$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa File: 84db4c5a-a983-3f25-880d-e7b259a1e26e.roa (raw, json) Hash identifier: XGPSbM2TmK6OkLFW5UXlA9wHAlMIukUCi7PTja5IHBc= Subject key identifier: 5B:68:BC:99:33:05:F9:C0:A0:10:F5:4E:1B:35:13:1D:AA:22:F9:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE197011486F4CE3476C9ABC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 396573 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:01:14:86:f4:ce:34:76:c9:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=1e9766bb-cace-4ecc-a49e-d012af0ed159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:62:43:32:4c:d7:53:9e:b7:60:80:ab:00:52: cb:6a:fc:52:8c:d2:dc:a9:b2:58:59:76:e7:10:1d: 75:61:39:ad:de:f0:f8:66:ce:60:0e:62:b0:3e:27: 08:b9:cd:96:bb:d6:66:10:db:4c:51:f7:5b:73:1f: 69:bf:51:e1:11:f0:a5:d9:31:21:5f:a9:92:5b:db: 18:15:be:d7:4e:4b:da:ab:68:f0:3b:75:0b:46:0d: 63:07:17:d8:74:22:8f:c0:2e:f1:5f:de:c6:94:65: a1:bf:b7:f6:65:97:15:cb:d2:ad:52:1c:7d:ee:56: 2a:fd:2c:f3:37:0b:69:c1:c7:84:45:36:bf:35:2e: 86:ce:17:d1:00:0a:1e:64:b7:c7:31:a3:64:83:70: c5:50:49:cd:88:a8:90:49:8b:9c:a2:5b:55:3f:b1: 6b:f0:af:4f:e6:57:66:5a:53:74:25:d0:be:7d:f1: cb:dd:b6:3f:15:70:6b:23:dc:5a:fd:27:fa:74:73: 6d:42:08:3a:82:69:92:2c:3d:4a:cc:c9:e1:a9:7b: d3:04:de:95:2e:3f:09:34:41:a8:3c:e0:c6:97:31: 44:ff:5e:88:ed:c9:c2:cf:55:b5:b1:3b:fe:40:a5: 8b:5e:71:81:22:7f:09:2b:5f:07:5c:70:de:74:e5: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:BC:99:33:05:F9:C0:A0:10:F5:4E:1B:35:13:1D:AA:22:F9:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/84db4c5a-a983-3f25-880d-e7b259a1e26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e0:9d:c8:87:8d:07:6f:5f:22:06:89:8b:6d:02:ed:8e:ca: 3b:24:48:6c:67:9e:7d:30:4c:f1:e8:39:52:17:6b:3b:c9:7b: e6:cc:14:ac:41:36:81:df:f2:cc:d2:c1:ae:34:2a:cf:fc:1e: c9:32:7b:75:ea:09:e7:1f:c9:32:0e:bc:e1:61:e3:7d:be:eb: 37:d8:0e:c3:66:17:8e:54:43:ce:29:ff:2d:08:49:97:34:e7: 46:f0:e0:df:02:5e:c2:ba:db:c6:c8:2d:21:30:f7:3b:88:12: 68:b2:03:52:e4:5e:7d:e3:ff:89:9e:9f:04:54:a2:c4:a3:8f: cd:72:ac:13:ae:59:44:0b:8e:a5:24:6d:20:eb:0b:d2:d1:80: a1:0f:11:00:f1:43:19:09:1b:6f:e7:d0:3a:e8:a9:8b:70:ed: 7e:77:d4:79:ef:8d:94:29:cb:71:84:ec:ce:8a:bd:13:60:cb: ef:7b:c6:8c:b2:6e:78:af:c7:4b:83:4c:22:11:7d:91:73:2b: f3:37:f5:58:9f:b3:70:b0:41:15:2f:aa:0a:3b:55:f8:7d:e2: d0:e1:48:7f:7d:a7:8f:b7:cf:8e:5e:ce:1b:50:a0:81:90:91: 8b:81:89:28:0d:43:39:19:a6:52:cf:9a:b9:8c:7f:35:3c:a9: 4f:34:b6:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlwEUhvTONHbJq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MWU5NzY2YmItY2FjZS00ZWNjLWE0OWUtZDAxMmFmMGVkMTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2JDMkzXU563YICrAFLLavxSjNLcqbJYWXbn EB11YTmt3vD4Zs5gDmKwPicIuc2Wu9ZmENtMUfdbcx9pv1HhEfCl2TEhX6mSW9sY Fb7XTkvaq2jwO3ULRg1jBxfYdCKPwC7xX97GlGWhv7f2ZZcVy9KtUhx97lYq/Szz NwtpwceERTa/NS6GzhfRAAoeZLfHMaNkg3DFUEnNiKiQSYucoltVP7Fr8K9P5ldm WlN0JdC+ffHL3bY/FXBrI9xa/Sf6dHNtQgg6gmmSLD1KzMnhqXvTBN6VLj8JNEGo PODGlzFE/16I7cnCz1W1sTv+QKWLXnGBIn8JK18HXHDedOULjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFtovJkzBfnAoBD1Ths1Ex2qIvk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODRkYjRjNWEtYTk4My0z ZjI1LTg4MGQtZTdiMjU5YTFlMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBP4J3Ih40Hb18iBomLbQLtjso7JEhsZ559MEzx 6DlSF2s7yXvmzBSsQTaB3/LM0sGuNCrP/B7JMnt16gnnH8kyDrzhYeN9vus32A7D ZheOVEPOKf8tCEmXNOdG8ODfAl7CutvGyC0hMPc7iBJosgNS5F594/+Jnp8EVKLE o4/NcqwTrllEC46lJG0g6wvS0YChDxEA8UMZCRtv59A66KmLcO1+d9R5742UKctx hOzOir0TYMvve8aMsm54r8dLg0wiEX2RcyvzN/VYn7NwsEEVL6oKO1X4feLQ4Uh/ faePt8+OXs4bUKCBkJGLgYkoDUM5GaZSz5q5jH81PKlPNLYm -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:16 2025 by rpki-client