$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb40d7b-5613-373e-8a9d-5f17261e386e.roa File: bfb40d7b-5613-373e-8a9d-5f17261e386e.roa (raw, json) Hash identifier: WUzcHyJGoBU4fOZqudRUF5a+CdSQcXpvNfA4qFQrhMs= Subject key identifier: 46:0F:77:D5:7D:35:A8:6A:51:5A:C7:60:15:EC:75:D9:60:3A:1A:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196CBB705D5ACA483C60E20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb40d7b-5613-373e-8a9d-5f17261e386e.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 396578 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:cb:b7:05:d5:ac:a4:83:c6:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=99e95dbb-3a0c-4cbc-9aa4-ac485a000012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:78:37:e3:ff:33:a9:b9:88:8c:99:84:d4: 28:f6:65:76:fe:4f:8b:07:4d:ba:42:85:84:c9:21: b2:ed:94:c1:f0:76:57:e7:77:c2:33:84:73:5f:41: c0:c9:ec:0c:0d:42:36:04:0b:2a:91:11:d7:be:fd: 24:0d:6c:77:95:23:15:b8:e9:00:94:b8:47:be:19: 56:e4:fe:93:b6:19:a0:00:c4:17:07:b2:ce:95:54: 72:25:8d:50:e6:ed:10:8a:f3:c9:4a:65:64:55:27: 23:86:8c:3c:36:2c:dd:04:56:3f:2f:70:9b:6b:8d: 2f:9e:52:1a:64:46:4f:2a:69:dd:13:e1:66:c2:42: 2f:61:66:ae:68:9f:df:ad:c5:23:6a:f3:95:93:b0: d2:94:88:cd:23:af:c2:7e:e2:b5:dc:28:17:67:e4: 14:a3:8e:0e:5c:c5:2b:c1:83:23:4d:ee:69:1a:9c: a8:87:b3:56:7e:be:28:74:a1:6f:28:47:24:24:0d: 99:09:aa:74:d3:c8:40:68:cb:fb:2c:d1:b2:10:05: a6:d1:ad:fe:c1:50:ac:df:7f:62:c4:d1:15:5c:12: 43:7d:84:2f:34:02:ad:69:df:d0:5a:f5:25:12:8d: 10:a7:5f:3a:74:09:7b:d8:16:d1:0a:7f:75:8e:90: 12:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0F:77:D5:7D:35:A8:6A:51:5A:C7:60:15:EC:75:D9:60:3A:1A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfb40d7b-5613-373e-8a9d-5f17261e386e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:d0:38:b7:33:cf:1b:6b:b3:74:17:bc:fc:9e:f7:ff:ec:46: 46:a5:aa:c4:cf:72:ab:15:82:81:9b:15:95:60:74:6f:76:ba: b0:91:b8:fe:dc:4b:ef:85:aa:2b:c1:60:c2:39:54:ca:94:09: fa:37:3c:af:dc:31:e9:50:3d:e9:59:05:26:8f:88:39:ef:00: 39:93:76:fd:5f:42:28:6d:a8:38:80:93:35:95:98:2f:21:aa: f2:ec:61:3c:49:ea:1d:f5:1f:9d:0b:19:cf:68:3b:e2:6a:88: 25:4d:16:2c:9d:ea:0b:64:df:f4:8e:af:84:45:65:7e:c1:cd: 9c:eb:80:36:87:1b:e4:29:5d:29:21:a5:0a:96:08:6b:9a:69: 05:bc:a0:30:47:16:3e:c1:5f:0b:0d:8a:b8:b7:21:16:d0:4e: 5f:81:77:fe:24:82:6b:1a:0d:99:7f:05:23:df:a2:b6:f6:3d: 78:26:cb:d3:e0:9f:f3:b6:33:56:ab:f4:67:d0:82:4f:fd:8a: e3:5f:68:26:9d:38:62:77:fd:27:bd:1a:12:6a:30:d8:ae:3f: 40:67:1c:e8:f9:f6:40:3c:de:5f:d1:d5:30:d4:ed:e5:db:0e: 26:2c:22:d5:f5:83:b3:0f:4c:d5:8c:ae:6b:1f:f6:ee:bd:cc: 14:17:bb:73 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlsu3BdWspIPGDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk OTllOTVkYmItM2EwYy00Y2JjLTlhYTQtYWM0ODVhMDAwMDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNZ4N+P/M6m5iIyZhNQo9mV2/k+LB026QoWE ySGy7ZTB8HZX53fCM4RzX0HAyewMDUI2BAsqkRHXvv0kDWx3lSMVuOkAlLhHvhlW 5P6TthmgAMQXB7LOlVRyJY1Q5u0QivPJSmVkVScjhow8NizdBFY/L3Cba40vnlIa ZEZPKmndE+FmwkIvYWauaJ/frcUjavOVk7DSlIjNI6/CfuK13CgXZ+QUo44OXMUr wYMjTe5pGpyoh7NWfr4odKFvKEckJA2ZCap008hAaMv7LNGyEAWm0a3+wVCs339i xNEVXBJDfYQvNAKtad/QWvUlEo0Qp186dAl72BbRCn91jpAS+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEYPd9V9NahqUVrHYBXsddlgOhqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZiNDBkN2ItNTYxMy0z NzNlLThhOWQtNWYxNzI2MWUzODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB70Di3M88ba7N0F7z8nvf/7EZGparEz3KrFYKB mxWVYHRvdrqwkbj+3EvvhaorwWDCOVTKlAn6Nzyv3DHpUD3pWQUmj4g57wA5k3b9 X0Iobag4gJM1lZgvIary7GE8Seod9R+dCxnPaDviaoglTRYsneoLZN/0jq+ERWV+ wc2c64A2hxvkKV0pIaUKlghrmmkFvKAwRxY+wV8LDYq4tyEW0E5fgXf+JIJrGg2Z fwUj36K29j14JsvT4J/ztjNWq/Rn0IJP/YrjX2gmnThid/0nvRoSajDYrj9AZxzo +fZAPN5f0dUw1O3l2w4mLCLV9YOzD0zVjK5rH/buvcwUF7tz -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:19 2025 by rpki-client