$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa File: a428c78f-4f2d-3123-8be9-49c7fca937ed.roa (raw, json) Hash identifier: YC7gvVz9e98fSRK92H8oKfp+1YGxZ0+/Xzdncud4dNY= Subject key identifier: DF:15:F5:F4:BB:F7:7A:1B:80:9A:C2:69:44:C7:95:DB:26:E0:83:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F677E531AC60B6FA533280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396605 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:77:e5:31:ac:60:b6:fa:53:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=e0f31151-b3a9-43e1-ba33-6fc330a1fc37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:63:84:76:a3:fb:65:05:4e:38:4a:17:d9:30: 5c:34:67:f1:59:bc:d3:cf:d8:38:98:65:b3:48:8c: 71:8d:d8:77:d5:a4:c1:00:b5:7b:72:08:32:8c:8c: 4c:d2:21:4e:56:bf:6d:1f:a6:b1:33:5d:6c:85:5b: fa:52:8c:22:c1:41:0e:94:70:e6:d4:4b:1d:26:b1: f5:8c:5b:5b:28:1f:9b:33:50:f9:b8:49:8e:76:8e: 68:5e:28:28:05:1c:ca:0e:72:67:b4:09:4b:d1:fe: c2:b4:8b:8c:f0:5b:a4:34:d9:42:6a:ac:7d:b5:b9: 30:e5:d8:80:66:00:4a:73:1c:42:fa:9e:83:6e:6b: 72:4a:1d:a4:85:3d:44:ac:a7:08:f9:f1:bc:f1:ed: 82:b0:cf:71:d0:8e:d2:44:94:9e:74:c5:25:6d:41: 57:77:71:5e:62:3b:25:43:1b:99:72:4f:6c:33:7c: f3:6d:96:0c:89:8f:37:1a:c7:c2:4f:67:97:d0:1c: 1c:a9:cd:d8:0c:11:98:d8:08:ad:90:41:e3:4f:1b: 37:2e:3c:3e:b1:66:7c:e8:d2:8d:3f:92:4c:a9:03: d8:c8:3e:45:b3:b3:25:9c:5e:d1:41:c5:a1:01:f7: eb:c4:61:61:1a:7e:96:bd:51:fa:22:13:4d:b3:55: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:15:F5:F4:BB:F7:7A:1B:80:9A:C2:69:44:C7:95:DB:26:E0:83:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a428c78f-4f2d-3123-8be9-49c7fca937ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e0:f5:68:ea:10:fb:30:29:c6:bf:aa:85:52:92:9a:f1:15: 20:c2:c8:05:cf:a3:72:85:00:09:9b:d7:5a:dc:64:74:a3:9d: c8:30:95:b9:77:73:c2:86:72:3e:5f:5c:b8:75:00:3c:cf:09: 08:e7:84:6c:fd:01:a1:b9:2d:b1:58:27:f2:c4:16:87:01:43: f1:27:ff:3e:38:13:d9:6e:ca:33:f8:3a:6e:f4:c5:85:96:ad: e7:58:a2:f8:92:1e:51:d8:66:04:bb:8e:8d:ca:48:d1:49:80: 64:38:2a:20:03:a0:8d:6b:73:0c:95:14:e9:b3:e8:41:89:f1: 46:cf:f3:ad:b4:c3:27:97:5e:df:15:29:2b:0e:71:2b:3e:6b: 1c:71:ac:64:07:26:61:9f:9d:a7:f7:bb:2b:90:4c:4a:2f:c3: 1c:cc:ae:ed:f0:85:44:35:cb:56:eb:67:f9:94:e3:31:bb:ef: 2e:22:f1:f7:89:ef:c6:64:07:15:69:bd:ed:5e:fb:2b:b7:c2: eb:d8:78:a5:ee:da:21:25:a7:14:13:d9:69:55:ca:2c:c7:7f: 74:b2:e6:ed:2e:61:f4:5e:4d:a5:00:f2:d2:89:da:eb:52:fb: 34:a6:7e:d8:94:3c:6f:4e:26:5f:4c:33:84:86:16:b4:8c:e5: 5b:7b:20:23 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nflMaxgtvpTMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ZTBmMzExNTEtYjNhOS00M2UxLWJhMzMtNmZjMzMwYTFmYzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGOEdqP7ZQVOOEoX2TBcNGfxWbzTz9g4mGWz SIxxjdh31aTBALV7cggyjIxM0iFOVr9tH6axM11shVv6UowiwUEOlHDm1EsdJrH1 jFtbKB+bM1D5uEmOdo5oXigoBRzKDnJntAlL0f7CtIuM8FukNNlCaqx9tbkw5diA ZgBKcxxC+p6DbmtySh2khT1ErKcI+fG88e2CsM9x0I7SRJSedMUlbUFXd3FeYjsl QxuZck9sM3zzbZYMiY83GsfCT2eX0Bwcqc3YDBGY2AitkEHjTxs3Ljw+sWZ86NKN P5JMqQPYyD5Fs7MlnF7RQcWhAffrxGFhGn6WvVH6IhNNs1XyvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN8V9fS793obgJrCaUTHldsm4INlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTQyOGM3OGYtNGYyZC0z MTIzLThiZTktNDljN2ZjYTkzN2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBx4PVo6hD7MCnGv6qFUpKa8RUgwsgFz6NyhQAJ m9da3GR0o53IMJW5d3PChnI+X1y4dQA8zwkI54Rs/QGhuS2xWCfyxBaHAUPxJ/8+ OBPZbsoz+Dpu9MWFlq3nWKL4kh5R2GYEu46NykjRSYBkOCogA6CNa3MMlRTps+hB ifFGz/OttMMnl17fFSkrDnErPmsccaxkByZhn52n97srkExKL8MczK7t8IVENctW 62f5lOMxu+8uIvH3ie/GZAcVab3tXvsrt8Lr2Hil7tohJacUE9lpVcosx390subt LmH0Xk2lAPLSidrrUvs0pn7YlDxvTiZfTDOEhha0jOVbeyAj -----END CERTIFICATE-----Generated at Sat Aug 23 22:01:13 2025 by rpki-client