$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fe580fe-f6f8-3378-a556-68ccccd1290a.roa File: 2fe580fe-f6f8-3378-a556-68ccccd1290a.roa (raw, json) Hash identifier: 8v6DCtU6zhzR3xQ3tc+NergiMibFe13zDzkAJt7CJVQ= Subject key identifier: DC:B9:1D:D4:2E:D2:1B:C6:D9:CF:93:F9:4C:F2:ED:B0:6F:4D:6D:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196D91C5F1BB8192493F400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fe580fe-f6f8-3378-a556-68ccccd1290a.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 40647 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:d9:1c:5f:1b:b8:19:24:93:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=7c677747-0dae-4b9b-8ad6-b64650537819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:e8:85:64:74:3f:8a:09:19:c4:57:8a:b5: ed:a1:07:64:c2:4a:21:91:a2:1c:10:7b:41:80:20: 52:2f:aa:fc:4e:32:61:94:3e:59:86:97:f7:2f:f6: 3e:f8:f0:fd:40:f6:1d:ba:ef:60:c3:98:8b:29:1b: e9:c6:c7:54:d5:76:9d:4d:a0:db:1c:42:8c:63:08: 3c:c7:2e:62:04:3f:e7:a8:ee:a5:92:d6:e0:62:16: 94:94:30:1c:92:7a:6e:d4:aa:6d:73:c7:a0:ce:dd: 4a:4e:01:7d:f9:a6:d9:52:05:7e:93:5a:b0:8a:c6: 92:1d:bb:84:33:ea:8b:6e:4e:68:86:89:76:77:23: b6:06:5c:b5:b1:87:c4:f6:3c:6f:90:63:f7:f7:29: 64:b1:29:d6:9a:93:e4:21:60:a1:15:41:be:02:43: 95:2d:1d:72:c5:21:bb:b2:bc:32:72:73:b1:cb:ac: 13:bc:87:ce:17:c4:f0:0e:bb:ee:8d:72:1d:9c:c6: 2b:a7:73:e7:0f:91:c2:29:4d:11:9a:3f:1c:28:75: e2:c6:6c:09:11:9a:a0:e3:c9:1e:82:a4:5f:19:8b: 70:fa:ef:4a:39:8d:9a:6c:39:b0:e2:58:f1:cc:46: 62:1c:13:44:40:bd:f7:c1:1a:41:1b:d6:fe:2f:01: 81:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B9:1D:D4:2E:D2:1B:C6:D9:CF:93:F9:4C:F2:ED:B0:6F:4D:6D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fe580fe-f6f8-3378-a556-68ccccd1290a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c4:49:14:cd:34:4a:c2:15:ce:1b:7e:1c:9e:e8:38:d0:e5: 65:7f:cb:97:7a:c6:72:2a:69:53:00:b9:00:bd:33:76:1e:f9: b4:60:7a:e5:d6:49:d0:0b:0b:7e:29:a3:c8:b6:ec:10:69:e9: 4b:5c:fb:8e:7e:20:1b:27:49:44:00:7b:91:50:85:0a:dd:35: 25:f2:e7:86:09:7b:fd:f3:5b:1c:73:c5:34:cf:94:ae:4b:1c: c7:ed:95:72:1a:46:79:6c:f6:74:d3:aa:65:7f:71:44:9f:d6: 6d:2b:2d:b2:b4:1a:73:44:41:93:2c:f6:70:4d:75:c9:ea:c7: 46:55:e3:3e:c8:cf:da:1a:39:38:5d:f9:cc:d2:92:f3:b0:27: eb:e6:e5:77:9f:37:6b:1c:1a:04:a9:c7:89:20:2c:50:cf:52: 27:16:e0:21:a4:b0:eb:5b:5b:cc:a0:4c:f9:b2:6a:e5:fb:68: 8b:6c:e5:47:d2:0c:94:97:de:36:9b:1f:63:10:62:f1:e0:ed: df:5d:55:5f:28:da:a9:d8:68:8b:46:4a:b9:4e:1f:44:6b:9a: f2:0b:49:34:80:ef:a6:1e:ac:27:bd:e1:d9:b8:8d:fb:ea:58: 2d:03:e9:f2:48:76:22:1e:fa:54:c4:1a:fa:fd:fd:03:48:e0: 62:1d:2f:9b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhltkcXxu4GSST9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk N2M2Nzc3NDctMGRhZS00YjliLThhZDYtYjY0NjUwNTM3ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HrohWR0P4oJGcRXirXtoQdkwkohkaIcEHtB gCBSL6r8TjJhlD5Zhpf3L/Y++PD9QPYduu9gw5iLKRvpxsdU1XadTaDbHEKMYwg8 xy5iBD/nqO6lktbgYhaUlDAcknpu1Kptc8egzt1KTgF9+abZUgV+k1qwisaSHbuE M+qLbk5ohol2dyO2Bly1sYfE9jxvkGP39ylksSnWmpPkIWChFUG+AkOVLR1yxSG7 srwycnOxy6wTvIfOF8TwDrvujXIdnMYrp3PnD5HCKU0Rmj8cKHXixmwJEZqg48ke gqRfGYtw+u9KOY2abDmw4ljxzEZiHBNEQL33wRpBG9b+LwGBVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNy5HdQu0hvG2c+T+Uzy7bBvTW1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZlNTgwZmUtZjZmOC0z Mzc4LWE1NTYtNjhjY2NjZDEyOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQArxEkUzTRKwhXOG34cnug40OVlf8uXesZyKmlT ALkAvTN2Hvm0YHrl1knQCwt+KaPItuwQaelLXPuOfiAbJ0lEAHuRUIUK3TUl8ueG CXv981scc8U0z5SuSxzH7ZVyGkZ5bPZ006plf3FEn9ZtKy2ytBpzREGTLPZwTXXJ 6sdGVeM+yM/aGjk4XfnM0pLzsCfr5uV3nzdrHBoEqceJICxQz1InFuAhpLDrW1vM oEz5smrl+2iLbOVH0gyUl942mx9jEGLx4O3fXVVfKNqp2GiLRkq5Th9Ea5ryC0k0 gO+mHqwnveHZuI376lgtA+nySHYiHvpUxBr6/f0DSOBiHS+b -----END CERTIFICATE-----Generated at Sat Aug 23 18:03:32 2025 by rpki-client