$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa File: 89c06455-1970-3ace-94ff-3ae3d7e39c35.roa (raw, json) Hash identifier: OTkSSnfnVf/yqZTKUO+r9xjjUb8avLLBhRnJQCxVgcI= Subject key identifier: FF:07:C3:1B:6A:45:92:9F:80:E8:18:5E:BA:E6:D6:87:B7:43:7A:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AD7D1444572F91EFEF731DB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 396572 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:44:45:72:f9:1e:fe:f7:31:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=23ea6b9e-b12e-423e-a765-7c1a9ad24a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:1d:ce:b9:b5:15:78:8b:40:75:a8:44:df: d9:23:bb:29:05:fa:d3:34:06:53:a7:ae:44:0c:91: 47:29:38:76:9d:f1:2a:83:43:7a:22:c1:00:bf:3a: ec:50:35:8a:49:37:aa:0f:1a:2a:50:05:aa:c2:45: 35:d2:2d:bd:33:a2:88:f2:fa:2f:00:53:ca:35:3d: 7f:bb:c4:25:3e:2c:68:ae:db:6a:04:1a:5a:6f:ed: a4:b3:bd:c0:3d:f0:02:5a:d9:34:5c:e8:91:8e:ad: 04:92:87:1b:89:25:45:d0:78:e7:76:d7:12:ec:11: b2:01:be:b8:a3:9a:b0:54:7c:b9:bf:50:ba:de:c3: ad:81:46:64:68:f1:4a:d8:b0:ef:2b:b0:55:ca:02: f4:43:24:5b:1f:11:bb:6e:56:e0:c0:c3:9f:39:a7: 42:39:6d:56:e1:61:ac:b3:22:cf:0a:86:31:eb:2c: ca:23:19:26:c8:07:b3:57:7f:23:d6:38:35:d6:30: 46:70:a0:2e:c1:96:67:e9:dc:f9:6f:bc:ef:0e:27: e5:e7:a4:64:df:77:23:bd:08:29:34:4f:8b:c8:12: c0:c0:bd:c1:20:84:d2:63:72:c3:04:ea:15:1a:e4: 0f:2b:d7:f8:97:67:82:2c:03:b1:37:1a:8a:d1:66: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:07:C3:1B:6A:45:92:9F:80:E8:18:5E:BA:E6:D6:87:B7:43:7A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89c06455-1970-3ace-94ff-3ae3d7e39c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:e0:f3:f8:49:19:c2:5e:45:74:12:88:66:f1:5a:13:38:60: b1:a8:0d:f8:6d:fd:3e:51:ff:51:a1:30:e5:8d:9e:b5:f7:cd: ab:15:d1:c0:17:f6:dd:3b:08:70:24:a1:27:02:65:6a:7b:15: 99:68:36:c7:f7:99:47:01:39:52:b7:a1:0a:7d:14:48:dc:05: 93:b9:36:d0:01:35:f9:7f:44:05:36:8f:82:33:84:55:4f:c6: 4c:d9:77:29:71:20:60:6a:29:2f:eb:5e:9c:06:92:ac:3c:7f: 66:6e:78:3a:13:c1:f1:b2:26:66:45:4b:c5:72:91:f4:53:20: c6:d3:72:68:0a:2c:7d:3a:58:68:77:b1:0b:a6:34:ce:84:f2: 8d:86:62:17:bb:fd:d6:66:b0:e9:53:2f:a7:63:1b:f1:bc:12: 97:ca:79:fa:a8:8f:41:9b:d4:5d:ba:cd:6f:8e:40:d8:83:b6: 57:ae:db:ca:e7:4c:8c:27:2d:c8:15:49:a5:d1:5a:25:ee:4a: 54:f7:62:19:dd:03:a7:72:96:85:93:b8:b1:8d:d3:e8:f0:20: c9:97:fc:bc:a4:7c:fb:1f:09:55:ed:fd:a1:59:c8:84:ce:82: 33:dc:43:50:c9:7d:9b:41:23:cb:2c:9e:5d:6e:22:04:38:b0: b2:00:a3:c9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErX0URFcvke/vcx24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk MjNlYTZiOWUtYjEyZS00MjNlLWE3NjUtN2MxYTlhZDI0YTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL8dzrm1FXiLQHWoRN/ZI7spBfrTNAZTp65E DJFHKTh2nfEqg0N6IsEAvzrsUDWKSTeqDxoqUAWqwkU10i29M6KI8vovAFPKNT1/ u8QlPixorttqBBpab+2ks73APfACWtk0XOiRjq0EkocbiSVF0HjndtcS7BGyAb64 o5qwVHy5v1C63sOtgUZkaPFK2LDvK7BVygL0QyRbHxG7blbgwMOfOadCOW1W4WGs syLPCoYx6yzKIxkmyAezV38j1jg11jBGcKAuwZZn6dz5b7zvDifl56Rk33cjvQgp NE+LyBLAwL3BIITSY3LDBOoVGuQPK9f4l2eCLAOxNxqK0WaQ+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP8HwxtqRZKfgOgYXrrm1oe3Q3qnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODljMDY0NTUtMTk3MC0z YWNlLTk0ZmYtM2FlM2Q3ZTM5YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCU4PP4SRnCXkV0Eohm8VoTOGCxqA34bf0+Uf9R oTDljZ61982rFdHAF/bdOwhwJKEnAmVqexWZaDbH95lHATlSt6EKfRRI3AWTuTbQ ATX5f0QFNo+CM4RVT8ZM2XcpcSBgaikv616cBpKsPH9mbng6E8HxsiZmRUvFcpH0 UyDG03JoCix9Olhod7ELpjTOhPKNhmIXu/3WZrDpUy+nYxvxvBKXynn6qI9Bm9Rd us1vjkDYg7ZXrtvK50yMJy3IFUml0Vol7kpU92IZ3QOncpaFk7ixjdPo8CDJl/y8 pHz7HwlV7f2hWciEzoIz3ENQyX2bQSPLLJ5dbiIEOLCyAKPJ -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:39 2025 by rpki-client