$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa File: 420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa (raw, json) Hash identifier: YKvl+CzDwdiZO5wtrn076aD3e0ivvUxADfJbym/s4eg= Subject key identifier: 67:3E:DE:CF:28:1D:66:E5:79:98:A8:7E:D3:16:D8:60:C5:79:81:15 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F676FC9F826587DCECB5C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 397200 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:76:fc:9f:82:65:87:dc:ec:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=cf767a69-834b-4525-a635-9df2ea4af16a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9c:33:c1:24:9c:8a:95:78:e7:a2:27:eb:3f: 6f:e0:04:f0:67:31:18:65:86:4a:e5:8b:d3:c0:8c: 68:cf:bc:bf:aa:99:d2:69:29:30:f4:d8:50:09:57: 7b:de:70:b2:c9:e6:fe:ef:81:f0:1a:b3:b6:67:de: 0f:33:fb:0c:e6:5e:be:e5:ff:61:78:fc:9e:82:e2: 76:df:79:e6:62:7e:1e:97:37:a7:20:d4:6c:36:6d: 50:83:4d:39:5b:70:8c:fa:cf:9b:f0:56:38:eb:76: 66:d0:42:d6:82:cd:77:c9:58:c8:53:99:32:92:d7: b5:68:e6:4d:c0:c2:ee:7b:42:ec:e2:42:22:11:6a: 71:37:23:8b:13:73:2d:70:7f:be:f4:de:24:f8:6b: 54:82:b4:c2:e1:63:1e:3f:50:5e:1a:f8:89:20:e3: c7:fd:c5:79:26:19:4c:dd:e2:e1:27:55:37:38:22: 00:af:f9:f0:34:a7:03:bd:a0:0e:81:a3:f1:e9:47: 64:3a:dd:6d:26:ea:ec:6b:b5:68:a7:bd:f0:b5:b2: ae:8a:eb:1a:c5:27:99:d7:06:c8:d2:bd:b2:36:4c: c5:96:4f:6e:b9:7f:e6:69:f2:13:ef:fe:94:72:2e: 55:ba:b9:8b:62:18:35:89:25:8b:16:a6:d9:c0:6d: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3E:DE:CF:28:1D:66:E5:79:98:A8:7E:D3:16:D8:60:C5:79:81:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/420e788d-42c4-34fa-845a-c7f6c1d45f0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:3b:03:20:50:08:f5:bb:a0:6e:05:b5:92:6e:e9:83:f3:b8: a2:d1:15:58:d7:60:99:45:0e:98:b8:88:c8:44:ac:3b:4f:67: d2:5c:7b:72:f5:ea:68:c8:44:be:d4:b9:ba:ba:a2:9f:62:54: 29:af:0d:56:68:87:2f:13:d5:28:56:51:f1:82:bf:eb:c6:19: 19:e3:ea:e5:d2:66:64:b4:ea:b0:9e:af:af:56:cf:5c:60:db: bd:1f:30:9e:cd:71:73:fe:68:27:5b:44:65:5f:68:09:a5:14: 2a:a2:7c:c3:0c:5a:64:40:9b:54:2a:6e:cc:da:bd:9a:7f:60: a1:32:1f:4c:76:07:a6:65:17:d2:18:c6:bc:fe:df:ef:57:ae: bb:49:d9:56:65:a3:c7:b4:e5:39:e2:6c:6a:43:72:fc:9d:ae: 7e:7e:2e:31:48:71:82:09:2f:9e:ed:c9:21:9e:02:7c:bc:f4: 36:b1:02:b2:65:47:aa:cf:f9:a2:91:0b:ff:d4:62:9c:8a:cf: 9f:cb:65:6b:af:98:93:a7:6d:3b:46:78:f9:3c:59:67:2c:01: d4:59:3c:7d:4b:24:34:94:fa:9a:67:e7:7f:1b:3b:6a:d4:55: 7a:a7:43:40:4b:4a:56:83:b8:7e:b7:3b:fb:b7:17:f1:49:d3: 38:66:5f:d4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nb8n4Jlh9zstcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y3NjdhNjktODM0Yi00NTI1LWE2MzUtOWRmMmVhNGFmMTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5wzwSScipV456In6z9v4ATwZzEYZYZK5YvT wIxoz7y/qpnSaSkw9NhQCVd73nCyyeb+74HwGrO2Z94PM/sM5l6+5f9hePyeguJ2 33nmYn4elzenINRsNm1Qg005W3CM+s+b8FY463Zm0ELWgs13yVjIU5kykte1aOZN wMLue0Ls4kIiEWpxNyOLE3MtcH++9N4k+GtUgrTC4WMeP1BeGviJIOPH/cV5JhlM 3eLhJ1U3OCIAr/nwNKcDvaAOgaPx6UdkOt1tJursa7Vop73wtbKuiusaxSeZ1wbI 0r2yNkzFlk9uuX/mafIT7/6Uci5VurmLYhg1iSWLFqbZwG3p/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGc+3s8oHWbleZioftMW2GDFeYEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDIwZTc4OGQtNDJjNC0z NGZhLTg0NWEtYzdmNmMxZDQ1ZjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCTOwMgUAj1u6BuBbWSbumD87ii0RVY12CZRQ6Y uIjIRKw7T2fSXHty9epoyES+1Lm6uqKfYlQprw1WaIcvE9UoVlHxgr/rxhkZ4+rl 0mZktOqwnq+vVs9cYNu9HzCezXFz/mgnW0RlX2gJpRQqonzDDFpkQJtUKm7M2r2a f2ChMh9MdgemZRfSGMa8/t/vV667SdlWZaPHtOU54mxqQ3L8na5+fi4xSHGCCS+e 7ckhngJ8vPQ2sQKyZUeqz/mikQv/1GKcis+fy2Vrr5iTp207Rnj5PFlnLAHUWTx9 SyQ0lPqaZ+d/Gztq1FV6p0NAS0pWg7h+tzv7txfxSdM4Zl/U -----END CERTIFICATE-----Generated at Sat Aug 23 13:07:25 2025 by rpki-client