$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa File: be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa (raw, json) Hash identifier: kgAGVtCsC1QQNxNcoG+U8a1hea96qE0765oNKhjok7w= Subject key identifier: 03:21:1D:2C:C9:49:F5:FD:87:91:5A:21:96:2A:3C:8C:69:5E:DE:84 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196C8FCD3BB0BF6FB334680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 36624 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:c8:fc:d3:bb:0b:f6:fb:33:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=a59c808f-6c71-4123-8c76-117ae74f4f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:f3:9d:6c:7c:21:89:22:87:85:91:82:15: 57:9c:7a:aa:64:a1:df:a3:df:59:d6:28:02:15:cc: 71:04:dc:34:4a:9f:b4:85:d0:91:c3:ed:98:79:1f: 95:21:b2:7f:c3:39:59:21:ed:33:55:73:cb:7d:af: 60:cd:cd:39:80:06:5f:3b:d8:f3:5b:d6:1d:45:b7: e2:88:81:f7:82:90:57:9a:7c:7a:d4:7e:92:77:48: 52:91:78:ed:7e:81:ed:f2:ab:e0:74:f1:7b:27:14: d8:10:68:99:2e:7c:a6:33:3a:d5:08:ad:60:65:3b: 07:37:d9:42:59:44:59:b9:32:80:38:b1:1b:bd:c0: 00:9a:a2:f5:f6:83:20:9a:8a:87:78:46:21:ac:ef: 83:74:02:fc:6b:43:5f:e2:0a:ea:1b:c9:a6:46:ae: e5:42:e1:bb:c6:cb:cc:5e:66:d6:45:5d:8c:b1:0f: 6e:5d:19:41:d2:e0:56:8e:ef:78:7c:32:64:57:14: 6e:d7:d6:79:32:86:6d:e7:c5:4b:74:fd:b5:26:c8: 2a:30:23:50:47:fe:b9:bf:ba:05:93:f4:80:92:9c: aa:58:a9:ec:8a:ca:e7:a8:70:52:50:23:83:2b:9a: 4c:11:5b:cd:ec:fd:c9:79:3d:ad:3e:7c:8b:c5:a4: 90:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:21:1D:2C:C9:49:F5:FD:87:91:5A:21:96:2A:3C:8C:69:5E:DE:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be8ddea6-73b1-319b-a8a0-16f1b2f8d5d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:48:01:23:b3:ba:37:a7:91:e4:b7:5f:56:29:fc:84:37:6a: 78:f4:f9:6c:b9:f2:17:bf:db:9e:43:90:8b:bc:7a:50:8e:cd: 47:d2:2b:26:a9:f5:04:b8:e9:38:5a:67:cd:9d:0d:5b:c7:2b: eb:88:76:45:20:06:36:60:b8:0c:0b:3a:cb:69:b0:18:8b:9d: cc:0a:d9:6a:72:40:e4:cf:ca:10:81:fd:ef:8b:48:a1:bc:d1: 3e:88:31:14:18:3a:b8:48:60:73:2d:eb:d9:d3:7f:78:2a:0e: 2c:8d:28:73:8b:d6:3d:96:34:f4:bf:b6:b0:e5:61:85:33:85: 4b:be:eb:9f:7f:83:74:ad:7c:a8:d5:eb:a2:47:4e:51:c5:ff: 18:62:f1:3c:b7:bd:02:9c:fa:ba:62:b4:92:09:ef:5c:f4:3a: 3e:96:35:d1:ef:3f:e4:37:b6:1a:86:80:24:94:04:5c:e7:8a: 4d:5e:64:fa:99:0c:53:dd:ee:2c:93:1d:d6:85:c2:bd:44:7f: 1e:06:ab:35:86:0e:83:57:11:e5:6b:be:3b:2d:1c:cf:d2:5c: 61:21:c1:15:91:32:4d:66:74:3f:ce:b9:01:60:87:b5:4e:64: 6a:a8:d5:b2:e3:da:8d:43:4f:df:61:96:ff:5f:54:86:84:ed: 9f:60:b5:56 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlsj807sL9vszRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YTU5YzgwOGYtNmM3MS00MTIzLThjNzYtMTE3YWU3NGY0ZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yDznWx8IYkih4WRghVXnHqqZKHfo99Z1igC FcxxBNw0Sp+0hdCRw+2YeR+VIbJ/wzlZIe0zVXPLfa9gzc05gAZfO9jzW9YdRbfi iIH3gpBXmnx61H6Sd0hSkXjtfoHt8qvgdPF7JxTYEGiZLnymMzrVCK1gZTsHN9lC WURZuTKAOLEbvcAAmqL19oMgmoqHeEYhrO+DdAL8a0Nf4grqG8mmRq7lQuG7xsvM XmbWRV2MsQ9uXRlB0uBWju94fDJkVxRu19Z5MoZt58VLdP21JsgqMCNQR/65v7oF k/SAkpyqWKnsisrnqHBSUCODK5pMEVvN7P3JeT2tPnyLxaSQsQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAMhHSzJSfX9h5FaIZYqPIxpXt6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmU4ZGRlYTYtNzNiMS0z MTliLWE4YTAtMTZmMWIyZjhkNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBqSAEjs7o3p5Hkt19WKfyEN2p49PlsufIXv9ue Q5CLvHpQjs1H0ismqfUEuOk4WmfNnQ1bxyvriHZFIAY2YLgMCzrLabAYi53MCtlq ckDkz8oQgf3vi0ihvNE+iDEUGDq4SGBzLevZ0394Kg4sjShzi9Y9ljT0v7aw5WGF M4VLvuuff4N0rXyo1euiR05Rxf8YYvE8t70CnPq6YrSSCe9c9Do+ljXR7z/kN7Ya hoAklARc54pNXmT6mQxT3e4skx3WhcK9RH8eBqs1hg6DVxHla747LRzP0lxhIcEV kTJNZnQ/zrkBYIe1TmRqqNWy49qNQ0/fYZb/X1SGhO2fYLVW -----END CERTIFICATE-----Generated at Sat Aug 23 14:48:27 2025 by rpki-client