$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9609f54-ce2a-3b73-95d9-56beeaef3c65.roa File: a9609f54-ce2a-3b73-95d9-56beeaef3c65.roa (raw, json) Hash identifier: EBKlp6oPRWZI/RBPwFo+d8hXHQKzRvJYwi5F21Sn9yo= Subject key identifier: E1:79:D1:12:16:12:54:D6:24:67:28:00:AC:6D:E8:7E:9E:C7:EB:78 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE461376F6F8F8AD911F08AC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9609f54-ce2a-3b73-95d9-56beeaef3c65.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 397205 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:37:6f:6f:8f:8a:d9:11:f0:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=c7cbf20f-3c56-4654-9309-ee2ccccef713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ba:1f:dc:33:d3:d6:ce:8f:15:1a:49:08:bd: 5f:fa:c3:46:4e:39:0a:2a:f3:cf:62:46:2e:0a:c3: ac:54:0c:ba:df:b3:9e:cb:c7:c7:9a:04:48:0e:a9: 5c:4c:e2:3d:7a:a6:b9:ff:7a:82:ad:e0:82:a3:1d: 48:41:15:a0:34:8b:e2:0d:17:cb:44:9d:ff:6e:ff: f9:7f:d6:99:34:d2:64:50:1e:85:ee:c4:4a:63:c9: 5d:92:6b:b4:d1:93:a3:74:41:9b:af:97:9a:e2:80: 57:81:4d:84:30:ee:c5:36:db:41:ad:95:a2:61:fd: 87:dd:c9:2a:ac:87:e3:d7:8a:16:c3:50:30:71:5a: 06:4d:2f:07:9f:a8:60:a1:71:c1:05:e8:51:10:ec: 73:12:cd:60:27:8c:8d:6e:3e:c7:82:c4:60:06:e7: 8e:c9:2b:31:5f:aa:60:49:34:f4:6a:b3:d5:b9:5f: c0:5a:5f:3c:dd:41:95:c5:14:6c:18:c4:0b:44:45: a5:f4:77:8b:67:ad:5b:55:04:2d:28:05:f0:84:be: 8e:2a:3c:59:a8:fb:d7:6e:3d:b1:39:ad:fe:89:d2: dd:08:72:60:50:17:0a:b8:14:c1:35:0a:db:25:e8: e3:32:6b:84:41:e3:8b:35:f6:f3:3b:22:d0:38:04: 0d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:79:D1:12:16:12:54:D6:24:67:28:00:AC:6D:E8:7E:9E:C7:EB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9609f54-ce2a-3b73-95d9-56beeaef3c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d4:b8:c9:8f:41:00:02:78:ff:bd:da:b5:39:9e:14:9c:36: 3c:e4:ed:f0:8c:1f:d5:b4:47:73:85:d9:52:2c:eb:09:48:9f: 05:f2:65:97:c5:0f:3f:da:b7:1a:65:d4:f6:70:0b:51:1c:73: c7:5c:dc:d5:f1:4c:eb:94:30:98:15:39:15:96:25:f0:ce:60: 3c:51:0b:21:88:91:d5:1d:cf:7a:bc:c0:b3:2e:9a:4f:26:1b: 74:84:e1:01:ce:96:5e:65:97:26:e6:02:ce:bd:24:1c:58:46: c5:1b:53:7b:be:d3:bf:12:f6:aa:2b:92:c2:e3:6d:a3:50:48: 5b:3b:1e:51:54:af:fa:c6:67:d7:f2:65:fb:ad:39:25:78:b3: aa:3c:37:2e:81:af:f4:b2:20:70:52:ae:26:6e:7b:55:73:4e: 53:f2:98:df:81:b7:47:49:51:2d:6d:fe:57:1f:06:af:56:d7: 41:9c:0f:38:db:ea:e7:66:1f:3e:4f:fb:f3:38:e8:03:50:9f: 01:a5:9c:59:b5:6b:fc:eb:b2:da:d2:98:80:80:ee:f3:23:69: 19:9e:5f:a9:1b:9e:16:e3:fd:c4:4c:e0:eb:7a:84:92:3e:fd: 2f:7d:51:67:b6:fd:68:0e:fe:67:cf:4e:35:19:1e:3b:60:83: e2:62:70:6f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErkYTdvb4+K2RHwisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YzdjYmYyMGYtM2M1Ni00NjU0LTkzMDktZWUyY2NjY2VmNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorof3DPT1s6PFRpJCL1f+sNGTjkKKvPPYkYu CsOsVAy637Oey8fHmgRIDqlcTOI9eqa5/3qCreCCox1IQRWgNIviDRfLRJ3/bv/5 f9aZNNJkUB6F7sRKY8ldkmu00ZOjdEGbr5ea4oBXgU2EMO7FNttBrZWiYf2H3ckq rIfj14oWw1AwcVoGTS8Hn6hgoXHBBehREOxzEs1gJ4yNbj7HgsRgBueOySsxX6pg STT0arPVuV/AWl883UGVxRRsGMQLREWl9HeLZ61bVQQtKAXwhL6OKjxZqPvXbj2x Oa3+idLdCHJgUBcKuBTBNQrbJejjMmuEQeOLNfbzOyLQOAQNjwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOF50RIWElTWJGcoAKxt6H6ex+t4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk2MDlmNTQtY2UyYS0z YjczLTk1ZDktNTZiZWVhZWYzYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCy1LjJj0EAAnj/vdq1OZ4UnDY85O3wjB/VtEdz hdlSLOsJSJ8F8mWXxQ8/2rcaZdT2cAtRHHPHXNzV8UzrlDCYFTkVliXwzmA8UQsh iJHVHc96vMCzLppPJht0hOEBzpZeZZcm5gLOvSQcWEbFG1N7vtO/EvaqK5LC422j UEhbOx5RVK/6xmfX8mX7rTkleLOqPDcuga/0siBwUq4mbntVc05T8pjfgbdHSVEt bf5XHwavVtdBnA842+rnZh8+T/vzOOgDUJ8BpZxZtWv867La0piAgO7zI2kZnl+p G54W4/3ETODreoSSPv0vfVFntv1oDv5nz041GR47YIPiYnBv -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:12 2025 by rpki-client