$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa File: 733aaa0d-8239-3109-af47-430277d59332.roa (raw, json) Hash identifier: RMODCDt866U6k3V6sQVjNITB1A9uIbnDbEhsaewfVC8= Subject key identifier: CC:F1:F0:70:71:DA:7F:19:D9:81:A3:9F:FB:0E:47:C5:E2:32:08:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F67B7AFD4C23EC9B925080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396586 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7b:7a:fd:4c:23:ec:9b:92:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=d8e478ab-e5f9-45fb-b0ba-79fddc514ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:09:b7:ee:89:04:7d:3a:7a:d6:40:59:d9:b1: bd:00:e3:15:a5:d6:92:c9:8b:cc:49:3d:c7:ac:5f: 49:b9:f6:8b:6d:22:84:51:b9:e8:20:5c:8b:c1:98: 2e:dc:14:84:a2:a1:f2:fa:57:41:1a:73:f2:f0:db: 53:05:83:29:59:5b:6c:ac:b2:de:71:f6:e7:8f:9d: ab:4a:74:5c:a4:81:28:c9:26:39:f2:1b:6b:ab:9c: c5:77:dd:83:da:50:d2:76:36:3a:37:b4:cf:c9:7a: 4f:29:b5:4a:43:61:42:a9:6a:6a:88:03:69:10:5a: 9b:b9:6c:59:0a:00:0c:50:ba:7a:5c:21:84:50:6a: 57:e9:c2:23:fa:06:4f:e6:28:1a:61:49:74:70:ed: 30:03:b0:a4:1b:cf:a2:b5:eb:26:ac:ba:8b:36:9a: 33:ea:34:c2:31:23:79:40:ca:da:10:8b:45:f8:f8: 7d:97:7d:73:fb:7d:23:94:b6:97:32:6a:31:a9:cc: 32:2f:38:21:4c:cb:09:6e:8a:09:54:2c:25:24:17: be:be:0d:be:36:ea:14:80:51:9e:93:42:28:d5:df: 54:eb:77:da:4a:17:fe:ab:7a:d5:50:ae:a3:88:cf: 9a:90:c4:c2:8e:f7:9e:d9:7a:8a:51:8f:3a:fd:11: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F1:F0:70:71:DA:7F:19:D9:81:A3:9F:FB:0E:47:C5:E2:32:08:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/733aaa0d-8239-3109-af47-430277d59332.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b4:ea:2b:83:42:3a:cb:72:12:e2:25:2e:06:10:95:6e:b3: c2:1e:c2:2c:31:b8:90:8d:f0:61:33:a3:f7:ee:4d:50:0f:6a: 86:89:e6:ea:95:df:a5:e5:f5:da:dd:ea:be:cb:e9:05:37:ff: f8:9b:7a:9b:91:ba:7d:b1:e2:9e:77:66:d5:be:fa:03:f1:80: 1b:81:bd:f9:78:e1:8c:ab:01:34:0b:93:12:c7:ca:24:5e:53: d6:af:1f:0b:e1:73:f7:56:fb:1c:b8:5a:63:9f:72:c3:a6:e1: de:1f:62:81:95:20:db:f5:c3:a8:95:18:82:62:d2:b6:e6:94: 04:40:ed:b4:1c:33:d9:37:a8:f1:34:ab:76:20:b0:dc:11:5a: 31:e7:18:cf:4f:07:c4:00:ef:0d:92:a1:7b:3f:f0:7c:a7:9b: 68:5b:c0:30:32:22:f7:64:97:07:18:0e:78:ef:f2:da:a8:7a: 94:80:73:bf:85:40:b1:bd:74:1e:b0:ab:ef:75:92:20:87:64: b4:c5:e9:2d:3c:1b:06:c6:09:29:28:aa:52:6d:c0:2a:d7:f7: 22:12:f0:cc:33:d1:f1:bc:c2:c3:6e:ae:f8:89:55:3f:70:43: 1c:96:ed:f1:26:d2:f7:70:d1:b5:ed:7e:03:3b:4d:0b:c4:1f: e8:e7:0d:a1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nt6/Uwj7JuSUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ZDhlNDc4YWItZTVmOS00NWZiLWIwYmEtNzlmZGRjNTE0YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAm37okEfTp61kBZ2bG9AOMVpdaSyYvMST3H rF9JufaLbSKEUbnoIFyLwZgu3BSEoqHy+ldBGnPy8NtTBYMpWVtsrLLecfbnj52r SnRcpIEoySY58htrq5zFd92D2lDSdjY6N7TPyXpPKbVKQ2FCqWpqiANpEFqbuWxZ CgAMULp6XCGEUGpX6cIj+gZP5igaYUl0cO0wA7CkG8+itesmrLqLNpoz6jTCMSN5 QMraEItF+Ph9l31z+30jlLaXMmoxqcwyLzghTMsJbooJVCwlJBe+vg2+NuoUgFGe k0Io1d9U63faShf+q3rVUK6jiM+akMTCjvee2XqKUY86/RHOWQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMzx8HBx2n8Z2YGjn/sOR8XiMgg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzMzYWFhMGQtODIzOS0z MTA5LWFmNDctNDMwMjc3ZDU5MzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1tOorg0I6y3IS4iUuBhCVbrPCHsIsMbiQjfBh M6P37k1QD2qGiebqld+l5fXa3eq+y+kFN//4m3qbkbp9seKed2bVvvoD8YAbgb35 eOGMqwE0C5MSx8okXlPWrx8L4XP3VvscuFpjn3LDpuHeH2KBlSDb9cOolRiCYtK2 5pQEQO20HDPZN6jxNKt2ILDcEVox5xjPTwfEAO8NkqF7P/B8p5toW8AwMiL3ZJcH GA547/LaqHqUgHO/hUCxvXQesKvvdZIgh2S0xektPBsGxgkpKKpSbcAq1/ciEvDM M9HxvMLDbq74iVU/cEMclu3xJtL3cNG17X4DO00LxB/o5w2h -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:05 2025 by rpki-client