$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1af884-2672-38e8-a1de-7fa3559cc4cb.roa File: ce1af884-2672-38e8-a1de-7fa3559cc4cb.roa (raw, json) Hash identifier: rha0IGPzyuphWOpSjKlRZ3T34/SyAj6bZpZ+tzqG2+M= Subject key identifier: B4:E1:8D:B7:29:AF:50:D1:C3:E0:D0:B2:20:17:B5:48:C0:5D:ED:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F6761276125ABE47901900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1af884-2672-38e8-a1de-7fa3559cc4cb.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396615 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:76:12:76:12:5a:be:47:90:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=5fb60bdf-86ce-429b-b35b-36f28e52e6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a7:52:26:e2:c1:8f:01:b8:df:84:0e:b3:56: 5b:17:2b:41:41:47:c8:f2:35:94:2b:78:30:e1:da: be:77:c0:c1:dd:87:bf:c3:3d:8b:61:ed:05:c1:db: 0a:81:e1:c7:eb:fa:b9:a7:ff:0c:87:2c:15:50:a7: 0a:54:1f:49:ab:36:ef:f2:ab:ac:07:b0:ad:b2:3c: b8:54:b7:05:26:eb:f4:fb:38:4b:a3:17:74:c3:0b: a1:c3:a9:97:da:d6:48:78:52:b2:f0:0f:8d:1c:5b: 01:2b:ef:88:7b:36:75:63:21:7c:43:d4:71:59:d9: f5:fe:b9:92:b8:1a:fc:8d:f7:21:bb:e6:f0:dd:5b: db:9f:6d:bb:ec:99:7a:9b:a2:32:ac:6f:08:f4:87: d0:f3:23:72:1b:0a:8c:a2:d7:b9:86:06:4d:28:63: 64:e8:f0:a7:e1:69:db:15:04:c0:cb:53:3a:09:af: 26:75:f9:bf:c7:ac:a0:a3:7d:65:60:49:bd:53:fd: b8:e5:02:c5:e7:de:70:16:27:0f:52:12:da:a1:97: c0:b3:f2:ad:a6:d3:a6:25:c1:be:f4:71:c7:7e:01: b9:18:06:55:59:e6:00:4b:b6:e3:ec:1d:95:41:50: 46:fe:cf:54:38:c5:37:cd:30:db:9b:f5:f5:93:d7: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E1:8D:B7:29:AF:50:D1:C3:E0:D0:B2:20:17:B5:48:C0:5D:ED:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce1af884-2672-38e8-a1de-7fa3559cc4cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:20:08:36:b8:88:10:05:c9:39:5c:8e:92:fb:39:46:96:5b: 09:85:62:44:11:34:7c:c6:63:4e:a3:0f:f3:86:30:a0:0d:7c: 86:6e:08:c2:34:23:6f:db:83:28:42:74:f2:b0:30:e4:7d:8c: ce:c2:b1:58:28:02:23:7d:f2:4a:0e:13:f4:8a:ba:bc:c7:32: e7:59:34:53:76:71:2b:cb:d0:49:7c:86:04:6c:ee:72:82:d1: 1e:7e:34:30:d0:12:f8:25:ba:86:f2:9d:b1:36:5a:66:0a:99: ab:73:2d:d8:9a:2e:26:8a:cf:39:4f:a8:6e:e6:37:93:75:1f: 17:87:34:39:0c:d5:4d:19:54:b5:6b:9c:ff:d0:31:7a:2a:c7: a0:25:7c:c7:8e:5e:9e:85:b5:2c:2d:b4:68:b4:93:a6:04:fb: e7:6a:7a:eb:30:47:5e:23:7e:a5:6c:c2:be:ed:6e:47:87:32: bd:9b:18:6f:67:50:4d:19:8b:0c:13:28:25:91:2a:29:ef:0a: da:97:0e:a0:e6:27:f0:78:d2:36:bd:16:b8:75:6a:ea:8d:2f: 5e:5e:76:15:e9:5a:f7:a8:98:db:3e:d6:ea:8c:ba:21:a3:49: 1e:0a:f5:e9:6b:80:0a:40:9e:2a:9d:70:cd:29:a5:0c:16:41: d7:55:93:1f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nYSdhJavkeQGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NWZiNjBiZGYtODZjZS00MjliLWIzNWItMzZmMjhlNTJlNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6dSJuLBjwG434QOs1ZbFytBQUfI8jWUK3gw 4dq+d8DB3Ye/wz2LYe0FwdsKgeHH6/q5p/8MhywVUKcKVB9Jqzbv8qusB7Ctsjy4 VLcFJuv0+zhLoxd0wwuhw6mX2tZIeFKy8A+NHFsBK++IezZ1YyF8Q9RxWdn1/rmS uBr8jfchu+bw3Vvbn2277Jl6m6IyrG8I9IfQ8yNyGwqMote5hgZNKGNk6PCn4Wnb FQTAy1M6Ca8mdfm/x6ygo31lYEm9U/245QLF595wFicPUhLaoZfAs/KtptOmJcG+ 9HHHfgG5GAZVWeYAS7bj7B2VQVBG/s9UOMU3zTDbm/X1k9dF9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLThjbcpr1DRw+DQsiAXtUjAXe0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2UxYWY4ODQtMjY3Mi0z OGU4LWExZGUtN2ZhMzU1OWNjNGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAAIAg2uIgQBck5XI6S+zlGllsJhWJEETR8xmNO ow/zhjCgDXyGbgjCNCNv24MoQnTysDDkfYzOwrFYKAIjffJKDhP0irq8xzLnWTRT dnEry9BJfIYEbO5ygtEefjQw0BL4JbqG8p2xNlpmCpmrcy3Ymi4mis85T6hu5jeT dR8XhzQ5DNVNGVS1a5z/0DF6KsegJXzHjl6ehbUsLbRotJOmBPvnanrrMEdeI36l bMK+7W5HhzK9mxhvZ1BNGYsMEyglkSop7wralw6g5ifweNI2vRa4dWrqjS9eXnYV 6Vr3qJjbPtbqjLoho0keCvXpa4AKQJ4qnXDNKaUMFkHXVZMf -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:56 2025 by rpki-client