$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa File: 2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa (raw, json) Hash identifier: yRFVY+90CwfNh/rmg8/QHUu+Lo+zNCqKdB7OhckDBtg= Subject key identifier: B2:DA:3E:E5:79:B3:D0:BD:8D:F2:58:44:C5:F0:7F:96:42:25:3A:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AD7D1452FA08801A02B5EC400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 396553 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:45:2f:a0:88:01:a0:2b:5e:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=4b14aa9f-89cd-460d-a4b6-b34bbe433470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:85:cf:6c:be:42:8d:da:dd:4b:65:a4:e5: 92:2c:40:e1:98:ba:6d:4c:b1:83:78:5a:19:48:95: 2f:fc:d8:70:cc:f3:66:77:3a:8d:24:c9:6a:83:df: 94:99:d6:36:93:6e:22:07:03:10:25:ba:5a:37:31: 28:53:4b:05:47:5b:44:fb:95:74:1d:eb:7a:dc:aa: 0f:ca:d2:45:66:ee:5b:41:93:c8:14:49:ec:22:23: f8:35:db:8b:52:c9:16:43:37:24:70:3b:53:0e:6f: 78:08:d6:c6:fc:a2:7e:02:c6:a4:15:0f:c3:76:46: c6:a8:50:29:85:33:40:f3:d8:41:8a:06:25:1e:c5: 88:94:3a:7b:c1:d8:c7:a8:14:1d:b5:99:71:2c:29: b7:5c:c5:4d:7c:c0:39:b8:82:76:f4:9b:60:f3:5d: c6:04:c9:26:82:49:b4:7d:7b:a4:24:73:f8:3a:20: 1f:83:c1:9a:44:ba:72:31:11:5a:2c:6b:e6:34:41: 21:a2:3f:c2:59:07:c4:a8:ea:0c:6f:e7:bc:aa:de: 88:99:a5:35:2b:c9:fa:17:30:1a:bd:0e:57:de:82: a1:97:2f:15:65:33:71:60:1e:0c:d0:57:9b:48:ea: 63:4d:c9:c0:c8:f6:49:62:2a:9a:bc:28:b2:20:05: af:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DA:3E:E5:79:B3:D0:BD:8D:F2:58:44:C5:F0:7F:96:42:25:3A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8a:4a:12:48:91:76:2d:a7:ff:dc:a1:88:24:01:5b:79:e7: 19:78:76:53:91:d9:48:0c:15:b4:3a:de:21:f0:7a:45:4f:72: be:8b:61:91:89:90:13:df:47:69:da:50:cc:2a:0f:9a:21:52: c2:6c:db:ba:6b:7c:6e:b2:48:fc:35:9e:f0:9c:64:a9:33:48: 56:7e:5c:2d:2e:99:cc:f2:27:6d:49:12:6c:b3:80:ac:39:e0: f8:57:1b:a5:77:68:ec:45:76:06:c8:1b:9e:01:6d:4f:d8:7e: ba:8e:8b:ba:50:24:fa:e5:1b:7d:71:be:dc:a6:e3:15:7f:46: 14:e2:dc:f2:69:55:17:d5:50:ef:a7:5a:95:75:c4:f0:f8:b3: 38:10:92:82:e7:d8:39:39:56:eb:71:eb:ea:fc:0e:1c:6c:20: 2e:a1:9f:60:fe:24:6e:b9:b8:7f:1d:ef:a2:bb:7e:e9:cb:71: 0a:8d:fb:37:89:b5:c4:38:29:6b:24:05:b1:cd:14:c6:47:ad: db:ae:46:52:f5:33:2c:4e:fb:d5:3f:71:0a:09:0e:80:18:71: 48:c3:b4:94:51:99:bd:2f:39:5d:50:90:96:40:3a:64:cc:ea: 79:53:a5:87:31:f7:83:b5:e9:f4:ee:28:69:21:8f:45:00:8c: cf:68:69:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErX0UUvoIgBoCtexAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NGIxNGFhOWYtODljZC00NjBkLWE0YjYtYjM0YmJlNDMzNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkGFz2y+Qo3a3UtlpOWSLEDhmLptTLGDeFoZ SJUv/NhwzPNmdzqNJMlqg9+UmdY2k24iBwMQJbpaNzEoU0sFR1tE+5V0Het63KoP ytJFZu5bQZPIFEnsIiP4NduLUskWQzckcDtTDm94CNbG/KJ+AsakFQ/DdkbGqFAp hTNA89hBigYlHsWIlDp7wdjHqBQdtZlxLCm3XMVNfMA5uIJ29Jtg813GBMkmgkm0 fXukJHP4OiAfg8GaRLpyMRFaLGvmNEEhoj/CWQfEqOoMb+e8qt6ImaU1K8n6FzAa vQ5X3oKhly8VZTNxYB4M0FebSOpjTcnAyPZJYiqavCiyIAWviwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLLaPuV5s9C9jfJYRMXwf5ZCJTpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmE4NWU1YWYtNzI2ZS0z ZmM0LWE3ZGQtZWU5NGE4MjhhOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzikoSSJF2Laf/3KGIJAFbeecZeHZTkdlIDBW0 Ot4h8HpFT3K+i2GRiZAT30dp2lDMKg+aIVLCbNu6a3xuskj8NZ7wnGSpM0hWflwt LpnM8idtSRJss4CsOeD4Vxuld2jsRXYGyBueAW1P2H66jou6UCT65Rt9cb7cpuMV f0YU4tzyaVUX1VDvp1qVdcTw+LM4EJKC59g5OVbrcevq/A4cbCAuoZ9g/iRuubh/ He+iu37py3EKjfs3ibXEOClrJAWxzRTGR63brkZS9TMsTvvVP3EKCQ6AGHFIw7SU UZm9LzldUJCWQDpkzOp5U6WHMfeDten07ihpIY9FAIzPaGnE -----END CERTIFICATE-----Generated at Sun Aug 24 05:28:59 2025 by rpki-client