE3l0z/CW0= Subject key identifier: 44:C5:1C:23:B7:28:D2:4B:D7:36:8A:9F:D2:C2:97:E9:16:39:DB:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF68696750BE373B949997400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de2f2792-3ec7-32af-9341-70082b2f2cff.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396614 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:96:75:0b:e3:73:b9:49:99:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=5a1be2a2-b014-46d4-b6af-71614f0aba9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:96:4b:4c:2b:2a:58:35:c4:c8:ae:26:60: 87:0e:1a:f2:54:e2:7d:d2:9b:77:04:97:70:43:9d: 52:0f:82:c4:c1:ea:9d:24:60:ea:c8:cc:24:1c:36: 26:9b:62:f9:cd:b3:5e:1f:5f:11:77:d1:cc:d2:72: e7:88:5f:8c:2c:90:dc:86:ca:66:36:01:5d:ee:b5: 5e:90:79:cc:81:f7:7a:d4:4e:d4:cb:93:11:f8:bb: f8:6b:91:24:e7:56:a6:5c:cf:ad:9f:ae:d9:2e:71: 51:f4:f9:0f:db:f1:43:cc:2e:c7:f7:85:da:f9:0e: 2f:9c:ce:67:20:47:e7:7b:be:47:fb:ca:69:4d:50: a6:70:54:b9:e7:8e:da:90:56:a9:28:6a:ca:62:59: 73:69:62:fc:61:d1:23:63:6c:5f:74:cd:29:30:0a: a7:3d:6f:62:e1:1f:6f:85:7e:6d:a3:1e:a4:c8:8f: af:c3:8b:d8:0c:e5:b7:2b:9e:16:b2:06:1e:42:b2: 58:57:1b:4c:01:d1:46:b4:35:9a:15:3f:1d:ae:21: e8:8d:34:90:dd:cb:6e:94:d7:0a:7d:b8:52:3c:e7: d4:ab:de:fb:6d:db:f5:aa:7e:19:0b:88:53:c9:ad: 29:61:69:9c:24:3b:44:c0:b1:a7:bd:58:84:29:39: ea:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C5:1C:23:B7:28:D2:4B:D7:36:8A:9F:D2:C2:97:E9:16:39:DB:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de2f2792-3ec7-32af-9341-70082b2f2cff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:2e:28:a0:ba:ad:fa:c3:74:d9:3f:00:03:fe:49:a4:49:50: 5a:ce:41:77:61:9b:06:7a:4e:20:93:86:9c:43:8a:9e:fd:77: 92:d1:72:1d:d2:cb:f6:66:16:34:84:39:07:67:d4:5b:f4:bf: 9a:10:45:66:90:a3:a8:12:e7:36:84:21:a8:f9:e1:f4:3a:55: b8:83:66:9e:25:22:cb:ec:4f:c0:54:c3:55:c5:92:13:ef:66: 0c:8d:2b:bb:ef:fb:4e:62:f8:b2:58:a7:f0:68:38:d7:19:76: 55:23:4f:8c:1b:67:7c:68:61:40:68:b8:f3:d0:cb:51:b1:63: 6c:b9:27:10:db:c1:9b:31:8c:3c:04:10:2c:a0:4c:eb:b9:ed: bc:dc:12:a8:49:29:06:78:79:59:11:3e:80:25:e1:da:fc:85: 0d:11:81:8d:c7:48:31:28:b9:bb:43:e8:9d:3b:bd:05:b5:8f: 34:3f:2f:ec:1f:76:b4:ae:82:73:c0:7b:4f:c6:f1:b6:03:49: 97:a7:62:e8:e8:ee:7d:36:87:db:a6:47:49:71:3d:8c:0e:65: 8d:f4:c5:65:46:2a:87:f1:b0:d2:62:67:97:8d:4a:fd:bb:63: ea:1f:d4:ae:7f:00:b6:9d:c9:54:98:cf:10:d7:39:03:a5:03: ea:db:76:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hpZ1C+NzuUmZdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk NWExYmUyYTItYjAxNC00NmQ0LWI2YWYtNzE2MTRmMGFiYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzGWS0wrKlg1xMiuJmCHDhryVOJ90pt3BJdw Q51SD4LEweqdJGDqyMwkHDYmm2L5zbNeH18Rd9HM0nLniF+MLJDchspmNgFd7rVe kHnMgfd61E7Uy5MR+Lv4a5Ek51amXM+tn67ZLnFR9PkP2/FDzC7H94Xa+Q4vnM5n IEfne75H+8ppTVCmcFS5547akFapKGrKYllzaWL8YdEjY2xfdM0pMAqnPW9i4R9v hX5tox6kyI+vw4vYDOW3K54WsgYeQrJYVxtMAdFGtDWaFT8driHojTSQ3ctulNcK fbhSPOfUq977bdv1qn4ZC4hTya0pYWmcJDtEwLGnvViEKTnq8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFETFHCO3KNJL1zaKn9LCl+kWOdufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGUyZjI3OTItM2VjNy0z MmFmLTkzNDEtNzAwODJiMmYyY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKEuKKC6rfrDdNk/AAP+SaRJUFrOQXdhmwZ6TiCThpxDip79d5LR ch3Sy/ZmFjSEOQdn1Fv0v5oQRWaQo6gS5zaEIaj54fQ6VbiDZp4lIsvsT8BUw1XF khPvZgyNK7vv+05i+LJYp/BoONcZdlUjT4wbZ3xoYUBouPPQy1GxY2y5JxDbwZsx jDwEECygTOu57bzcEqhJKQZ4eVkRPoAl4dr8hQ0RgY3HSDEoubtD6J07vQW1jzQ/ L+wfdrSugnPAe0/G8bYDSZenYujo7n02h9umR0lxPYwOZY30xWVGKofxsNJiZ5eN Sv27Y+of1K5/ALadyVSYzxDXOQOlA+rbdmw= -----END CERTIFICATE-----Generated at Wed Sep 10 20:51:57 2025 by rpki-client