$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f24f4c7-2d8b-3a61-90ab-ecc4797751db.roa File: 1f24f4c7-2d8b-3a61-90ab-ecc4797751db.roa (raw, json) Hash identifier: lZ+mE7Kp7D2ipeiFXBdMT5+Oz9Uq9CRqt3yBWpTW6ZI= Subject key identifier: 12:B9:78:22:0C:2A:02:6C:52:DD:B5:BB:31:A7:78:4B:FB:7A:4C:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196D5BC457F2C45C00B5000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f24f4c7-2d8b-3a61-90ab-ecc4797751db.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 20172 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:d5:bc:45:7f:2c:45:c0:0b:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=3a7650ae-cbf1-44af-9aa7-db4b276717fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:79:fd:00:f7:5d:26:d8:ba:21:79:9f:2d:9f: ba:d7:4f:df:77:a1:0f:e9:48:4f:d5:02:6e:05:ed: 39:0f:6a:c6:59:f7:54:ea:3c:ca:16:6e:8c:99:33: f3:c3:42:a0:c4:ba:72:09:ef:99:1b:c8:ec:0c:12: cc:c7:06:15:3d:9e:76:70:52:41:bd:ce:7f:9b:44: af:7f:b6:f4:10:46:ce:82:9c:61:a3:09:90:0c:f5: 61:12:0d:30:0b:3e:ff:2a:7c:cc:7b:47:56:0a:06: cf:72:46:9f:6f:2b:21:29:7a:29:5a:4b:fd:6c:89: 77:96:20:ad:37:04:c7:1b:26:21:d3:e8:fa:7e:76: 55:3b:3a:63:39:8a:7e:21:06:06:ca:6a:93:18:70: 0b:43:74:4a:c7:fc:9f:7d:2b:24:35:31:71:28:8d: 35:54:b4:77:a4:98:53:d4:dc:c8:55:62:46:a7:9f: 91:7b:c9:b2:52:a7:58:51:76:c8:f4:a0:67:00:c6: 42:5c:44:ca:e2:b4:e3:60:0d:c4:12:0f:76:66:80: 8c:cb:e3:2a:f0:ae:86:0e:61:bc:f0:f0:8a:b8:70: 08:4f:7c:bb:61:d8:ec:fb:cf:d2:ed:cd:3f:d0:2f: d1:2b:f4:18:8b:9b:80:3c:2c:77:48:4b:24:c4:34: 69:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B9:78:22:0C:2A:02:6C:52:DD:B5:BB:31:A7:78:4B:FB:7A:4C:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f24f4c7-2d8b-3a61-90ab-ecc4797751db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:fd:c5:9f:f5:71:43:40:82:5f:3d:a9:89:c2:2b:c1:29:8e: 1d:4b:89:8a:01:8b:9a:06:26:90:33:0c:7f:80:66:7c:f7:2c: 7a:08:eb:a2:45:3e:84:a1:fd:f7:74:1b:8f:53:e7:e8:d2:c0: d9:ca:14:64:11:80:08:ce:6f:2e:a7:a0:ed:cc:bb:15:2a:4c: 54:92:90:14:d7:f7:c0:b0:6a:5a:6e:d5:da:ba:95:87:8e:fb: a6:5d:99:de:39:59:29:f8:42:d7:a0:ee:16:13:14:af:c1:73: 51:e8:e8:4c:20:66:07:01:2d:1d:36:8d:bc:2f:4b:51:3b:d8: 6e:96:2c:e7:fe:73:9e:c4:3c:d3:e7:8b:aa:5d:3b:a2:08:16: b2:32:51:f7:88:4a:23:7a:05:b1:18:e5:cc:c7:7e:bb:ee:1f: 5c:90:e8:03:76:66:06:1e:15:9e:f0:f8:f9:b9:93:c1:a7:0a: 4e:78:db:f4:b9:9d:08:16:19:d0:6b:6b:b0:fe:a2:5d:56:7c: 36:aa:5b:91:86:bc:2b:73:ba:f4:0c:76:e1:76:99:0e:2c:e3: 1d:cd:68:9a:41:55:91:88:02:f9:b3:19:dc:5c:05:6b:c8:0e: 58:13:d8:4e:79:82:e1:2b:f0:e3:c8:b4:d2:01:44:2c:11:11: b9:2f:28:e7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhltW8RX8sRcALUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk M2E3NjUwYWUtY2JmMS00NGFmLTlhYTctZGI0YjI3NjcxN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nn9APddJti6IXmfLZ+610/fd6EP6UhP1QJu Be05D2rGWfdU6jzKFm6MmTPzw0KgxLpyCe+ZG8jsDBLMxwYVPZ52cFJBvc5/m0Sv f7b0EEbOgpxhowmQDPVhEg0wCz7/KnzMe0dWCgbPckafbyshKXopWkv9bIl3liCt NwTHGyYh0+j6fnZVOzpjOYp+IQYGymqTGHALQ3RKx/yffSskNTFxKI01VLR3pJhT 1NzIVWJGp5+Re8myUqdYUXbI9KBnAMZCXETK4rTjYA3EEg92ZoCMy+Mq8K6GDmG8 8PCKuHAIT3y7Ydjs+8/S7c0/0C/RK/QYi5uAPCx3SEskxDRpowIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBK5eCIMKgJsUt21uzGneEv7ekzaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWYyNGY0YzctMmQ4Yi0z YTYxLTkwYWItZWNjNDc5Nzc1MWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCy/cWf9XFDQIJfPamJwivBKY4dS4mKAYuaBiaQ Mwx/gGZ89yx6COuiRT6Eof33dBuPU+fo0sDZyhRkEYAIzm8up6DtzLsVKkxUkpAU 1/fAsGpabtXaupWHjvumXZneOVkp+ELXoO4WExSvwXNR6OhMIGYHAS0dNo28L0tR O9hulizn/nOexDzT54uqXTuiCBayMlH3iEojegWxGOXMx3677h9ckOgDdmYGHhWe 8Pj5uZPBpwpOeNv0uZ0IFhnQa2uw/qJdVnw2qluRhrwrc7r0DHbhdpkOLOMdzWia QVWRiAL5sxncXAVryA5YE9hOeYLhK/DjyLTSAUQsERG5Lyjn -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:47 2025 by rpki-client