$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b128060-4c9a-3fbf-ae5e-ce005459da26.roa File: 2b128060-4c9a-3fbf-ae5e-ce005459da26.roa (raw, json) Hash identifier: WsmC99DT3ButXhbLBiOL0l1t6UwS40nSg8Mv5FjGEOE= Subject key identifier: 16:3F:F9:52:FC:4C:70:24:B4:0C:40:89:3C:8B:38:A5:29:85:A7:D7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196E2F1E136007317070A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b128060-4c9a-3fbf-ae5e-ce005459da26.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 396547 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:e2:f1:e1:36:00:73:17:07:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=17d1ae3d-f733-4080-a7d3-2fd485148b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:98:22:24:a7:d8:5c:67:be:8a:43:7e:c8: 77:a3:e4:71:6e:43:09:15:6e:10:a3:4e:e1:ee:d2: 99:bc:d0:e3:47:f0:c6:18:c3:6e:fb:6a:3c:f7:61: 99:99:28:ae:25:6f:30:66:f9:51:80:83:2b:cb:5e: 9e:72:cc:f7:19:e0:91:3b:d9:22:f4:98:95:81:64: 75:57:93:f7:c4:98:23:c7:de:a3:fa:19:cf:ba:d1: bf:58:9f:14:70:94:43:48:6e:58:ac:71:f6:c7:d4: de:96:4a:bd:2c:da:d0:60:dc:c1:9f:f7:68:a5:cb: fe:c2:35:0b:90:a8:8a:da:2a:81:84:da:4e:49:d9: 08:52:b0:bf:06:eb:3e:4d:de:ff:03:6e:ad:db:d5: 83:61:82:4e:f0:4b:51:c5:98:a7:b4:30:99:4d:7d: 54:66:78:40:d5:91:ed:cb:d4:ba:c3:1f:69:e6:b8: 76:64:91:93:86:32:8a:8b:2b:13:8a:d7:da:a1:dc: d1:7e:28:75:a0:bc:56:d8:52:05:e0:f5:23:f2:cf: 90:b2:0c:02:51:80:6f:dd:ac:28:4e:5c:70:fd:cd: 4b:10:75:24:f6:6e:b3:54:91:1f:b5:9d:b3:86:3e: 98:ad:b8:61:9a:8e:28:5d:ad:40:7b:70:d2:cb:16: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3F:F9:52:FC:4C:70:24:B4:0C:40:89:3C:8B:38:A5:29:85:A7:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b128060-4c9a-3fbf-ae5e-ce005459da26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:b2:a9:81:1d:ab:a5:d6:b2:9f:1a:06:02:ce:d8:b1:2b:89: 0c:2f:fd:1d:43:d6:ca:d8:63:50:b8:a2:e5:ea:16:76:e6:a6: a5:15:da:40:61:37:a7:80:b3:25:68:84:a1:85:72:09:6a:56: 90:52:89:4c:19:f5:10:1e:24:99:91:27:2a:74:0c:a9:7d:20: c7:16:ae:da:9d:8f:ad:a3:c4:7e:9e:2f:26:b6:d1:22:72:c8: d4:b5:5e:3e:68:9b:4b:ed:a6:58:63:9d:58:fb:e9:12:58:31: 7a:4f:4a:d5:f3:ce:5f:54:55:5e:5c:5e:2a:b2:4b:92:ca:7e: 4e:69:29:2d:45:c5:ad:86:25:35:da:fb:90:bd:f0:40:e6:83: ed:f0:0c:70:88:fd:cf:cd:63:10:a6:88:97:12:7a:3b:8b:1e: 73:66:0c:19:56:62:1e:87:44:3b:76:57:16:46:1a:37:aa:30: 7d:03:e5:bb:fb:d3:61:01:2b:c0:0e:ee:b2:05:9d:08:5c:48: 1d:2e:67:44:d9:9e:26:d3:08:62:54:67:9f:3c:e0:c0:82:5b: 64:66:4e:64:32:ac:11:14:97:c6:7c:4a:ba:27:9b:9f:1f:46: f5:c9:ec:2c:ea:ee:02:ea:01:5a:b4:64:cb:c2:18:37:f5:01: de:89:56:1c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhluLx4TYAcxcHCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MTdkMWFlM2QtZjczMy00MDgwLWE3ZDMtMmZkNDg1MTQ4YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnweYIiSn2FxnvopDfsh3o+RxbkMJFW4Qo07h 7tKZvNDjR/DGGMNu+2o892GZmSiuJW8wZvlRgIMry16ecsz3GeCRO9ki9JiVgWR1 V5P3xJgjx96j+hnPutG/WJ8UcJRDSG5YrHH2x9Telkq9LNrQYNzBn/dopcv+wjUL kKiK2iqBhNpOSdkIUrC/Bus+Td7/A26t29WDYYJO8EtRxZintDCZTX1UZnhA1ZHt y9S6wx9p5rh2ZJGThjKKiysTitfaodzRfih1oLxW2FIF4PUj8s+QsgwCUYBv3awo Tlxw/c1LEHUk9m6zVJEftZ2zhj6Yrbhhmo4oXa1Ae3DSyxakkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBY/+VL8THAktAxAiTyLOKUphafXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIxMjgwNjAtNGM5YS0z ZmJmLWFlNWUtY2UwMDU0NTlkYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCYsqmBHaul1rKfGgYCztixK4kML/0dQ9bK2GNQ uKLl6hZ25qalFdpAYTengLMlaIShhXIJalaQUolMGfUQHiSZkScqdAypfSDHFq7a nY+to8R+ni8mttEicsjUtV4+aJtL7aZYY51Y++kSWDF6T0rV885fVFVeXF4qskuS yn5OaSktRcWthiU12vuQvfBA5oPt8AxwiP3PzWMQpoiXEno7ix5zZgwZVmIeh0Q7 dlcWRho3qjB9A+W7+9NhASvADu6yBZ0IXEgdLmdE2Z4m0whiVGefPODAgltkZk5k MqwRFJfGfEq6J5ufH0b1yews6u4C6gFatGTLwhg39QHeiVYc -----END CERTIFICATE-----Generated at Sat Aug 23 16:41:30 2025 by rpki-client