$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7644bdae-5e30-3662-beb2-5f7b376dde7a.roa File: 7644bdae-5e30-3662-beb2-5f7b376dde7a.roa (raw, json) Hash identifier: pOgW33DEcDPk4XEB1Y7JC/X0VdrkVgruqDvLIYAWkZk= Subject key identifier: B6:B5:A7:24:F8:03:BE:45:72:6D:8F:DA:9B:D5:2E:78:B0:E1:08:8E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AD7D146C9752454CD04B5B680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7644bdae-5e30-3662-beb2-5f7b376dde7a.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 396566 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:46:c9:75:24:54:cd:04:b5:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=a733f3ba-81da-49f7-80fe-0c24ab36e2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:86:a2:62:3a:55:26:f7:75:6d:e2:9d:b8: 94:17:23:b9:5a:4b:f7:3e:1f:98:31:d6:1b:c2:fb: 02:8d:49:d5:e9:93:6d:fd:31:2c:f2:72:f5:ca:da: 3a:81:d2:0e:24:bb:fd:32:04:68:ec:93:97:b9:2e: d4:42:4b:8c:9a:04:90:06:e7:33:6b:91:05:df:96: 34:13:5a:45:46:cd:d3:d1:43:dd:ee:61:33:7d:fc: bd:76:72:d1:64:c3:a8:c6:93:f7:b9:e1:f7:aa:14: c8:85:9d:83:6b:ec:3f:d3:2b:0c:62:44:65:c1:df: b0:8d:f9:5d:b2:34:fc:31:f8:01:a8:d0:13:0e:da: 49:f8:55:e8:6a:f9:0f:8b:bb:f8:b8:89:6d:57:9a: 06:cb:ea:fb:d1:65:39:f2:f9:77:69:f8:f9:55:94: 6a:2e:5a:f0:ad:09:9b:25:de:b5:a8:08:e5:df:5a: 15:50:da:ca:52:0e:a2:01:05:f6:2d:e8:f0:bb:18: ac:39:d4:f9:ba:cd:aa:aa:9a:c6:a2:93:51:76:f4: 1f:fa:bf:d5:ff:32:9a:87:fd:d3:2c:c0:8c:05:96: 84:8a:5a:bf:0a:c3:00:93:75:11:76:5e:c1:bd:32: 7c:58:59:e3:24:b7:05:cd:c9:1b:78:09:22:d7:96: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B5:A7:24:F8:03:BE:45:72:6D:8F:DA:9B:D5:2E:78:B0:E1:08:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7644bdae-5e30-3662-beb2-5f7b376dde7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:14:70:8f:58:8f:cf:24:17:78:49:e2:d6:48:0c:2a:1c:72: 80:58:34:be:49:84:d7:71:34:84:3d:77:cd:b4:9c:cc:66:0f: 75:27:2b:b0:f7:c8:61:e4:ab:20:d2:ed:8e:f8:97:3b:e3:ec: 81:f6:a5:a8:8e:e7:a6:43:52:4b:3a:e8:97:68:66:65:7a:10: da:36:32:da:0b:15:83:69:f0:30:aa:c8:57:2a:52:97:ce:c5: 22:5c:92:03:64:be:31:5c:cb:eb:48:78:bd:f8:4e:bc:1f:8e: 26:c7:d8:d0:f7:c7:34:dc:cc:32:2d:82:0e:59:39:ef:a2:53: 70:5f:54:64:52:b0:7e:34:f2:dc:97:a9:aa:c8:1f:f3:62:40: b5:03:32:63:84:98:af:91:c2:29:7f:25:06:21:20:c1:db:c0: 94:93:ea:12:ce:37:58:0f:83:be:99:03:8e:f2:d8:7b:c3:ab: 15:3e:44:76:88:10:83:2c:82:a8:e2:91:f3:6d:72:98:95:09: 81:00:9d:7d:75:39:dc:89:dc:1c:24:f6:36:eb:e3:bf:f5:ac: d4:8c:1b:88:94:36:65:e4:95:f9:37:40:fe:e7:2d:e6:57:ad: 38:b6:75:39:19:a9:48:47:fb:d8:3f:17:b0:1e:8f:58:fc:0b: be:a6:5d:63 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErX0UbJdSRUzQS1toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk YTczM2YzYmEtODFkYS00OWY3LTgwZmUtMGMyNGFiMzZlMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6yGomI6VSb3dW3inbiUFyO5Wkv3Ph+YMdYb wvsCjUnV6ZNt/TEs8nL1yto6gdIOJLv9MgRo7JOXuS7UQkuMmgSQBucza5EF35Y0 E1pFRs3T0UPd7mEzffy9dnLRZMOoxpP3ueH3qhTIhZ2Da+w/0ysMYkRlwd+wjfld sjT8MfgBqNATDtpJ+FXoavkPi7v4uIltV5oGy+r70WU58vl3afj5VZRqLlrwrQmb Jd61qAjl31oVUNrKUg6iAQX2LejwuxisOdT5us2qqprGopNRdvQf+r/V/zKah/3T LMCMBZaEilq/CsMAk3URdl7BvTJ8WFnjJLcFzckbeAki15YRBQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLa1pyT4A75Fcm2P2pvVLniw4QiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzY0NGJkYWUtNWUzMC0z NjYyLWJlYjItNWY3YjM3NmRkZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAFHCPWI/PJBd4SeLWSAwqHHKAWDS+SYTXcTSE PXfNtJzMZg91Jyuw98hh5Ksg0u2O+Jc74+yB9qWojuemQ1JLOuiXaGZlehDaNjLa CxWDafAwqshXKlKXzsUiXJIDZL4xXMvrSHi9+E68H44mx9jQ98c03MwyLYIOWTnv olNwX1RkUrB+NPLcl6mqyB/zYkC1AzJjhJivkcIpfyUGISDB28CUk+oSzjdYD4O+ mQOO8th7w6sVPkR2iBCDLIKo4pHzbXKYlQmBAJ19dTncidwcJPY26+O/9azUjBuI lDZl5JX5N0D+5y3mV604tnU5GalIR/vYPxewHo9Y/Au+pl1j -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:53 2025 by rpki-client