$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f337c0b-7e3d-3486-90d4-8790e90f1581.roa File: 1f337c0b-7e3d-3486-90d4-8790e90f1581.roa (raw, json) Hash identifier: Oqkb6AlPrb3eFpU5trdgDHEP5ZFpSPGTOL/zmhdjxJg= Subject key identifier: D8:42:FB:77:24:85:9C:D7:39:34:81:25:3B:1B:3C:34:D3:DE:CE:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F674626281E1DFF0504EC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f337c0b-7e3d-3486-90d4-8790e90f1581.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396583 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:74:62:62:81:e1:df:f0:50:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=b0520cb0-1d12-4322-952e-1944723cf525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:70:a1:80:b3:73:ec:ac:c4:34:29:fc:06: 97:34:7d:50:1f:ab:1a:91:2a:e7:54:f0:18:68:d9: aa:d4:4d:fb:f8:1d:f1:16:98:cf:b5:4a:6b:8c:bc: 3a:6c:26:c8:21:6e:0e:4b:38:1e:31:34:5c:e1:a0: 7e:83:bc:13:25:30:c7:e6:8f:eb:27:f0:13:9b:3c: ef:13:c8:d8:b3:12:2b:a9:70:5a:02:07:86:5c:3d: c8:e8:cb:ec:82:5b:85:66:18:91:24:6c:48:99:bb: 44:ab:d8:aa:a8:6d:7a:6f:2e:ff:20:ac:7b:7c:33: e8:d1:a3:ef:f3:3f:61:7b:79:45:c8:26:af:c7:86: db:d8:61:29:ec:02:7b:36:4c:bd:ae:64:ad:86:0f: a5:60:93:97:58:3f:11:6c:1f:4a:80:bc:55:59:b6: a2:33:4a:31:d6:3c:2e:b4:58:1c:a0:13:33:80:eb: 9d:90:b6:90:b7:80:79:fb:57:a7:1b:b0:49:70:c4: 2d:aa:24:7c:3c:17:78:aa:89:d4:58:c0:a7:d2:28: 2f:b0:76:e2:be:6b:0d:f2:a3:bc:32:2f:25:ec:77: 4e:58:32:f6:a5:fc:f0:53:35:33:bb:05:6b:a1:f7: 8f:75:a2:e2:00:be:1f:be:e6:f2:7a:59:e7:12:da: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:FB:77:24:85:9C:D7:39:34:81:25:3B:1B:3C:34:D3:DE:CE:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f337c0b-7e3d-3486-90d4-8790e90f1581.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:54:ff:d3:4a:e9:d8:05:b5:6b:4c:b7:96:06:09:f9:5b:0b: b9:4a:a6:7c:2a:70:4e:62:fe:a0:b1:45:bf:7a:13:9c:d8:c9: 93:bf:08:59:4b:f6:39:1e:59:73:f8:ca:ef:6d:b1:eb:a0:c4: 8d:e7:d7:0d:65:8c:99:35:c1:5a:2d:b3:66:3f:6f:a8:82:16: f2:5d:90:09:93:06:b5:88:42:50:70:45:78:f8:96:77:58:2b: 3e:97:87:a7:d9:8f:61:98:47:9a:11:95:46:7b:d1:ea:fc:a1: 0a:dd:cb:42:e1:2f:b5:fa:5c:9a:8f:99:cf:bd:9b:82:ae:ee: 8d:de:15:fe:a9:45:27:39:7c:6c:bc:35:36:72:cd:f3:b9:18: 80:60:7b:9b:eb:e1:54:8b:4a:9f:63:90:95:25:9f:95:d0:bf: 03:c2:a2:eb:d0:7c:78:31:78:64:48:5d:05:1c:cb:be:5e:c9: 93:19:e2:0c:28:fb:7a:78:42:04:2e:7b:c9:ac:b4:6a:43:79: 4b:37:85:3e:ee:ce:cd:74:01:5e:e9:be:ad:e2:9a:e6:ff:15: e7:d7:77:73:4b:ce:ad:10:07:17:cf:3f:81:f5:22:80:b6:c1: e1:00:d6:9d:51:db:fb:24:48:db:46:08:ea:96:5c:b6:67:64: 58:4a:ea:6e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nRiYoHh3/BQTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YjA1MjBjYjAtMWQxMi00MzIyLTk1MmUtMTk0NDcyM2NmNTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9pwoYCzc+ysxDQp/AaXNH1QH6sakSrnVPAY aNmq1E37+B3xFpjPtUprjLw6bCbIIW4OSzgeMTRc4aB+g7wTJTDH5o/rJ/ATmzzv E8jYsxIrqXBaAgeGXD3I6MvsgluFZhiRJGxImbtEq9iqqG16by7/IKx7fDPo0aPv 8z9he3lFyCavx4bb2GEp7AJ7Nky9rmSthg+lYJOXWD8RbB9KgLxVWbaiM0ox1jwu tFgcoBMzgOudkLaQt4B5+1enG7BJcMQtqiR8PBd4qonUWMCn0igvsHbivmsN8qO8 Mi8l7HdOWDL2pfzwUzUzuwVrofePdaLiAL4fvubyelnnEtr8rQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNhC+3ckhZzXOTSBJTsbPDTT3s5fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWYzMzdjMGItN2UzZC0z NDg2LTkwZDQtODc5MGU5MGYxNTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQATVP/TSunYBbVrTLeWBgn5Wwu5SqZ8KnBOYv6g sUW/ehOc2MmTvwhZS/Y5Hllz+MrvbbHroMSN59cNZYyZNcFaLbNmP2+oghbyXZAJ kwa1iEJQcEV4+JZ3WCs+l4en2Y9hmEeaEZVGe9Hq/KEK3ctC4S+1+lyaj5nPvZuC ru6N3hX+qUUnOXxsvDU2cs3zuRiAYHub6+FUi0qfY5CVJZ+V0L8DwqLr0Hx4MXhk SF0FHMu+XsmTGeIMKPt6eEIELnvJrLRqQ3lLN4U+7s7NdAFe6b6t4prm/xXn13dz S86tEAcXzz+B9SKAtsHhANadUdv7JEjbRgjqlly2Z2RYSupu -----END CERTIFICATE-----Generated at Sat Aug 23 16:23:55 2025 by rpki-client