$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64976aeb-6603-39dc-a238-19d0893b3655.roa File: 64976aeb-6603-39dc-a238-19d0893b3655.roa (raw, json) Hash identifier: Jiyh9NhpxxaZg+5eIRLTDXtvtpHxrfHqjdOf0kn3H1E= Subject key identifier: 31:B6:30:02:ED:E9:F5:DC:54:D3:FE:45:EF:BD:D8:7D:54:9D:D9:4C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F67382871FBF825CBA4B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64976aeb-6603-39dc-a238-19d0893b3655.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 397204 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:73:82:87:1f:bf:82:5c:ba:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=29d9e660-b9fd-4b67-ab36-c8769494b29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:5f:8f:24:77:bd:d8:ee:6c:d3:62:8e:75: cd:02:29:25:8c:c6:eb:07:ee:9f:c1:d4:7c:c5:16: 7d:1c:d4:ba:f6:36:c1:9c:55:58:ac:f2:49:64:07: 8d:f5:42:65:4d:f4:ab:c3:15:cb:c0:2c:be:2c:2d: c2:59:58:fc:b0:77:c9:98:01:23:a7:e8:4f:b9:44: ad:cd:d7:70:9c:46:5a:b1:33:1d:85:b9:7e:ba:96: cd:18:48:20:d1:40:bf:10:75:cf:16:47:52:49:1c: a0:3b:16:d8:e0:27:ac:ec:e7:eb:c8:8c:52:07:8c: f3:0f:f3:33:57:b5:6c:3e:d5:1e:1d:7e:91:6d:bf: 45:00:9a:ef:47:ee:53:bf:19:93:41:96:c5:47:0a: 86:1b:d1:b9:97:b8:25:c3:dd:a7:cd:05:ea:3e:58: be:76:b5:9e:c0:31:76:e1:8a:22:00:e5:e6:b1:2e: ba:da:ab:4f:fe:9f:e6:0e:43:90:15:28:ec:69:e7: a8:35:3f:69:d5:3c:6b:3c:ba:62:f9:a0:d4:8f:74: ba:30:e0:9e:0f:0f:1a:39:6f:3e:86:2f:51:c7:fd: 45:25:72:13:57:34:23:fb:6c:11:66:70:c5:95:f5: 14:be:b8:a8:f5:82:1b:ab:2e:29:65:ac:20:7d:8d: 3c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B6:30:02:ED:E9:F5:DC:54:D3:FE:45:EF:BD:D8:7D:54:9D:D9:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64976aeb-6603-39dc-a238-19d0893b3655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3b:17:4d:ab:76:6e:97:17:08:d5:b7:f3:fd:10:30:93:31: cb:55:7a:b9:d1:9d:49:6a:0c:66:b3:4c:4e:bd:4c:36:c8:d5: d5:c4:51:3c:ea:34:a4:35:8e:5d:6d:4d:12:4e:82:ae:86:82: ac:de:30:04:f9:a7:79:4d:cb:b0:c0:15:ef:64:52:00:2f:7c: e7:57:84:14:90:3a:45:ab:cb:40:da:f9:84:d8:01:f5:79:e5: 11:36:40:4f:ba:6d:de:6c:69:d8:19:64:f5:6f:ba:fe:74:14: c9:1a:4b:d0:5a:2a:62:92:2c:43:74:b9:92:40:ff:0a:e7:cb: a6:45:34:9d:c5:1d:e9:c3:b3:31:d9:8e:c4:9c:5e:3e:4c:89: d7:ce:16:85:7b:6f:0b:9a:2f:a7:4c:34:27:60:9e:ad:da:6a: 52:46:ba:07:ae:23:4a:7e:14:46:14:05:0a:3a:aa:f5:9c:2d: 08:30:6a:3b:ef:c3:a5:70:f5:57:e9:b5:42:5e:35:30:b6:5d: fe:2c:b5:f7:5e:52:b6:0a:94:e3:20:bd:da:aa:1b:76:1a:38: 3f:0e:3e:69:b5:9b:a9:5a:83:ee:c7:2c:50:46:f6:da:fa:36: 5a:47:46:8f:f7:38:bb:5e:c7:7c:74:f0:70:a4:1d:fa:28:47: da:4f:2a:ec -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nOChx+/gly6S4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MjlkOWU2NjAtYjlmZC00YjY3LWFiMzYtYzg3Njk0OTRiMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytVfjyR3vdjubNNijnXNAikljMbrB+6fwdR8 xRZ9HNS69jbBnFVYrPJJZAeN9UJlTfSrwxXLwCy+LC3CWVj8sHfJmAEjp+hPuUSt zddwnEZasTMdhbl+upbNGEgg0UC/EHXPFkdSSRygOxbY4Ces7OfryIxSB4zzD/Mz V7VsPtUeHX6Rbb9FAJrvR+5TvxmTQZbFRwqGG9G5l7glw92nzQXqPli+drWewDF2 4YoiAOXmsS662qtP/p/mDkOQFSjsaeeoNT9p1TxrPLpi+aDUj3S6MOCeDw8aOW8+ hi9Rx/1FJXITVzQj+2wRZnDFlfUUvrio9YIbqy4pZawgfY086wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDG2MALt6fXcVNP+Re+92H1UndlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ5NzZhZWItNjYwMy0z OWRjLWEyMzgtMTlkMDg5M2IzNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhOxdNq3ZulxcI1bfz/RAwkzHLVXq50Z1Jagxm s0xOvUw2yNXVxFE86jSkNY5dbU0SToKuhoKs3jAE+ad5TcuwwBXvZFIAL3znV4QU kDpFq8tA2vmE2AH1eeURNkBPum3ebGnYGWT1b7r+dBTJGkvQWipikixDdLmSQP8K 58umRTSdxR3pw7Mx2Y7EnF4+TInXzhaFe28Lmi+nTDQnYJ6t2mpSRroHriNKfhRG FAUKOqr1nC0IMGo778OlcPVX6bVCXjUwtl3+LLX3XlK2CpTjIL3aqht2Gjg/Dj5p tZupWoPuxyxQRvba+jZaR0aP9zi7Xsd8dPBwpB36KEfaTyrs -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:29 2025 by rpki-client