$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926538e4-ca01-3a2a-aecd-aec581fd6414.roa File: 926538e4-ca01-3a2a-aecd-aec581fd6414.roa (raw, json) Hash identifier: bEHtmCbIsxs1Kk8hvClC+CRlm6xRFV+7Ef+buDkpjC4= Subject key identifier: 50:6B:37:B7:9A:9A:0D:F8:D7:2D:0C:AD:2B:78:50:05:20:78:FD:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE4613848456ADEBC5DE7B8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926538e4-ca01-3a2a-aecd-aec581fd6414.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 397201 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:38:48:45:6a:de:bc:5d:e7:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=b60aaf16-0e50-478c-9fa3-3d6ccd803431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e5:c0:66:14:29:fb:c9:82:4b:8e:56:7d:4c: 5b:db:e4:00:31:61:4d:e0:46:bc:74:63:ab:c4:11: 78:87:45:a8:f5:dc:96:a0:3d:95:99:fc:5a:dc:da: eb:39:0e:34:10:12:61:a9:24:4d:23:e4:6c:4e:7a: a6:81:35:b3:31:6e:d7:f1:38:9d:72:e6:da:78:52: a3:78:ec:5a:06:35:1c:5b:23:c0:ff:d5:7e:16:88: e3:1c:20:54:0a:64:07:4e:e2:dd:4d:e6:8a:17:76: ab:a3:28:01:31:bf:c6:25:2c:39:ae:09:77:f3:f2: ef:e1:b2:66:79:9a:9e:b6:60:39:1b:03:35:89:cd: 97:81:fb:6f:dc:4e:bf:48:80:b5:44:87:dc:f8:b0: 11:c3:3f:c3:a3:bf:6b:3a:bd:b3:98:f3:d1:69:ae: b3:a5:ae:82:07:50:93:29:06:13:a2:cb:94:02:0c: af:f1:99:62:3a:e6:1b:c3:12:a5:42:a3:da:8d:5b: 63:48:2d:05:57:c5:e0:59:78:4e:51:11:80:d5:6b: d7:3d:59:68:40:7e:fa:b8:ce:7f:69:09:74:31:f8: de:31:7e:62:28:9d:3b:fd:49:46:03:eb:3e:13:48: 79:0f:c0:9f:ab:dc:ce:3a:66:c5:ab:99:43:e7:05: a3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:6B:37:B7:9A:9A:0D:F8:D7:2D:0C:AD:2B:78:50:05:20:78:FD:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926538e4-ca01-3a2a-aecd-aec581fd6414.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:03:5f:83:b0:78:8c:47:23:76:8e:dd:b8:2c:a5:8b:3b:9b: f1:48:af:5d:6f:3d:87:19:72:6e:af:38:8a:d9:d4:a9:96:3a: ed:2a:fa:73:78:71:1b:e7:5a:94:5e:1a:c1:f2:2c:4a:34:8f: cd:f6:fe:ab:a6:b5:36:bd:4a:f2:9f:91:91:77:0a:af:c5:4a: aa:5f:55:2c:44:ec:5d:64:9a:03:98:7a:e1:8f:e9:fb:1d:c7: f5:11:af:37:6a:6d:93:3e:30:ae:c6:8b:fb:3a:88:9f:6b:47: 95:66:d1:5b:ed:7c:a0:a6:4e:3e:00:3e:a7:4e:17:81:2f:89: 4b:9a:ed:48:0c:9f:3f:70:a4:86:6f:90:e4:9a:63:03:04:1f: cd:79:3d:26:53:98:73:49:32:df:09:09:ad:f6:66:d0:95:2d: 36:39:8c:c9:62:5f:1a:60:f8:d7:f1:4e:24:44:8a:96:cc:0a: ff:fa:42:ac:6c:22:fc:96:1e:55:82:1c:41:38:eb:3c:33:6d: 2c:59:af:a9:e3:05:22:82:f8:ad:a3:35:54:a3:62:14:d9:40: fb:71:49:11:2d:b0:cc:8a:a1:33:23:5c:89:57:52:55:6b:0c: 20:2a:78:35:c2:27:db:c8:3c:74:18:68:88:05:f6:f1:a3:1a: 54:ab:cd:c8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErkYThIRWrevF3nuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YjYwYWFmMTYtMGU1MC00NzhjLTlmYTMtM2Q2Y2NkODAzNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheXAZhQp+8mCS45WfUxb2+QAMWFN4Ea8dGOr xBF4h0Wo9dyWoD2Vmfxa3NrrOQ40EBJhqSRNI+RsTnqmgTWzMW7X8TidcubaeFKj eOxaBjUcWyPA/9V+FojjHCBUCmQHTuLdTeaKF3aroygBMb/GJSw5rgl38/Lv4bJm eZqetmA5GwM1ic2Xgftv3E6/SIC1RIfc+LARwz/Do79rOr2zmPPRaa6zpa6CB1CT KQYTosuUAgyv8ZliOuYbwxKlQqPajVtjSC0FV8XgWXhOURGA1WvXPVloQH76uM5/ aQl0MfjeMX5iKJ07/UlGA+s+E0h5D8Cfq9zOOmbFq5lD5wWjlwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFBrN7eamg341y0MrSt4UAUgeP2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTI2NTM4ZTQtY2EwMS0z YTJhLWFlY2QtYWVjNTgxZmQ2NDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQANA1+DsHiMRyN2jt24LKWLO5vxSK9dbz2HGXJu rziK2dSpljrtKvpzeHEb51qUXhrB8ixKNI/N9v6rprU2vUryn5GRdwqvxUqqX1Us ROxdZJoDmHrhj+n7Hcf1Ea83am2TPjCuxov7Ooifa0eVZtFb7Xygpk4+AD6nTheB L4lLmu1IDJ8/cKSGb5DkmmMDBB/NeT0mU5hzSTLfCQmt9mbQlS02OYzJYl8aYPjX 8U4kRIqWzAr/+kKsbCL8lh5VghxBOOs8M20sWa+p4wUigvitozVUo2IU2UD7cUkR LbDMiqEzI1yJV1JVawwgKng1wifbyDx0GGiIBfbxoxpUq83I -----END CERTIFICATE-----Generated at Sat Aug 23 16:01:43 2025 by rpki-client