$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa File: 43e81f08-18fa-32d3-90e2-7115a8a6c472.roa (raw, json) Hash identifier: H2SygPwRemH8pXk8HvEMztId76tK5+JDNwD8OOx6ACI= Subject key identifier: CE:D1:CA:3D:C4:22:5B:C0:2D:67:C9:81:3B:91:8C:0B:99:BC:3E:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196C738B8D5B0B64DC9FE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 36631 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:c7:38:b8:d5:b0:b6:4d:c9:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=1ec8a0c3-7efe-4580-b57a-8ca5252db5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:e9:08:e3:a6:d7:96:02:13:70:4d:cd:da: c0:66:fe:9d:62:57:e1:ea:53:32:e3:98:65:72:53: a0:65:df:0f:d4:c9:a0:5c:55:93:21:e5:ed:d1:ec: 50:83:b9:0b:2e:75:80:7c:c1:f5:9c:e5:03:fe:9a: db:38:38:c8:42:ee:04:a6:e4:fe:48:45:70:22:ec: 9d:c2:ba:44:f6:c5:96:d9:fa:2b:23:7f:25:b4:1e: 87:7b:3a:72:92:cc:2d:e9:8e:91:96:14:f9:f0:dd: c8:09:0f:69:05:44:a5:72:52:34:db:cc:e7:bc:87: d3:b9:ee:eb:0b:e3:af:8e:27:ee:02:da:75:74:97: 82:4f:4e:2f:fd:06:ee:23:3a:56:8a:cc:94:bc:5d: bd:dc:84:a7:db:fe:7b:93:46:6b:47:f9:78:bb:ae: c6:ac:21:c4:96:cc:9a:20:3c:af:0f:7f:95:1c:b9: d6:26:63:aa:c6:4c:00:db:e8:8e:26:d8:dc:39:d6: 06:13:bc:df:23:66:54:d5:72:98:58:4b:39:c8:08: b4:17:12:f9:7c:2a:f6:72:a5:8d:7a:98:3f:d7:f5: 41:d1:60:9e:e9:c9:98:d1:18:74:02:ae:1e:1b:ed: b8:80:36:90:e9:02:1c:63:ad:b4:85:22:7b:8d:90: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D1:CA:3D:C4:22:5B:C0:2D:67:C9:81:3B:91:8C:0B:99:BC:3E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43e81f08-18fa-32d3-90e2-7115a8a6c472.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:96:2c:88:6d:98:40:cf:6d:77:1c:19:a5:31:5a:35:a7:e3: 71:37:d1:3c:80:fa:af:7f:02:69:22:e6:13:f4:8b:75:a6:76: 8c:ea:24:1a:28:58:0c:c0:71:dc:d8:73:d0:3d:55:ac:03:80: 2c:7c:f6:9c:9c:bc:0e:ac:cb:60:a4:92:a8:ec:da:c3:be:6a: b5:c6:33:d5:11:ec:79:c1:53:71:ba:f1:98:0f:81:c6:7c:a9: ab:f9:21:44:1c:6c:44:c5:16:af:4e:c1:b3:ac:17:5e:5e:1f: 01:a1:68:54:4d:08:2f:a4:62:6b:81:83:03:a2:5d:7e:92:67: 4c:50:bb:50:a6:09:59:f5:25:a0:72:52:bd:ac:48:23:83:f8: 59:26:f9:1b:d7:1a:23:ac:74:b3:22:f0:35:05:a6:8a:0d:22: 07:1c:1b:f2:33:bf:66:42:cf:56:fb:df:d8:50:6b:6a:8d:8b: 88:fa:ff:e9:fc:ce:d3:40:e3:30:eb:59:05:78:c8:f3:cd:b0: 5a:57:0b:7b:63:a9:72:c5:34:fe:ea:58:12:14:98:d6:9a:ba: 93:47:4d:94:0e:30:41:b4:bc:1d:96:b2:12:58:e5:d3:c8:b6: b3:a8:8a:e6:48:b0:bc:78:94:d7:9e:6f:90:66:2a:99:d7:92: 07:d4:dd:93 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlsc4uNWwtk3J/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MWVjOGEwYzMtN2VmZS00NTgwLWI1N2EtOGNhNTI1MmRiNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5DpCOOm15YCE3BNzdrAZv6dYlfh6lMy45hl clOgZd8P1MmgXFWTIeXt0exQg7kLLnWAfMH1nOUD/prbODjIQu4EpuT+SEVwIuyd wrpE9sWW2forI38ltB6Hezpykswt6Y6RlhT58N3ICQ9pBUSlclI028znvIfTue7r C+OvjifuAtp1dJeCT04v/QbuIzpWisyUvF293ISn2/57k0ZrR/l4u67GrCHElsya IDyvD3+VHLnWJmOqxkwA2+iOJtjcOdYGE7zfI2ZU1XKYWEs5yAi0FxL5fCr2cqWN epg/1/VB0WCe6cmY0Rh0Aq4eG+24gDaQ6QIcY620hSJ7jZB6qQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM7Ryj3EIlvALWfJgTuRjAuZvD5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNlODFmMDgtMThmYS0z MmQzLTkwZTItNzExNWE4YTZjNDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCrliyIbZhAz213HBmlMVo1p+NxN9E8gPqvfwJp IuYT9It1pnaM6iQaKFgMwHHc2HPQPVWsA4AsfPacnLwOrMtgpJKo7NrDvmq1xjPV Eex5wVNxuvGYD4HGfKmr+SFEHGxExRavTsGzrBdeXh8BoWhUTQgvpGJrgYMDol1+ kmdMULtQpglZ9SWgclK9rEgjg/hZJvkb1xojrHSzIvA1BaaKDSIHHBvyM79mQs9W +9/YUGtqjYuI+v/p/M7TQOMw61kFeMjzzbBaVwt7Y6lyxTT+6lgSFJjWmrqTR02U DjBBtLwdlrISWOXTyLazqIrmSLC8eJTXnm+QZiqZ15IH1N2T -----END CERTIFICATE-----Generated at Sat Aug 23 13:12:31 2025 by rpki-client