$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c8b2bf1-8fb0-3c70-92ca-95aab57137da.roa File: 3c8b2bf1-8fb0-3c70-92ca-95aab57137da.roa (raw, json) Hash identifier: pTXqjODjUb4JAyir5xS8BXVZzAULrSVcPoL3VSXKLxA= Subject key identifier: 3C:F9:01:85:E2:6E:6A:42:A9:86:FC:FB:61:FA:42:BC:D6:76:0D:94 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE461385BC42B55638B972568 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c8b2bf1-8fb0-3c70-92ca-95aab57137da.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 397196 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:38:5b:c4:2b:55:63:8b:97:25:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=4cfa1d09-2fde-478d-a373-0db959c1f71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:7f:45:35:a5:bd:fe:33:80:79:6c:2a:fb: bb:0d:df:c3:7d:6b:85:1c:67:2c:24:ac:e7:28:c8: 84:02:56:2a:6d:cb:e9:85:23:80:9d:89:e1:57:6b: c7:20:b7:c8:3e:b5:ef:96:c9:91:33:5e:c3:ad:22: 27:bd:25:6a:87:2e:84:ed:85:d2:2d:99:79:73:43: 26:fb:9a:ba:7a:44:91:9a:23:12:c6:d4:40:55:d5: 5a:d2:9f:79:2c:6c:5d:66:48:ed:8a:6c:26:6d:43: 4b:1f:8b:29:17:35:49:e7:f7:1b:04:79:e7:36:c3: c6:5b:e9:d6:70:5e:af:ce:bd:e4:33:7e:a8:8c:c7: a4:eb:ca:da:d7:a3:fb:ed:9e:2c:2b:d1:77:00:af: 87:d4:91:54:cb:fb:8c:3c:5f:9a:c5:3a:4a:97:b1: cf:d2:cd:aa:fa:1f:f8:84:2b:be:e9:b5:87:85:39: d6:cc:25:6c:8c:26:f1:6b:95:d9:2e:79:85:74:cc: e0:ce:98:5d:b3:e1:4c:b6:d6:26:d1:11:bf:a2:b6: e9:29:06:48:b2:6d:1c:50:70:e4:29:4a:6b:3e:2a: 0b:91:d3:78:65:23:e9:26:21:47:85:cf:1f:67:c3: 08:e2:a3:97:d1:53:6d:33:62:4e:00:24:02:07:99: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F9:01:85:E2:6E:6A:42:A9:86:FC:FB:61:FA:42:BC:D6:76:0D:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c8b2bf1-8fb0-3c70-92ca-95aab57137da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:2c:19:71:6f:8a:d0:4d:71:cc:33:48:12:05:24:37:0d:18: 59:08:ab:70:80:49:08:55:ee:49:be:dc:55:f4:25:08:e3:bb: 52:dc:2d:2f:71:79:14:5b:58:d7:1d:fc:de:dd:0b:3e:25:f1: d0:21:b4:61:c1:c5:71:66:e0:3b:36:fb:b1:52:2c:31:89:22: 4d:c5:4f:41:2e:c0:ef:f5:44:cb:81:1a:58:f1:45:cb:4e:df: 7a:3a:1e:8e:85:ce:41:44:e0:1d:68:3e:4c:1b:23:4e:e3:0c: ab:32:0b:29:0a:6d:34:67:29:5d:95:ee:79:77:43:ee:be:04: 53:3a:9d:89:f8:b7:1f:68:e8:08:cd:59:52:9e:74:95:a6:f1: e0:52:0b:2c:f8:8f:57:21:4a:d6:35:5e:87:95:63:ce:9d:71: cd:4b:aa:83:4e:c4:00:9f:fe:43:4a:7c:3e:bd:c6:71:6c:c5: 01:51:ff:71:71:cb:3d:ee:ab:01:f6:52:25:29:30:70:3b:20: 2c:35:f0:66:fa:23:74:d1:37:e9:46:82:85:11:5f:ac:d0:21: d1:65:0b:33:5f:55:f4:b6:ad:99:fb:2c:f5:a1:50:21:89:3d: f7:b1:c8:77:25:cc:52:e9:76:72:01:79:9e:b1:df:eb:b1:c1: 7f:a1:51:c5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErkYThbxCtVY4uXJWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NGNmYTFkMDktMmZkZS00NzhkLWEzNzMtMGRiOTU5YzFmNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTB/RTWlvf4zgHlsKvu7Dd/DfWuFHGcsJKzn KMiEAlYqbcvphSOAnYnhV2vHILfIPrXvlsmRM17DrSInvSVqhy6E7YXSLZl5c0Mm +5q6ekSRmiMSxtRAVdVa0p95LGxdZkjtimwmbUNLH4spFzVJ5/cbBHnnNsPGW+nW cF6vzr3kM36ojMek68ra16P77Z4sK9F3AK+H1JFUy/uMPF+axTpKl7HP0s2q+h/4 hCu+6bWHhTnWzCVsjCbxa5XZLnmFdMzgzphds+FMttYm0RG/orbpKQZIsm0cUHDk KUprPioLkdN4ZSPpJiFHhc8fZ8MI4qOX0VNtM2JOACQCB5m/PQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDz5AYXibmpCqYb8+2H6QrzWdg2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2M4YjJiZjEtOGZiMC0z YzcwLTkyY2EtOTVhYWI1NzEzN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCpLBlxb4rQTXHMM0gSBSQ3DRhZCKtwgEkIVe5J vtxV9CUI47tS3C0vcXkUW1jXHfze3Qs+JfHQIbRhwcVxZuA7NvuxUiwxiSJNxU9B LsDv9UTLgRpY8UXLTt96Oh6Ohc5BROAdaD5MGyNO4wyrMgspCm00Zyldle55d0Pu vgRTOp2J+LcfaOgIzVlSnnSVpvHgUgss+I9XIUrWNV6HlWPOnXHNS6qDTsQAn/5D Snw+vcZxbMUBUf9xccs97qsB9lIlKTBwOyAsNfBm+iN00TfpRoKFEV+s0CHRZQsz X1X0tq2Z+yz1oVAhiT33sch3JcxS6XZyAXmesd/rscF/oVHF -----END CERTIFICATE-----Generated at Sat Aug 23 14:20:59 2025 by rpki-client