$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa File: ca850840-255f-381a-ba18-ae3ac781c56e.roa (raw, json) Hash identifier: BjxifVianEwn/nD137BXTv/TDOBMll88K8+eyRoEXHM= Subject key identifier: CE:3D:19:1D:A7:06:5E:C0:EB:7C:9A:40:00:04:AD:8F:29:C7:CB:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196CA688DED35703B0E5A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 397197 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:ca:68:8d:ed:35:70:3b:0e:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=bd48761e-7279-48eb-a47f-5dde928e87d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:ed:48:39:38:af:09:47:a3:8c:e7:d5:7a: cc:d8:0d:4b:3c:0a:7a:b0:ae:e4:4b:b2:13:4b:0f: 95:71:1a:73:f9:7a:54:c4:96:03:31:e4:95:16:52: 46:fe:50:8c:e2:79:60:3f:70:98:a6:52:1a:fc:aa: 32:cb:d9:e7:15:6a:de:42:b4:db:45:46:e1:be:ef: 51:35:57:e7:e5:2c:df:d1:21:ad:6b:0e:0e:ac:19: 0b:29:1a:8e:19:1c:85:85:fb:1f:66:f5:06:78:51: a9:8c:5c:08:2b:cb:5b:3f:0e:70:ad:cb:dd:96:27: 06:88:bb:55:37:a1:27:dc:9a:4d:61:6b:b5:95:c6: f7:d2:d3:6a:74:7a:e6:07:84:5d:e2:fa:cf:20:c3: 86:6d:c0:53:e0:2c:e8:10:db:0f:d8:a4:df:86:57: dd:6e:09:a0:61:26:58:74:8a:09:75:72:0c:08:33: 6b:1d:e1:f8:30:3b:20:12:a1:90:2d:d9:35:8a:46: bf:80:4d:3d:7e:28:be:29:91:90:80:51:26:73:49: 8f:26:92:7b:76:ad:4f:58:78:94:98:e4:f8:a8:e6: 6b:26:1e:51:2f:1d:50:79:bb:ee:f9:04:87:d4:eb: 42:8f:75:5e:c8:00:73:2a:d5:66:e6:5c:3d:64:50: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:19:1D:A7:06:5E:C0:EB:7C:9A:40:00:04:AD:8F:29:C7:CB:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca850840-255f-381a-ba18-ae3ac781c56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a3:1e:c1:a1:0b:1f:5f:36:42:5f:7a:2e:67:95:d2:58:6c: ee:1c:d5:55:81:5c:5b:a7:1b:e1:63:b3:1d:52:85:ba:22:7f: 08:5c:24:85:e9:c3:d6:5c:9f:7d:55:12:a0:b9:90:15:24:cb: 2d:8e:cb:87:48:9d:1a:43:d1:09:75:4e:d6:77:9c:1f:0e:28: e8:d7:b1:b5:50:39:93:5e:91:4b:2a:d5:e5:e2:ad:e2:c3:38: 58:db:7a:bc:e4:5b:08:ea:b1:1e:90:18:36:2d:bf:c9:52:b3: d6:20:0b:ad:62:41:36:e9:fd:69:64:c5:96:9c:ee:72:28:19: 47:22:05:79:ae:3c:6a:4a:17:3f:6c:48:8e:6d:f6:fc:63:8f: a4:99:dd:75:a1:56:ee:fc:35:c4:73:bf:31:9d:ac:e8:e2:8b: 0d:c7:ba:43:dc:00:fc:da:52:54:ac:bb:aa:71:4d:2a:99:82: bb:b8:5d:d9:bb:4b:d1:b1:a4:01:e7:48:36:61:e5:db:00:84: 25:d2:ef:fa:02:a9:5a:0f:9a:9a:42:86:48:16:95:f7:97:ce: 5e:a7:3a:e4:19:a9:e1:c7:8e:ad:aa:e3:cc:f4:e5:9c:91:13: 62:f1:28:95:5a:94:2e:de:4f:b0:54:3c:2b:e9:0a:a6:78:a1: 89:c9:7a:84 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlspoje01cDsOWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YmQ0ODc2MWUtNzI3OS00OGViLWE0N2YtNWRkZTkyOGU4N2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP3tSDk4rwlHo4zn1XrM2A1LPAp6sK7kS7IT Sw+VcRpz+XpUxJYDMeSVFlJG/lCM4nlgP3CYplIa/Koyy9nnFWreQrTbRUbhvu9R NVfn5Szf0SGtaw4OrBkLKRqOGRyFhfsfZvUGeFGpjFwIK8tbPw5wrcvdlicGiLtV N6En3JpNYWu1lcb30tNqdHrmB4Rd4vrPIMOGbcBT4CzoENsP2KTfhlfdbgmgYSZY dIoJdXIMCDNrHeH4MDsgEqGQLdk1ika/gE09fii+KZGQgFEmc0mPJpJ7dq1PWHiU mOT4qOZrJh5RLx1Qebvu+QSH1OtCj3VeyABzKtVm5lw9ZFBToQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM49GR2nBl7A63yaQAAErY8px8uQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2E4NTA4NDAtMjU1Zi0z ODFhLWJhMTgtYWUzYWM3ODFjNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAIox7BoQsfXzZCX3ouZ5XSWGzuHNVVgVxbpxvh Y7MdUoW6In8IXCSF6cPWXJ99VRKguZAVJMstjsuHSJ0aQ9EJdU7Wd5wfDijo17G1 UDmTXpFLKtXl4q3iwzhY23q85FsI6rEekBg2Lb/JUrPWIAutYkE26f1pZMWWnO5y KBlHIgV5rjxqShc/bEiObfb8Y4+kmd11oVbu/DXEc78xnazo4osNx7pD3AD82lJU rLuqcU0qmYK7uF3Zu0vRsaQB50g2YeXbAIQl0u/6AqlaD5qaQoZIFpX3l85epzrk Ganhx46tquPM9OWckRNi8SiVWpQu3k+wVDwr6QqmeKGJyXqE -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:11 2025 by rpki-client