$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436403c2-7414-3e87-ba9a-055f1e16ee5a.roa File: 436403c2-7414-3e87-ba9a-055f1e16ee5a.roa (raw, json) Hash identifier: 7EYwbIy9+pcMbqth4lkILvHVRc7i/KIpAiuiXRuk0H0= Subject key identifier: 98:8B:A9:61:8A:14:8C:2B:AD:58:38:FC:E6:56:54:79:7E:82:BD:8C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196E756BDB54354A88E7BC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436403c2-7414-3e87-ba9a-055f1e16ee5a.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 36625 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:e7:56:bd:b5:43:54:a8:8e:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=ceeef08c-88b1-4206-ad45-0f4e81773924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:49:fb:93:e0:2e:ea:69:03:13:7c:e1:76: d1:05:7a:8a:78:cb:b3:54:b4:df:e0:bf:2f:d3:f5: b4:9b:b7:6e:29:49:2d:ae:a3:a2:7e:ee:22:98:9d: ac:ce:b6:d2:74:16:64:9a:f6:f9:be:d8:2f:98:78: 55:35:da:72:be:be:25:b7:68:36:c8:23:1c:2f:69: 6e:5a:38:9e:3d:cd:6c:45:17:5c:4d:8a:c7:43:5a: f0:32:3c:7a:60:4f:82:a5:cf:fe:68:94:91:d8:40: 7e:bd:28:1f:27:e9:8d:0b:f7:c5:42:e1:9e:76:d3: fe:28:3e:04:ff:e8:71:6a:a4:5c:89:c8:fd:7a:43: e7:b0:3f:03:8a:de:71:b1:ad:d5:65:7d:7a:35:5d: 1f:a9:7f:53:16:ee:27:b2:c2:48:41:db:0e:df:6c: a0:70:83:5b:48:8a:ee:c7:08:fe:24:07:6f:38:2d: 1a:26:33:25:b8:34:c4:e1:e2:04:44:55:6f:cb:3a: 78:4e:d8:f4:b4:0e:25:50:e6:aa:dd:4a:f6:d4:5e: 06:18:dc:f8:44:1d:06:29:02:49:01:2a:3f:c3:b2: fa:47:e2:a6:81:3d:ab:e2:d0:10:8c:24:a7:58:99: 2a:b5:ee:ed:ad:f0:fe:7c:9a:08:41:55:5a:4b:1c: 12:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8B:A9:61:8A:14:8C:2B:AD:58:38:FC:E6:56:54:79:7E:82:BD:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436403c2-7414-3e87-ba9a-055f1e16ee5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:82:9a:61:b5:0d:0f:f7:45:bd:e5:e0:3e:b3:7e:15:be:f3: 71:6b:20:7c:68:33:e3:dd:ab:67:69:10:bc:32:9b:e2:c4:0d: 1e:2e:38:be:2d:f3:97:f2:4c:e9:a2:5b:06:19:b4:09:9f:19: f9:57:56:30:99:d8:c8:fd:d2:84:b4:eb:6a:46:d7:b8:f4:ec: 21:7c:85:81:0d:73:57:f0:c0:f7:44:ff:1a:3f:a1:f5:72:c4: b7:81:18:15:a4:d4:39:7b:12:53:08:29:ec:4d:12:91:22:c9: 7c:e2:6f:28:8d:4e:0f:24:1f:d8:17:e2:0f:02:0d:d5:9e:8b: 59:7f:c6:15:4b:5c:47:16:f6:b7:d5:8a:d8:3d:ed:10:fb:ee: cb:66:1b:cb:de:51:06:76:67:18:0b:09:b5:3c:9e:f3:65:d6: f4:23:11:46:e5:44:42:fb:52:31:5c:51:bf:81:5c:8f:9b:e8: 5c:64:3f:d0:5e:46:5b:5f:dc:f6:3f:8d:ff:b2:b2:bc:07:72: c3:5a:80:5e:d8:15:a6:68:2e:57:dd:e5:10:fe:29:2f:b4:ae: c0:f6:dc:85:e6:0d:c3:ca:9b:ac:0d:e2:6e:ce:de:7e:d8:e7: d1:52:b7:ae:5e:37:dd:20:d5:1f:01:9a:84:4d:9d:8e:39:f6: 64:33:b3:51 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhludWvbVDVKiOe8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk Y2VlZWYwOGMtODhiMS00MjA2LWFkNDUtMGY0ZTgxNzczOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2tJ+5PgLuppAxN84XbRBXqKeMuzVLTf4L8v 0/W0m7duKUktrqOifu4imJ2szrbSdBZkmvb5vtgvmHhVNdpyvr4lt2g2yCMcL2lu WjiePc1sRRdcTYrHQ1rwMjx6YE+Cpc/+aJSR2EB+vSgfJ+mNC/fFQuGedtP+KD4E /+hxaqRcicj9ekPnsD8Dit5xsa3VZX16NV0fqX9TFu4nssJIQdsO32ygcINbSIru xwj+JAdvOC0aJjMluDTE4eIERFVvyzp4Ttj0tA4lUOaq3Ur21F4GGNz4RB0GKQJJ ASo/w7L6R+KmgT2r4tAQjCSnWJkqte7trfD+fJoIQVVaSxwSxQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJiLqWGKFIwrrVg4/OZWVHl+gr2MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM2NDAzYzItNzQxNC0z ZTg3LWJhOWEtMDU1ZjFlMTZlZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAygpphtQ0P90W95eA+s34VvvNxayB8aDPj3atn aRC8MpvixA0eLji+LfOX8kzpolsGGbQJnxn5V1YwmdjI/dKEtOtqRte49OwhfIWB DXNX8MD3RP8aP6H1csS3gRgVpNQ5exJTCCnsTRKRIsl84m8ojU4PJB/YF+IPAg3V notZf8YVS1xHFva31YrYPe0Q++7LZhvL3lEGdmcYCwm1PJ7zZdb0IxFG5URC+1Ix XFG/gVyPm+hcZD/QXkZbX9z2P43/srK8B3LDWoBe2BWmaC5X3eUQ/ikvtK7A9tyF 5g3DypusDeJuzt5+2OfRUreuXjfdINUfAZqETZ2OOfZkM7NR -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:27 2025 by rpki-client