$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04d4ddc-5974-3941-b3d2-0f6e36fbd607.roa File: a04d4ddc-5974-3941-b3d2-0f6e36fbd607.roa (raw, json) Hash identifier: pW2NdCDSV5leOarGCU/dPGYkL8I4O0F1oHtYnFJJQyA= Subject key identifier: AE:C9:84:FC:7E:09:FC:A6:97:7B:BD:07:3F:7A:60:CB:18:C9:7F:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F6786044446B004D4E2F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04d4ddc-5974-3941-b3d2-0f6e36fbd607.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396606 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:78:60:44:44:6b:00:4d:4e:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=bfc62102-c168-483b-84fb-fad2a3269a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:04:29:d5:be:8a:2b:53:99:59:23:d4:d1: 54:95:2d:af:5f:30:e0:20:ce:c6:e4:05:6e:ff:f7: ca:87:39:7b:f2:eb:fb:c1:12:85:bf:7c:eb:5a:f9: 49:30:13:39:68:c0:04:20:fc:a4:31:ec:b3:45:ca: 15:cb:e7:d4:c6:e1:d4:52:83:2a:fa:59:77:ba:81: 91:f8:d3:6e:a5:1c:84:d6:09:e1:6d:b3:2d:c9:4c: 8b:8b:dc:c7:ce:c7:96:82:f0:b8:ea:28:53:8c:de: c6:e3:9b:48:00:29:50:84:97:76:b7:49:de:d7:8b: c7:36:0a:fe:17:e2:d5:c2:46:0e:4e:b7:06:f8:4a: c5:4e:7d:68:82:b7:13:07:5e:50:2a:38:b1:f3:1d: 48:fa:22:7a:6c:f8:ce:5b:88:23:3c:70:b9:76:06: 97:49:d6:6e:2c:a4:35:71:24:e4:26:76:3f:14:89: 7f:65:00:53:f8:d4:30:05:23:db:12:c3:f3:b5:fe: a9:d5:69:dc:9f:53:13:16:50:e6:95:1d:fd:c4:94: 9b:6b:f9:4c:f7:12:51:62:dc:a2:4e:01:ab:40:de: 69:59:25:19:6d:a2:85:a4:f2:23:67:bc:00:03:f9: 39:7e:f7:93:dd:68:22:9c:3f:4d:6a:62:62:81:f7: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C9:84:FC:7E:09:FC:A6:97:7B:BD:07:3F:7A:60:CB:18:C9:7F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04d4ddc-5974-3941-b3d2-0f6e36fbd607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:0a:61:a9:dc:5a:85:f3:f0:57:00:86:53:1d:61:6e:0e:8b: 6e:54:89:8c:d4:a8:38:5c:63:c8:60:95:20:4c:62:5f:c4:6c: b4:00:cc:f5:55:3d:96:c9:65:91:8e:0c:3b:04:e3:a3:36:fa: 67:a2:26:ad:d0:23:7c:2b:e4:bc:e1:81:a5:24:4b:8f:92:15: 1e:9f:42:6c:3b:96:8f:06:42:61:4b:8e:06:1d:6e:46:1a:39: a3:29:9c:8b:ab:ee:9d:cc:a3:5a:40:96:76:eb:94:7f:eb:c5: 5a:1f:d3:66:5c:fc:19:3e:21:b2:da:7b:b6:8f:51:47:3d:f8: d3:8b:ff:ac:9d:b2:bf:86:ea:16:7c:5a:25:33:17:84:61:68: 1f:9e:87:66:d3:0d:0b:85:5c:8a:c7:c1:85:8f:33:33:4f:83: f7:97:15:a6:90:6a:d9:14:b1:fe:25:4a:54:26:65:c3:0b:22: f9:d6:01:86:26:78:b9:6a:9b:53:18:51:b2:36:e0:77:8b:53: e7:d1:db:25:37:ad:de:69:7f:63:c7:4b:10:29:58:e5:48:06: 75:ce:67:67:66:19:08:3a:f6:7c:74:f0:7d:63:ae:5f:b7:78: d5:8e:b2:a5:bd:7d:66:d3:48:fd:81:a6:21:16:b9:c3:01:53: 18:3a:cf:1e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nhgRERrAE1OL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YmZjNjIxMDItYzE2OC00ODNiLTg0ZmItZmFkMmEzMjY5YTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0oEKdW+iitTmVkj1NFUlS2vXzDgIM7G5AVu //fKhzl78uv7wRKFv3zrWvlJMBM5aMAEIPykMeyzRcoVy+fUxuHUUoMq+ll3uoGR +NNupRyE1gnhbbMtyUyLi9zHzseWgvC46ihTjN7G45tIAClQhJd2t0ne14vHNgr+ F+LVwkYOTrcG+ErFTn1ogrcTB15QKjix8x1I+iJ6bPjOW4gjPHC5dgaXSdZuLKQ1 cSTkJnY/FIl/ZQBT+NQwBSPbEsPztf6p1Wncn1MTFlDmlR39xJSba/lM9xJRYtyi TgGrQN5pWSUZbaKFpPIjZ7wAA/k5fveT3WginD9NamJigfesqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFK7JhPx+Cfyml3u9Bz96YMsYyX8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTA0ZDRkZGMtNTk3NC0z OTQxLWIzZDItMGY2ZTM2ZmJkNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBiCmGp3FqF8/BXAIZTHWFuDotuVImM1Kg4XGPI YJUgTGJfxGy0AMz1VT2WyWWRjgw7BOOjNvpnoiat0CN8K+S84YGlJEuPkhUen0Js O5aPBkJhS44GHW5GGjmjKZyLq+6dzKNaQJZ265R/68VaH9NmXPwZPiGy2nu2j1FH PfjTi/+snbK/huoWfFolMxeEYWgfnodm0w0LhVyKx8GFjzMzT4P3lxWmkGrZFLH+ JUpUJmXDCyL51gGGJni5aptTGFGyNuB3i1Pn0dslN63eaX9jx0sQKVjlSAZ1zmdn ZhkIOvZ8dPB9Y65ft3jVjrKlvX1m00j9gaYhFrnDAVMYOs8e -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:17 2025 by rpki-client