$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa File: ba06575f-6a44-3531-a6b2-4aa363ec1398.roa (raw, json) Hash identifier: J2qdd6j0zR7yy6MMZOZVAjfKmhhFOSljqcNmSVapsuc= Subject key identifier: E3:7D:A1:D0:08:83:C7:03:7A:79:0C:4F:78:6C:B4:5C:09:6D:B5:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AD7D1430F53FF4CDA8CC1C900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 396584 IP address blocks: 2001:500:123::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:43:0f:53:ff:4c:da:8c:c1:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=fb12d492-a5e0-451b-bc6e-7ac5a170a0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:38:ac:6e:99:53:3c:70:c7:1a:a7:76:3d: 7d:0b:6e:7f:93:02:35:02:f4:87:f8:2e:68:3d:65: 6e:5b:94:40:5e:13:30:8e:57:0a:a7:92:5e:26:8d: dc:73:ae:06:bd:eb:86:d9:2f:26:96:02:51:1a:6b: 4e:08:c9:63:52:06:d8:a9:43:3c:1c:3a:16:61:72: 5b:f8:61:cf:50:49:1a:0c:76:1e:3e:6f:ac:a4:dd: 09:60:15:00:eb:fd:9a:eb:44:92:ba:c7:0e:da:2d: 60:e3:80:14:42:87:81:b1:bc:e0:a9:04:d7:eb:28: f4:ca:8f:4f:06:34:97:f1:75:2e:ce:d2:f3:12:f9: 3d:8d:59:37:52:1a:53:41:b5:08:ec:bf:c8:50:ad: 90:6c:ba:f4:b3:41:b3:d2:81:58:09:58:4c:42:06: ae:5d:58:62:09:d7:a9:ad:70:eb:c4:f2:e8:24:d9: 1e:c1:e0:2f:e2:12:1f:b2:43:8e:63:80:c1:e7:6e: a8:2d:21:79:64:ba:1c:8e:a1:12:03:7d:17:7d:de: 0f:25:7e:e4:78:0a:b8:eb:2d:e1:a3:88:42:4a:89: 4a:73:39:2a:b9:c9:da:cd:2c:c6:3b:27:ad:c2:85: c9:92:4c:08:7d:ef:9f:51:a6:f4:4a:20:c1:2b:d6: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:A1:D0:08:83:C7:03:7A:79:0C:4F:78:6C:B4:5C:09:6D:B5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba06575f-6a44-3531-a6b2-4aa363ec1398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:14:8b:f5:8e:46:3c:b6:33:5b:96:86:a0:a4:c4:ba:02:56: 99:c1:13:fa:7e:d4:df:b0:d3:29:17:52:8e:1e:f8:5c:20:c6: f2:6d:ce:57:38:34:f6:5d:56:28:ae:01:50:c2:9e:0d:2c:04: e5:25:70:68:a6:11:38:46:39:f1:85:30:32:a8:c6:44:ef:0d: 16:5d:19:de:d9:c9:62:43:85:ab:78:e1:69:32:c8:1f:92:a1: 10:45:4e:9f:03:b7:84:8c:a8:9f:af:3c:dc:52:7c:fe:14:bf: 24:71:84:04:f1:26:39:97:2e:92:13:ed:9d:ad:6f:e4:fb:20: 77:0f:00:bf:11:e4:a2:24:f5:f9:93:1c:0a:2b:9f:36:28:8b: 59:f8:11:eb:0d:96:06:92:2a:80:5b:e2:2c:11:59:07:bd:03: 56:8c:8d:26:d9:58:a8:2e:13:d2:6b:82:d5:74:27:3e:ad:7b: 19:9f:04:72:8e:c0:6c:c4:ca:e0:29:1b:5d:0f:38:57:23:5a: a0:09:d9:f1:cf:60:61:55:6b:b0:d8:b0:e6:c2:4b:72:09:83: 54:b6:0e:46:1f:2d:e3:e0:ed:1b:4e:34:1c:eb:05:9a:2e:ce: 98:fe:e0:4a:d4:9f:df:77:9a:98:b6:41:95:ac:17:7e:3a:e5: e5:83:c4:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErX0UMPU/9M2ozByQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk ZmIxMmQ0OTItYTVlMC00NTFiLWJjNmUtN2FjNWExNzBhMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCw4rG6ZUzxwxxqndj19C25/kwI1AvSH+C5o PWVuW5RAXhMwjlcKp5JeJo3cc64GveuG2S8mlgJRGmtOCMljUgbYqUM8HDoWYXJb +GHPUEkaDHYePm+spN0JYBUA6/2a60SSuscO2i1g44AUQoeBsbzgqQTX6yj0yo9P BjSX8XUuztLzEvk9jVk3UhpTQbUI7L/IUK2QbLr0s0Gz0oFYCVhMQgauXVhiCdep rXDrxPLoJNkeweAv4hIfskOOY4DB526oLSF5ZLocjqESA30Xfd4PJX7keAq46y3h o4hCSolKczkqucnazSzGOyetwoXJkkwIfe+fUab0SiDBK9bohwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFON9odAIg8cDenkMT3hstFwJbbXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEwNjU3NWYtNmE0NC0z NTMxLWE2YjItNGFhMzYzZWMxMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAmFIv1jkY8tjNbloagpMS6AlaZwRP6ftTfsNMp F1KOHvhcIMbybc5XODT2XVYorgFQwp4NLATlJXBophE4RjnxhTAyqMZE7w0WXRne 2cliQ4WreOFpMsgfkqEQRU6fA7eEjKifrzzcUnz+FL8kcYQE8SY5ly6SE+2drW/k +yB3DwC/EeSiJPX5kxwKK582KItZ+BHrDZYGkiqAW+IsEVkHvQNWjI0m2VioLhPS a4LVdCc+rXsZnwRyjsBsxMrgKRtdDzhXI1qgCdnxz2BhVWuw2LDmwktyCYNUtg5G Hy3j4O0bTjQc6wWaLs6Y/uBK1J/fd5qYtkGVrBd+OuXlg8T5 -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:51 2025 by rpki-client