$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97f866f1-75bd-3605-b62e-c953d275461a.roa File: 97f866f1-75bd-3605-b62e-c953d275461a.roa (raw, json) Hash identifier: BTtUVlYRWI3qbdIOxe9T+jQK9FFGHnHJku0MYWOQF0w= Subject key identifier: 4E:69:55:A1:A5:36:3E:DD:39:20:43:43:07:46:EA:78:CA:75:B3:08 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE46136665A5BE25EC7115300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97f866f1-75bd-3605-b62e-c953d275461a.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 396595 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:36:66:5a:5b:e2:5e:c7:11:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=3b1c009d-6fe3-40e5-9651-61bf27b434f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:40:c8:ec:cf:55:9f:3b:f8:4f:06:7d:08:4b: bf:81:71:93:c0:2c:e8:43:64:17:80:5d:3e:a1:93: 3b:b7:ac:28:21:3b:19:14:dc:ef:a0:4f:33:dc:a5: 02:5e:49:26:55:79:3f:14:05:f2:40:6a:3a:a3:af: ea:f5:f5:04:cd:c2:ce:3d:ca:e2:87:44:c0:a0:cb: 10:6a:25:1b:47:fd:fe:dd:b4:0d:35:19:7e:48:83: c1:ab:3c:f6:03:98:56:4e:98:ba:94:7d:09:0e:9e: f6:a6:7f:b2:5f:3b:58:15:26:31:84:9f:0a:05:23: 55:11:cb:92:6f:21:8c:38:1d:ea:f0:aa:ed:6d:4e: da:7f:e6:a4:57:5a:a1:34:ba:be:be:2e:4b:f7:95: e3:c9:b0:81:0e:25:83:41:64:43:cb:02:84:9a:d4: 8d:a6:e9:c4:e9:d5:cd:63:79:5a:69:b7:12:c3:7b: 2b:26:b3:35:66:00:a5:7c:10:d1:3e:cc:fd:8c:1c: 45:39:de:3c:81:2e:e7:74:a5:e6:e7:43:12:3a:cb: b8:7d:75:a4:b7:27:29:4a:67:2b:25:c2:a7:08:32: 79:5c:22:3e:0b:14:a8:8a:9a:b2:2e:b6:04:a8:5f: ca:89:57:34:6c:47:99:f5:4a:7b:9b:a9:b2:ae:9b: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:69:55:A1:A5:36:3E:DD:39:20:43:43:07:46:EA:78:CA:75:B3:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97f866f1-75bd-3605-b62e-c953d275461a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0b:3c:f8:8d:0d:3b:69:c8:32:5a:ca:c9:aa:31:e9:33:1a: bd:37:5c:56:31:0e:68:d0:bb:88:ee:bd:51:39:c9:df:14:0c: 3c:e9:31:b5:c5:86:af:a3:43:b1:c5:a0:a1:c7:5a:e7:7f:e3: dd:fb:dc:cd:e9:7a:60:c9:16:2a:25:de:7c:4b:68:a8:4e:a6: c3:c7:74:59:1b:0b:26:90:30:1e:7b:9f:9c:11:95:aa:cc:e7: 18:2b:e8:d9:49:d0:1c:cb:27:4b:e4:d8:8c:e0:fd:6f:02:8c: bf:a2:c0:5c:ca:c8:09:1c:2e:1f:13:fb:d8:97:51:f6:2d:aa: 32:15:29:cf:18:08:56:69:9f:23:ba:7e:d0:d2:1b:4f:10:52: 0d:8d:05:e4:ef:61:0c:27:5b:f5:37:ae:f1:c8:dc:c4:f9:a8: d6:ce:df:19:8b:f5:42:6f:56:d2:f4:93:3b:63:c9:d4:37:7e: 00:c3:65:92:a3:97:5f:6c:e9:c8:8e:06:99:7d:0a:ea:95:00: 90:05:34:72:34:67:16:c9:af:32:d8:7e:16:51:97:16:c2:c8: 29:10:d1:17:02:75:0d:eb:9d:70:5e:63:56:e5:57:fe:41:6f: 07:ce:84:8f:9b:1e:5a:59:43:1e:fa:a0:3e:32:fc:32:d6:2e: 04:8c:20:4f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErkYTZmWlviXscRUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk M2IxYzAwOWQtNmZlMy00MGU1LTk2NTEtNjFiZjI3YjQzNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0DI7M9Vnzv4TwZ9CEu/gXGTwCzoQ2QXgF0+ oZM7t6woITsZFNzvoE8z3KUCXkkmVXk/FAXyQGo6o6/q9fUEzcLOPcrih0TAoMsQ aiUbR/3+3bQNNRl+SIPBqzz2A5hWTpi6lH0JDp72pn+yXztYFSYxhJ8KBSNVEcuS byGMOB3q8KrtbU7af+akV1qhNLq+vi5L95XjybCBDiWDQWRDywKEmtSNpunE6dXN Y3laabcSw3srJrM1ZgClfBDRPsz9jBxFOd48gS7ndKXm50MSOsu4fXWktycpSmcr JcKnCDJ5XCI+CxSoipqyLrYEqF/KiVc0bEeZ9Up7m6myrptN3QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFE5pVaGlNj7dOSBDQwdG6njKdbMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTdmODY2ZjEtNzViZC0z NjA1LWI2MmUtYzk1M2QyNzU0NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGCzz4jQ07acgyWsrJqjHpMxq9N1xWMQ5o0LuI 7r1ROcnfFAw86TG1xYavo0OxxaChx1rnf+Pd+9zN6XpgyRYqJd58S2ioTqbDx3RZ GwsmkDAee5+cEZWqzOcYK+jZSdAcyydL5NiM4P1vAoy/osBcysgJHC4fE/vYl1H2 LaoyFSnPGAhWaZ8jun7Q0htPEFINjQXk72EMJ1v1N67xyNzE+ajWzt8Zi/VCb1bS 9JM7Y8nUN34Aw2WSo5dfbOnIjgaZfQrqlQCQBTRyNGcWya8y2H4WUZcWwsgpENEX AnUN651wXmNW5Vf+QW8HzoSPmx5aWUMe+qA+Mvwy1i4EjCBP -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:59 2025 by rpki-client