$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2a8e006-7da6-310e-b395-ef8242a0b7e7.roa File: c2a8e006-7da6-310e-b395-ef8242a0b7e7.roa (raw, json) Hash identifier: eJ32iEzFXEP/FfPfuPhph1K5eVg/88puR+eunYRrBy8= Subject key identifier: 9B:24:DB:84:B0:A5:97:EF:8B:72:E0:1C:23:10:15:26:88:CC:5C:1D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196DF9D2A98C14F32167900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2a8e006-7da6-310e-b395-ef8242a0b7e7.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 19836 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:df:9d:2a:98:c1:4f:32:16:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=777f3691-85b2-4b5c-a1ea-d81b040b98a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:e1:59:a8:c9:89:23:03:5b:a8:23:82:a9: 3f:82:23:e9:b7:4f:58:75:6b:6b:86:0d:2d:40:db: 4c:f8:40:34:9a:05:b8:b3:df:bc:5d:89:66:98:a8: 7d:a5:ea:80:ab:c9:ba:ec:36:34:7c:7b:b1:42:14: 2b:58:57:81:0c:93:ae:f3:2e:e4:86:e8:ca:c6:d6: 60:35:05:2c:bf:b1:cd:82:0d:78:87:68:5b:18:56: 04:4b:a7:48:aa:6b:81:33:2b:00:25:1a:c8:e7:40: 6f:f0:60:b6:9c:0e:b4:db:0a:c0:94:88:98:30:37: 7d:cf:8e:56:82:75:67:0e:6a:88:e2:ae:66:41:88: 7f:e6:69:7c:28:f2:51:96:c6:cf:0b:33:9a:9e:96: b6:70:77:12:e2:5a:cf:51:17:d9:ff:03:11:37:3e: f3:bc:a6:d4:ef:34:89:d0:81:17:7c:9c:ab:8d:29: 21:c8:19:cf:a6:13:bc:16:88:a4:27:f7:2f:7d:41: d6:a6:18:ea:79:99:d0:34:9f:5a:85:76:d3:0c:08: 82:9c:c9:80:9d:9a:18:8e:d4:78:90:db:ac:15:1f: 75:69:56:51:fa:9d:02:05:ec:a8:0b:6b:52:10:89: 9f:92:fe:2a:bb:b1:2d:37:50:9e:fd:02:77:7d:18: 49:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:24:DB:84:B0:A5:97:EF:8B:72:E0:1C:23:10:15:26:88:CC:5C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2a8e006-7da6-310e-b395-ef8242a0b7e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fb:6d:ff:7a:06:1a:66:37:a1:eb:1c:2d:66:ab:e4:30:9a: ee:e8:66:5f:d6:2b:a7:0c:51:8c:7b:37:23:dc:a3:5c:f9:e9: 95:95:b8:dc:23:bf:ad:e0:1d:34:c9:47:7a:fd:ac:44:73:ea: 02:f4:fd:c7:71:51:6f:10:42:89:40:1a:7c:0c:2f:a9:38:c3: b2:5e:22:f7:b2:1f:ef:b5:24:6e:a8:98:67:92:f7:36:d2:b8: 16:38:d6:a5:e4:6c:04:36:e4:5c:19:26:1f:8e:f7:85:3f:02: f2:fd:55:b1:72:53:16:ca:58:3d:11:2f:83:d4:20:50:03:e4: 50:2e:29:95:5f:3c:85:67:ba:ef:ee:78:5d:be:ab:4c:fa:a0: a0:fd:d7:ba:78:fd:7b:73:8f:3e:e7:58:1a:ff:d5:70:b1:96: 4f:a5:91:3f:2a:6d:a5:cd:03:95:b1:2c:03:2d:bf:35:d2:22: d7:60:68:b3:e7:8c:3b:1e:c7:b3:79:a1:33:31:98:51:0b:ac: cd:35:b1:7a:44:5e:f8:cb:b2:22:e3:02:a1:8e:63:c5:e2:3c: b0:0a:4f:88:82:88:46:f1:7e:47:ac:e6:d8:a7:7a:49:06:7a: 20:d4:fa:a4:46:41:47:c5:61:13:68:f9:90:09:cd:0a:ca:22: c2:8f:ce:71 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlt+dKpjBTzIWeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk Nzc3ZjM2OTEtODViMi00YjVjLWExZWEtZDgxYjA0MGI5OGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0/hWajJiSMDW6gjgqk/giPpt09YdWtrhg0t QNtM+EA0mgW4s9+8XYlmmKh9peqAq8m67DY0fHuxQhQrWFeBDJOu8y7khujKxtZg NQUsv7HNgg14h2hbGFYES6dIqmuBMysAJRrI50Bv8GC2nA602wrAlIiYMDd9z45W gnVnDmqI4q5mQYh/5ml8KPJRlsbPCzOanpa2cHcS4lrPURfZ/wMRNz7zvKbU7zSJ 0IEXfJyrjSkhyBnPphO8FoikJ/cvfUHWphjqeZnQNJ9ahXbTDAiCnMmAnZoYjtR4 kNusFR91aVZR+p0CBeyoC2tSEImfkv4qu7EtN1Ce/QJ3fRhJFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJsk24SwpZfvi3LgHCMQFSaIzFwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJhOGUwMDYtN2RhNi0z MTBlLWIzOTUtZWY4MjQyYTBiN2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBY+23/egYaZjeh6xwtZqvkMJru6GZf1iunDFGM ezcj3KNc+emVlbjcI7+t4B00yUd6/axEc+oC9P3HcVFvEEKJQBp8DC+pOMOyXiL3 sh/vtSRuqJhnkvc20rgWONal5GwENuRcGSYfjveFPwLy/VWxclMWylg9ES+D1CBQ A+RQLimVXzyFZ7rv7nhdvqtM+qCg/de6eP17c48+51ga/9VwsZZPpZE/Km2lzQOV sSwDLb810iLXYGiz54w7HsezeaEzMZhRC6zNNbF6RF74y7Ii4wKhjmPF4jywCk+I gohG8X5HrObYp3pJBnog1PqkRkFHxWETaPmQCc0KyiLCj85x -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:40 2025 by rpki-client