$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a443d24-aa48-3f65-84bc-fbddf3145071.roa File: 0a443d24-aa48-3f65-84bc-fbddf3145071.roa (raw, json) Hash identifier: ZxE8lCP98qRbeZXTfGKRbglCSCgEDADIEqp2FrAVauU= Subject key identifier: BB:36:E3:F5:4D:7D:7D:1A:4C:21:5B:BD:8D:DB:98:DA:E5:B2:D6:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196F907FC57CB07B2620D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a443d24-aa48-3f65-84bc-fbddf3145071.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 21313 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:f9:07:fc:57:cb:07:b2:62:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=84a3fce8-35b3-4c71-bebb-e1678a5fe904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:17:8e:6e:fb:cb:f6:23:af:e3:fd:20:0b:27: 2f:6d:95:7f:96:c9:07:c0:78:f7:b7:ef:61:9f:d1: 88:68:94:d7:51:ec:c4:48:b9:b7:3c:49:3d:31:94: d0:2d:48:95:99:32:99:2e:de:03:5c:b2:7a:fa:c4: 1e:41:37:32:fb:55:53:04:5a:34:98:b0:19:f6:88: 86:c4:64:39:7a:21:3f:76:6d:04:23:0c:c4:c8:cb: d0:a0:d4:9d:45:0d:f5:a4:19:29:9f:e0:a8:1a:18: 57:d9:8c:3e:86:59:d7:ea:c5:61:49:4d:38:d0:63: 2a:23:73:4d:1e:8b:e8:4f:2d:42:39:7c:d8:66:22: 60:79:75:5e:22:b6:38:ef:da:ef:e8:ab:f9:a6:7e: de:23:ad:74:f1:ba:28:13:74:79:f1:f4:90:97:4f: 78:04:90:0b:94:8c:27:d2:94:68:af:ca:d8:24:cc: 7a:e6:6a:78:9f:cf:fe:ac:2e:62:ac:34:a5:8f:68: 4b:94:83:34:47:bf:a7:ca:61:9d:ea:15:38:fc:7c: 58:b7:de:71:3d:d5:4e:ec:33:ff:75:8a:bb:02:66: 99:4b:63:9e:77:c9:cb:57:a9:5a:ba:1a:75:7f:ca: 36:e2:ef:00:62:13:03:1f:74:1a:33:da:19:ca:f6: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:36:E3:F5:4D:7D:7D:1A:4C:21:5B:BD:8D:DB:98:DA:E5:B2:D6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a443d24-aa48-3f65-84bc-fbddf3145071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:9c:e0:19:19:72:29:7d:bd:08:30:17:83:99:40:44:00:aa: 07:92:f3:75:95:6a:22:35:e7:d6:60:55:6f:bd:a5:3d:07:df: 35:5c:f0:65:87:b5:5d:5c:3e:8a:e4:e6:1d:96:26:17:13:78: 72:37:b0:9a:fa:09:77:94:95:9f:12:64:a8:0a:14:8e:2d:2f: f7:19:d7:fe:50:66:4f:fb:21:99:92:53:52:c5:3f:20:32:24: 22:bf:a4:87:db:eb:ab:f6:db:b5:09:99:91:78:88:7b:fd:48: 67:09:93:43:8f:c5:b3:ba:20:12:7f:27:27:a3:36:c2:de:5d: 1a:85:4a:27:81:7d:bf:f6:cb:d1:cb:64:ab:f5:bc:5f:10:04: 42:eb:b0:a7:6a:22:b8:c6:75:e3:b1:7e:f9:aa:cd:a2:7f:6a: e8:5b:42:e7:58:a0:e6:c5:2f:64:e0:1a:30:16:7f:8b:78:8a: 0b:d3:42:7c:ae:91:1c:db:42:2b:7c:c8:50:dc:9f:f5:1a:b4: 0d:81:1f:f3:68:15:f6:13:3b:76:2e:44:55:37:04:0d:da:db: d7:58:af:fc:16:46:4b:87:a5:8f:f2:b7:96:ff:59:e8:2c:ae: 03:03:76:2e:b4:d6:72:2c:b5:a5:14:c0:ba:de:0f:4a:49:10: 51:24:07:35 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlvkH/FfLB7JiDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ODRhM2ZjZTgtMzViMy00YzcxLWJlYmItZTE2NzhhNWZlOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBeObvvL9iOv4/0gCycvbZV/lskHwHj3t+9h n9GIaJTXUezESLm3PEk9MZTQLUiVmTKZLt4DXLJ6+sQeQTcy+1VTBFo0mLAZ9oiG xGQ5eiE/dm0EIwzEyMvQoNSdRQ31pBkpn+CoGhhX2Yw+hlnX6sVhSU040GMqI3NN HovoTy1COXzYZiJgeXVeIrY479rv6Kv5pn7eI6108booE3R58fSQl094BJALlIwn 0pRor8rYJMx65mp4n8/+rC5irDSlj2hLlIM0R7+nymGd6hU4/HxYt95xPdVO7DP/ dYq7AmaZS2Oed8nLV6lauhp1f8o24u8AYhMDH3QaM9oZyvYcCwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLs24/VNfX0aTCFbvY3bmNrlstYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGE0NDNkMjQtYWE0OC0z ZjY1LTg0YmMtZmJkZGYzMTQ1MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCcnOAZGXIpfb0IMBeDmUBEAKoHkvN1lWoiNefW YFVvvaU9B981XPBlh7VdXD6K5OYdliYXE3hyN7Ca+gl3lJWfEmSoChSOLS/3Gdf+ UGZP+yGZklNSxT8gMiQiv6SH2+ur9tu1CZmReIh7/UhnCZNDj8WzuiASfycnozbC 3l0ahUongX2/9svRy2Sr9bxfEARC67CnaiK4xnXjsX75qs2if2roW0LnWKDmxS9k 4BowFn+LeIoL00J8rpEc20IrfMhQ3J/1GrQNgR/zaBX2Ezt2LkRVNwQN2tvXWK/8 FkZLh6WP8reW/1noLK4DA3YutNZyLLWlFMC63g9KSRBRJAc1 -----END CERTIFICATE-----Generated at Sat Aug 23 18:27:17 2025 by rpki-client