$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6c772-5085-3344-8a27-8d54c55f9a8b.roa File: 95e6c772-5085-3344-8a27-8d54c55f9a8b.roa (raw, json) Hash identifier: Ge2ud3aGoxCCYZ2b7LZMLhdXhGiY43NCFiTZ4uHrPhY= Subject key identifier: 36:CD:94:4B:C7:AC:F6:C0:24:50:95:3A:2D:8F:B9:16:DF:AB:5C:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE1970330727B94FFFD364B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6c772-5085-3344-8a27-8d54c55f9a8b.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 36619 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:03:30:72:7b:94:ff:fd:36:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=70fe1f9e-99d1-4dab-8a61-a154a17323c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a7:40:65:c4:cf:e2:aa:ec:08:f7:f1:87:f7: ad:ad:bc:ae:fa:68:4d:b7:68:71:47:56:05:ab:a2: d0:20:85:f9:a2:50:08:5d:e5:65:71:9f:be:ba:09: 83:df:0e:f4:0b:35:fb:c9:14:61:fc:cd:c7:06:28: ff:22:e3:c7:85:ff:64:d1:f9:ef:70:1b:e9:59:2d: 81:8c:6b:ae:f0:c2:00:2f:91:a5:f0:74:c1:8c:e6: fb:40:3f:47:65:e1:c4:49:8f:e3:b4:83:fa:67:7d: 66:a7:49:9b:9a:e0:b6:15:ac:cf:10:5c:1a:19:8f: cc:66:50:2a:33:61:67:36:b9:e0:22:cf:11:21:60: 64:5b:18:1a:bf:45:00:51:ce:22:1d:17:3b:ba:35: 85:e8:d1:18:94:ea:de:0b:31:e4:f0:d3:dd:cd:c7: da:6d:ac:72:cc:ac:a4:92:3a:d6:79:e2:74:dd:b2: 1c:84:fc:b0:ab:43:76:8b:1c:ec:a3:8e:df:61:0c: 92:89:26:d3:2a:2e:a7:2a:e3:2d:ab:b5:4d:4c:c6: 22:4d:70:ab:47:20:0d:4c:86:b6:97:e0:d7:23:88: 25:dc:0a:f6:eb:ac:f5:21:96:f6:d5:77:77:91:cd: c9:4a:29:38:a6:74:12:7c:cf:61:ab:8b:49:b4:d1: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CD:94:4B:C7:AC:F6:C0:24:50:95:3A:2D:8F:B9:16:DF:AB:5C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95e6c772-5085-3344-8a27-8d54c55f9a8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:e1:4d:64:f2:77:f9:69:51:2f:9e:63:c2:d0:81:1b:3f:26: 25:a9:2c:8e:1d:e0:95:99:61:0f:26:2a:20:88:44:ef:fb:50: ab:57:f8:98:a3:5a:08:4d:a0:d2:68:2c:c1:cb:e3:40:0b:05: 6b:7b:45:66:38:eb:d3:29:db:ec:1b:ae:12:08:da:48:70:ba: f0:05:0c:fa:b6:e0:6e:10:35:0b:7b:ea:d3:fe:9a:6b:5e:a6: a9:08:a1:72:0d:37:61:33:40:80:56:90:a4:ec:d6:80:3f:07: 03:87:3d:ad:2a:9d:5a:74:df:02:30:90:81:b0:ff:0c:ce:3e: 3a:5a:3d:34:54:7e:81:f9:25:15:a0:dc:92:2e:15:44:08:0a: 8e:3b:b8:57:2f:f7:79:2b:53:7e:10:ec:38:24:27:d1:b6:96: af:1c:bc:1f:43:da:ee:a5:36:07:b5:97:f1:83:90:ef:b7:01: 5c:d4:9d:1b:3a:4f:3f:45:dd:e3:a5:56:47:f8:27:11:cc:23: f3:85:96:ac:db:92:d6:e6:02:3c:b7:05:d4:3a:1e:09:44:9e: 5a:77:12:3a:de:48:02:24:03:fd:86:81:2a:43:8b:91:c6:1a: f0:b3:ba:33:56:66:15:22:9b:02:44:b0:ae:a5:58:e4:58:f8: 87:0c:f3:91 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlwMwcnuU//02SwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk NzBmZTFmOWUtOTlkMS00ZGFiLThhNjEtYTE1NGExNzMyM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKdAZcTP4qrsCPfxh/etrbyu+mhNt2hxR1YF q6LQIIX5olAIXeVlcZ++ugmD3w70CzX7yRRh/M3HBij/IuPHhf9k0fnvcBvpWS2B jGuu8MIAL5Gl8HTBjOb7QD9HZeHESY/jtIP6Z31mp0mbmuC2FazPEFwaGY/MZlAq M2FnNrngIs8RIWBkWxgav0UAUc4iHRc7ujWF6NEYlOreCzHk8NPdzcfabaxyzKyk kjrWeeJ03bIchPywq0N2ixzso47fYQySiSbTKi6nKuMtq7VNTMYiTXCrRyANTIa2 l+DXI4gl3Ar266z1IZb21Xd3kc3JSik4pnQSfM9hq4tJtNF6QQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDbNlEvHrPbAJFCVOi2PuRbfq1w7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTVlNmM3NzItNTA4NS0z MzQ0LThhMjctOGQ1NGM1NWY5YThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAn4U1k8nf5aVEvnmPC0IEbPyYlqSyOHeCVmWEP JiogiETv+1CrV/iYo1oITaDSaCzBy+NACwVre0VmOOvTKdvsG64SCNpIcLrwBQz6 tuBuEDULe+rT/pprXqapCKFyDTdhM0CAVpCk7NaAPwcDhz2tKp1adN8CMJCBsP8M zj46Wj00VH6B+SUVoNySLhVECAqOO7hXL/d5K1N+EOw4JCfRtpavHLwfQ9rupTYH tZfxg5DvtwFc1J0bOk8/Rd3jpVZH+CcRzCPzhZas25LW5gI8twXUOh4JRJ5adxI6 3kgCJAP9hoEqQ4uRxhrws7ozVmYVIpsCRLCupVjkWPiHDPOR -----END CERTIFICATE-----Generated at Sat Aug 23 16:30:34 2025 by rpki-client