$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa File: ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa (raw, json) Hash identifier: JOVh6lHrZo9rcr99oH2rFKtv2AzJgtv6KsTZw73FBAo= Subject key identifier: E2:3E:94:60:07:D6:A3:85:D9:88:3C:F4:83:F2:8E:92:34:6F:0B:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AD7D142FB4B8DB88265694D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 396603 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:42:fb:4b:8d:b8:82:65:69:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=95600983-846a-4c7f-a8ed-9bb169a81c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d7:e9:23:46:90:b5:4c:3f:62:41:15:5a:b4: ca:98:e8:08:50:b9:46:ac:9f:ea:d3:31:63:25:f7: c7:e0:b8:6c:d2:94:f4:de:df:59:92:9a:7b:af:69: 47:ef:4c:8b:5c:02:b4:de:ec:4e:da:68:34:5e:b1: eb:dc:bb:1a:a4:39:fb:13:bf:46:2a:4e:28:84:26: ed:ab:19:f3:13:17:0d:c0:12:2b:69:10:8d:b2:cf: a2:3c:2a:d3:5b:c0:7e:7b:42:df:bf:ed:f0:be:ad: 31:b5:49:1b:c6:0c:af:bc:47:7b:66:5f:a3:60:f3: 48:76:45:09:70:39:5b:50:22:86:21:a2:cc:ed:4e: 8b:f6:77:3a:c3:b6:62:57:e2:8b:e3:e3:1f:96:6f: 3b:b9:44:96:d0:fb:bc:81:82:64:df:65:7c:02:ba: ee:15:93:aa:db:2d:de:c1:ee:75:8a:90:c9:5b:81: 2e:f2:35:b5:5c:30:49:a9:3a:dc:c7:cd:69:26:e4: 2e:01:4d:b5:77:7b:e0:89:d9:a0:ea:a5:6a:aa:53: 65:f2:92:1d:a2:4c:6f:da:65:0c:c9:15:4f:77:50: 92:ec:b1:31:2e:85:b3:95:88:2b:f6:98:94:ab:de: 95:35:a4:85:6b:8f:94:0b:43:4b:f9:f0:c5:19:c2: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3E:94:60:07:D6:A3:85:D9:88:3C:F4:83:F2:8E:92:34:6F:0B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab6eefad-c1d7-348a-af12-9fb95b7b50aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:de:c0:4f:20:36:ee:b0:e2:9a:23:ad:59:f7:5d:0d:0d:23: 0d:28:33:a4:a4:d0:98:66:bd:f1:69:44:1c:0c:13:38:3b:36: da:c8:42:66:3d:e9:d8:d4:11:34:c4:b5:9f:0f:a9:a9:c5:67: 25:cf:f3:f8:ea:3e:1c:2a:d6:63:5e:7f:4a:fd:48:0c:a6:23: 8e:40:79:c1:43:55:26:50:18:ad:d6:72:90:73:01:6d:4a:c4: 0f:24:a9:2f:bd:d0:50:d9:a2:40:35:28:07:30:4f:4c:05:37: ec:48:51:a1:32:da:5f:2d:1e:d6:71:ef:f5:ef:0b:a6:12:51: a0:80:81:77:51:bd:5c:77:55:8e:29:f7:12:b8:0b:ef:f2:88: 12:a8:8a:75:17:0c:b7:d1:4b:f1:cd:55:cb:59:06:ec:13:a6: 19:c4:98:9b:f5:70:8c:3c:bd:3b:64:46:56:89:f4:48:70:0b: bf:ed:8b:af:09:d6:a9:a2:e1:b6:4d:84:5f:00:8a:50:12:f2: d9:37:4f:a4:0c:33:57:f0:2f:a8:01:19:29:ec:88:bf:d6:26: b4:6c:94:57:8d:a3:db:50:7b:7d:93:0e:50:ac:70:2b:37:1a: b2:1a:6d:a0:58:07:fc:fc:d0:c4:07:77:e7:2a:88:09:a6:96: 9e:60:1f:38 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErX0UL7S424gmVpTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk OTU2MDA5ODMtODQ2YS00YzdmLWE4ZWQtOWJiMTY5YTgxYzc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtfpI0aQtUw/YkEVWrTKmOgIULlGrJ/q0zFj JffH4Lhs0pT03t9Zkpp7r2lH70yLXAK03uxO2mg0XrHr3LsapDn7E79GKk4ohCbt qxnzExcNwBIraRCNss+iPCrTW8B+e0Lfv+3wvq0xtUkbxgyvvEd7Zl+jYPNIdkUJ cDlbUCKGIaLM7U6L9nc6w7ZiV+KL4+Mflm87uUSW0Pu8gYJk32V8ArruFZOq2y3e we51ipDJW4Eu8jW1XDBJqTrcx81pJuQuAU21d3vgidmg6qVqqlNl8pIdokxv2mUM yRVPd1CS7LExLoWzlYgr9piUq96VNaSFa4+UC0NL+fDFGcKXYwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOI+lGAH1qOF2Yg89IPyjpI0bwtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWI2ZWVmYWQtYzFkNy0z NDhhLWFmMTItOWZiOTViN2I1MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBt3sBPIDbusOKaI61Z910NDSMNKDOkpNCYZr3x aUQcDBM4OzbayEJmPenY1BE0xLWfD6mpxWclz/P46j4cKtZjXn9K/UgMpiOOQHnB Q1UmUBit1nKQcwFtSsQPJKkvvdBQ2aJANSgHME9MBTfsSFGhMtpfLR7Wce/17wum ElGggIF3Ub1cd1WOKfcSuAvv8ogSqIp1Fwy30UvxzVXLWQbsE6YZxJib9XCMPL07 ZEZWifRIcAu/7YuvCdapouG2TYRfAIpQEvLZN0+kDDNX8C+oARkp7Ii/1ia0bJRX jaPbUHt9kw5QrHArNxqyGm2gWAf8/NDEB3fnKogJppaeYB84 -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:57 2025 by rpki-client