$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41dd8090-4a03-36d1-a492-9a4a63541ae2.roa File: 41dd8090-4a03-36d1-a492-9a4a63541ae2.roa (raw, json) Hash identifier: +k7QyckFC+svNbPJtYNgcK7QCPK275GvPqthusm6vHo= Subject key identifier: 24:2D:ED:F1:0D:B9:BD:1A:75:B6:35:F2:93:A4:38:59:51:5A:C6:95 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196CFD79A3B0157B8022C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41dd8090-4a03-36d1-a492-9a4a63541ae2.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 396544 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:cf:d7:9a:3b:01:57:b8:02:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=80c90f13-6217-412e-8c9e-a87ad60c7ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d2:c4:f6:50:cd:18:c0:e7:35:1d:65:ee:80: c9:da:e3:f5:5e:2b:87:b5:58:56:68:ea:5c:c6:73: ba:d2:a0:ed:ff:bc:88:13:9f:42:4a:b8:5a:1c:49: cc:5e:37:5a:a1:4b:68:1e:cc:79:41:32:b5:6a:37: 51:2d:28:61:38:d0:b4:bc:2a:d9:7e:1f:c9:e3:28: 50:6c:bb:9f:82:3c:65:73:7f:14:59:49:10:cf:bb: 71:42:f2:f9:2b:8e:10:d4:9b:af:c4:a4:c9:4a:95: 9b:d3:89:a7:54:65:8b:55:67:da:00:1e:ce:58:84: 81:c6:8e:08:74:74:03:d2:80:69:11:ab:bd:6e:4c: 07:af:12:d0:3a:10:25:ef:4d:aa:70:7a:dc:84:e3: d1:f4:e2:27:44:58:43:69:1e:5f:f8:ef:ab:b9:d1: 2f:8a:ab:2b:38:96:b4:1c:f6:60:c2:b5:31:43:9a: 74:8e:5b:46:99:05:1a:94:dd:69:a9:26:43:91:cf: 27:ec:eb:9d:97:da:8d:75:e2:da:55:c1:a0:51:61: db:92:cc:22:d2:5a:15:75:69:83:f9:40:f1:ff:9c: 7f:dc:6e:15:75:b9:7a:18:09:10:57:79:08:38:95: ad:12:6f:d1:16:2f:a4:7d:0b:15:bc:08:6d:0d:c8: ca:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2D:ED:F1:0D:B9:BD:1A:75:B6:35:F2:93:A4:38:59:51:5A:C6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41dd8090-4a03-36d1-a492-9a4a63541ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a0:f3:a2:93:49:31:76:7e:18:08:24:c0:7c:4e:d2:fe:2f: 95:6e:a8:76:75:c5:2a:a2:42:7e:60:0a:4f:0d:25:ec:f9:94: f0:86:5f:85:7d:0a:0a:ec:fd:d2:1a:98:d6:c9:ca:5d:be:a8: e0:e1:93:6c:6c:36:a5:bc:cc:68:9a:63:33:ce:ea:81:28:3a: 15:7d:8b:7f:b9:33:42:e2:cd:1a:9a:94:c0:19:d5:0f:8d:8f: c6:52:4a:9f:c5:32:a6:d0:e8:61:6e:20:d2:2e:79:b9:e8:27: 48:98:33:7d:e3:65:33:64:bb:24:a9:47:d5:31:7d:01:f2:4e: 09:eb:0f:e2:55:e6:ac:7d:6f:46:85:ec:69:08:0d:3d:cb:9c: 1f:75:27:7a:12:92:f6:32:a1:47:54:20:7c:f3:5e:61:b0:1c: b8:a0:ea:df:2b:6e:95:43:88:79:18:f4:18:aa:77:29:36:ae: 81:9a:c9:9c:42:ae:54:73:26:5d:30:cb:55:60:cc:27:3f:ca: cb:5d:aa:6f:4d:f5:9d:58:72:6b:b2:73:1f:ee:c5:2e:9f:f7: 60:3e:ac:7a:b1:47:fe:52:60:5d:e7:c2:09:21:74:5d:03:4f: 1d:bc:9c:91:3d:2f:c2:4a:6f:c4:83:b2:e7:64:7e:97:80:5a: ec:dd:43:22 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhls/XmjsBV7gCLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk ODBjOTBmMTMtNjIxNy00MTJlLThjOWUtYTg3YWQ2MGM3ZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtLE9lDNGMDnNR1l7oDJ2uP1XiuHtVhWaOpc xnO60qDt/7yIE59CSrhaHEnMXjdaoUtoHsx5QTK1ajdRLShhONC0vCrZfh/J4yhQ bLufgjxlc38UWUkQz7txQvL5K44Q1JuvxKTJSpWb04mnVGWLVWfaAB7OWISBxo4I dHQD0oBpEau9bkwHrxLQOhAl702qcHrchOPR9OInRFhDaR5f+O+rudEviqsrOJa0 HPZgwrUxQ5p0jltGmQUalN1pqSZDkc8n7Oudl9qNdeLaVcGgUWHbkswi0loVdWmD +UDx/5x/3G4Vdbl6GAkQV3kIOJWtEm/RFi+kfQsVvAhtDcjKYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCQt7fENub0adbY18pOkOFlRWsaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDFkZDgwOTAtNGEwMy0z NmQxLWE0OTItOWE0YTYzNTQxYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAOoPOik0kxdn4YCCTAfE7S/i+Vbqh2dcUqokJ+ YApPDSXs+ZTwhl+FfQoK7P3SGpjWycpdvqjg4ZNsbDalvMxommMzzuqBKDoVfYt/ uTNC4s0ampTAGdUPjY/GUkqfxTKm0OhhbiDSLnm56CdImDN942UzZLskqUfVMX0B 8k4J6w/iVeasfW9GhexpCA09y5wfdSd6EpL2MqFHVCB8815hsBy4oOrfK26VQ4h5 GPQYqncpNq6BmsmcQq5UcyZdMMtVYMwnP8rLXapvTfWdWHJrsnMf7sUun/dgPqx6 sUf+UmBd58IJIXRdA08dvJyRPS/CSm/Eg7LnZH6XgFrs3UMi -----END CERTIFICATE-----Generated at Sat Aug 23 13:13:44 2025 by rpki-client