$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4b709b4-940e-3523-85f0-4316b7dac985.roa File: a4b709b4-940e-3523-85f0-4316b7dac985.roa (raw, json) Hash identifier: VawL7ZoMIt9biy/h68owf72/BrnCG5QWYDCCPLSugQw= Subject key identifier: 49:7A:E8:4A:CA:F6:06:64:E5:3D:6E:04:DB:F4:9F:19:87:24:62:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE46137B78E7756BD3C07D980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4b709b4-940e-3523-85f0-4316b7dac985.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 396544 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:37:b7:8e:77:56:bd:3c:07:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=d9c5bd09-396d-4b2d-bd2c-be4093c6c2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:50:b8:70:f7:89:d1:65:51:f7:7b:ce:54: d4:bd:e3:57:94:8c:7c:b5:15:5e:11:fa:bb:55:f9: d4:3d:8c:6b:64:21:07:2a:2f:06:59:12:9a:76:54: 3d:23:91:19:a8:7b:d9:17:51:76:c1:7e:aa:33:80: 67:b3:82:0e:85:90:a5:42:18:be:9f:15:4e:8a:2b: d8:41:50:a5:f4:ef:33:d6:ef:06:9e:34:9f:10:5c: 17:ba:07:16:9b:06:91:aa:10:6e:f4:7e:c0:c8:73: 8b:2b:b3:2e:bf:24:23:b2:eb:2e:82:25:16:e0:34: c7:80:62:20:31:0a:6e:cf:22:a5:49:fb:4a:ba:60: f1:a8:bf:45:a0:99:ad:a9:5f:fa:d7:5a:27:57:b0: ff:59:f0:32:8f:a1:6f:dd:6f:5d:35:4f:21:58:dc: 9e:b0:63:a3:a0:d9:c5:e7:e9:be:1e:f5:7f:ab:82: ec:24:49:49:fb:52:64:96:0d:2a:d6:ac:78:4b:13: 10:c8:c7:22:85:ec:ce:3f:16:eb:bd:1f:a7:98:73: 0f:ee:4f:eb:6a:3b:30:07:b1:ad:04:41:f5:7b:b7: f5:fa:67:bd:b0:a4:6f:de:5f:e0:69:00:c9:21:50: 67:eb:b4:d3:d0:32:af:93:e9:a0:2f:45:ca:aa:31: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7A:E8:4A:CA:F6:06:64:E5:3D:6E:04:DB:F4:9F:19:87:24:62:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4b709b4-940e-3523-85f0-4316b7dac985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c1:d3:3e:a6:ac:33:0b:e3:68:7f:aa:b8:12:68:3e:6f:af: aa:9d:65:b7:54:b2:cc:b7:d0:f9:29:4a:8a:31:9e:1c:2c:8e: 76:ba:cb:fd:1d:4c:57:48:57:cc:50:df:0f:8c:cb:e9:14:cb: 65:52:f5:b1:fa:44:2a:75:e1:f2:50:0a:07:35:0a:59:82:c0: d5:fd:77:6f:5f:4e:90:2f:a8:8f:86:6a:6d:7e:fd:5f:72:4f: 0c:e6:87:bf:6e:b4:42:8c:bf:e8:f4:f9:6c:2f:41:58:79:ab: 1d:b8:69:f9:eb:b2:45:51:db:38:4c:85:91:56:9a:c1:5d:21: b0:42:77:ff:3c:57:c6:91:47:e0:ef:4e:cb:9b:07:d0:8a:b8: c6:4f:f2:1c:18:e3:4b:9a:42:7e:79:43:56:95:db:72:85:dd: 25:48:e6:61:f6:94:32:59:08:f0:ef:8d:4c:73:e8:ad:c6:73: e9:c6:64:97:83:81:e3:1b:68:b4:6e:11:81:0d:05:99:43:55: c1:cd:62:06:cd:9e:ac:01:48:8c:1f:ce:d1:19:49:40:57:95: b1:15:76:35:30:93:7f:0b:57:46:4c:d8:1a:71:ed:d2:b7:20: e0:1c:a0:1f:55:fe:7a:0f:f2:f7:98:39:a8:50:b3:ed:23:b3: f6:35:50:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErkYTe3jndWvTwH2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDljNWJkMDktMzk2ZC00YjJkLWJkMmMtYmU0MDkzYzZjMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry1QuHD3idFlUfd7zlTUveNXlIx8tRVeEfq7 VfnUPYxrZCEHKi8GWRKadlQ9I5EZqHvZF1F2wX6qM4Bns4IOhZClQhi+nxVOiivY QVCl9O8z1u8GnjSfEFwXugcWmwaRqhBu9H7AyHOLK7MuvyQjsusugiUW4DTHgGIg MQpuzyKlSftKumDxqL9FoJmtqV/611onV7D/WfAyj6Fv3W9dNU8hWNyesGOjoNnF 5+m+HvV/q4LsJElJ+1Jklg0q1qx4SxMQyMcihezOPxbrvR+nmHMP7k/rajswB7Gt BEH1e7f1+me9sKRv3l/gaQDJIVBn67TT0DKvk+mgL0XKqjFFrQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEl66ErK9gZk5T1uBNv0nxmHJGIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTRiNzA5YjQtOTQwZS0z NTIzLTg1ZjAtNDMxNmI3ZGFjOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBAwdM+pqwzC+Nof6q4Emg+b6+qnWW3VLLMt9D5 KUqKMZ4cLI52usv9HUxXSFfMUN8PjMvpFMtlUvWx+kQqdeHyUAoHNQpZgsDV/Xdv X06QL6iPhmptfv1fck8M5oe/brRCjL/o9PlsL0FYeasduGn567JFUds4TIWRVprB XSGwQnf/PFfGkUfg707LmwfQirjGT/IcGONLmkJ+eUNWldtyhd0lSOZh9pQyWQjw 741Mc+itxnPpxmSXg4HjG2i0bhGBDQWZQ1XBzWIGzZ6sAUiMH87RGUlAV5WxFXY1 MJN/C1dGTNgace3StyDgHKAfVf56D/L3mDmoULPtI7P2NVDE -----END CERTIFICATE-----Generated at Sat Aug 23 13:26:18 2025 by rpki-client