$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ed3205-e49e-35a8-b94d-5f530f026f6d.roa File: 42ed3205-e49e-35a8-b94d-5f530f026f6d.roa (raw, json) Hash identifier: HfxyeuNo5ZnDShbJ1H063MuxV8lU53+obYD+4ouMH6s= Subject key identifier: 22:99:BA:02:07:87:04:7B:0F:3B:9E:33:BC:DD:05:8A:D5:23:44:48 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AD7D1436B7CF775994FC9ACE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ed3205-e49e-35a8-b94d-5f530f026f6d.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 396610 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:43:6b:7c:f7:75:99:4f:c9:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=b786d85c-1d9e-4936-adc4-6c918b75d32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:36:ec:f1:40:a2:25:fc:e7:cd:de:67:41: c7:72:ca:f8:6e:4d:a1:92:e9:c2:4f:3d:eb:e1:09: 7a:e5:78:35:11:4b:49:df:2f:6e:55:b8:23:ff:11: 10:f7:3a:09:e5:b3:af:71:27:5e:10:ba:31:ba:c0: 1f:85:d9:61:b7:0b:45:26:d0:aa:06:3b:3e:04:10: 51:9d:e9:dc:a0:8a:75:d1:3a:c6:7b:64:3c:4b:65: 24:22:88:22:dc:ad:b0:f9:83:ea:64:f4:95:59:c5: 3f:97:89:7f:02:9b:7e:a5:2e:60:ba:9e:b0:7f:da: 0c:af:df:c9:5d:e1:e2:a6:ee:2f:0f:6b:95:cd:0e: 72:49:4a:e7:7a:c1:07:2f:e7:40:3f:96:cb:e6:24: 18:fc:56:ab:3f:9a:fd:36:e9:5c:51:bc:e1:87:5f: 09:04:bc:15:49:2d:ef:e4:a7:8c:0e:30:29:af:93: d3:c4:cb:3e:6d:b5:9d:8d:ca:eb:53:a1:d1:36:bb: 1d:c3:81:94:22:e3:b4:82:69:70:02:26:0e:6c:90: ca:ab:e4:6f:f7:71:dd:d3:96:21:38:22:b6:83:e9: 02:41:07:60:8d:4c:77:06:0d:1b:f1:14:da:35:03: 8d:8b:33:16:f7:0a:10:9e:94:ef:30:bd:44:ef:98: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:99:BA:02:07:87:04:7B:0F:3B:9E:33:BC:DD:05:8A:D5:23:44:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42ed3205-e49e-35a8-b94d-5f530f026f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d1:4b:d7:99:68:df:c6:58:3a:84:d9:cd:65:80:a1:39:ac: fa:4a:76:4a:e1:a1:7a:09:dd:4c:80:2e:8d:93:a3:37:b8:6c: fa:ba:65:ab:a3:b9:45:6b:2a:a9:5b:26:a2:b2:14:40:c7:a4: 05:e2:d3:d1:fa:d2:09:7a:55:c0:10:53:84:5a:11:c0:35:f3: 0c:e3:8f:48:5f:6a:3b:cc:28:18:b5:f3:45:53:a5:b2:a8:c0: 56:d6:17:65:d4:46:f1:5e:34:d0:0b:fb:0b:fd:cb:87:5b:09: b1:df:dd:7e:84:93:fa:99:58:cf:da:c2:01:33:03:3d:f3:52: 3e:c2:90:8d:d4:32:c0:8c:ac:18:e4:06:55:18:db:16:96:64: 14:ea:36:74:4c:b1:2c:7f:da:7a:33:bd:07:e5:03:9a:2d:21: 3a:92:28:a4:4c:37:a3:72:43:f0:8d:cd:3c:63:de:b8:ce:6f: a9:47:f1:cb:ca:2c:36:1e:94:d4:6d:32:3c:7d:9f:aa:9c:c5: f1:db:71:69:8a:a4:ee:0f:10:7d:72:2e:e3:9c:99:5b:79:d8: 8a:05:32:7f:54:bb:cb:9c:2c:60:f6:48:b7:f4:a1:7a:bd:af: 90:75:3a:95:4c:e5:cc:f0:15:7e:31:9b:60:c6:cc:ed:d8:a7: 05:78:a1:f1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErX0UNrfPd1mU/JrOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk Yjc4NmQ4NWMtMWQ5ZS00OTM2LWFkYzQtNmM5MThiNzVkMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLg27PFAoiX8583eZ0HHcsr4bk2hkunCTz3r 4Ql65Xg1EUtJ3y9uVbgj/xEQ9zoJ5bOvcSdeELoxusAfhdlhtwtFJtCqBjs+BBBR nencoIp10TrGe2Q8S2UkIogi3K2w+YPqZPSVWcU/l4l/Apt+pS5gup6wf9oMr9/J XeHipu4vD2uVzQ5ySUrnesEHL+dAP5bL5iQY/FarP5r9NulcUbzhh18JBLwVSS3v 5KeMDjApr5PTxMs+bbWdjcrrU6HRNrsdw4GUIuO0gmlwAiYObJDKq+Rv93Hd05Yh OCK2g+kCQQdgjUx3Bg0b8RTaNQONizMW9woQnpTvML1E75g/kQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCKZugIHhwR7DzueM7zdBYrVI0RIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDJlZDMyMDUtZTQ5ZS0z NWE4LWI5NGQtNWY1MzBmMDI2ZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA50UvXmWjfxlg6hNnNZYChOaz6SnZK4aF6Cd1M gC6Nk6M3uGz6umWro7lFayqpWyaishRAx6QF4tPR+tIJelXAEFOEWhHANfMM449I X2o7zCgYtfNFU6WyqMBW1hdl1EbxXjTQC/sL/cuHWwmx391+hJP6mVjP2sIBMwM9 81I+wpCN1DLAjKwY5AZVGNsWlmQU6jZ0TLEsf9p6M70H5QOaLSE6kiikTDejckPw jc08Y964zm+pR/HLyiw2HpTUbTI8fZ+qnMXx23FpiqTuDxB9ci7jnJlbediKBTJ/ VLvLnCxg9ki39KF6va+QdTqVTOXM8BV+MZtgxszt2KcFeKHx -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:56 2025 by rpki-client