$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa File: cf3f7b05-ec57-3876-bf16-52189983e82b.roa (raw, json) Hash identifier: EEeH+mtV6JTVqfj6tOPYggTks1hB4gxUNHrYn4kdi+o= Subject key identifier: 8E:C7:7C:A2:4D:CD:E1:6A:CE:7B:32:DC:11:9B:72:47:FF:75:33:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F679847040BB2F27DA3A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 19836 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:79:84:70:40:bb:2f:27:da:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=303cebc6-32db-4c44-8afc-a0457ea73287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:b8:a0:f7:3a:7d:52:6c:68:e3:05:fe:66: f8:ce:91:01:d2:9a:60:d7:07:c1:30:ac:3a:3d:9e: 4b:0c:e3:ad:a4:59:18:e7:bc:2f:8a:1d:e7:3f:7d: 28:16:b8:0d:dc:d2:6c:46:cf:cf:e9:75:fd:b2:3d: 9f:10:d3:ab:80:42:d0:b6:26:0d:0d:c5:b8:95:bb: da:e6:54:2e:b9:9b:da:d2:ae:0f:f8:2f:5a:9a:d3: e1:f7:2d:21:f8:18:26:f6:7b:56:f2:e0:4e:b3:18: 96:35:04:66:58:c5:13:01:27:88:07:81:3e:33:56: 32:98:4a:7b:49:d8:14:6e:1b:86:02:dd:5c:24:6d: 28:a5:b9:6d:df:45:fe:88:ae:05:fb:eb:10:60:a0: 3f:59:96:d5:a0:07:11:d0:64:51:e4:a7:37:38:6d: d8:16:e6:d1:a9:fc:17:d7:db:fe:66:99:95:98:01: fb:86:02:50:6b:1c:c1:77:97:5a:d5:82:f2:a1:b1: 2a:42:0e:ac:69:42:e8:43:4e:60:d8:c7:be:a0:8c: 0f:6b:ec:b1:7d:11:04:44:b9:bf:8c:6b:3d:25:87: 95:57:21:76:86:c6:19:11:58:d5:50:90:c3:fd:4c: f9:47:28:bd:7f:8e:d9:6e:86:8f:75:20:a4:ef:f5: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C7:7C:A2:4D:CD:E1:6A:CE:7B:32:DC:11:9B:72:47:FF:75:33:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3f7b05-ec57-3876-bf16-52189983e82b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:40:52:4b:74:93:af:4c:37:65:1d:3b:aa:14:1b:49:e6:89: 8f:d6:01:ef:2c:b2:41:ca:b0:47:33:22:29:86:90:d1:af:8e: 0c:58:2c:4c:da:8c:59:6c:78:0b:ba:f8:44:16:ab:6a:c1:d7: 2c:68:24:16:6f:8b:4a:b8:a8:b6:cc:f6:f3:5f:ac:0d:81:e4: 61:97:2c:6f:66:23:0d:46:8e:a1:01:db:4d:9c:58:73:aa:04: 6f:a0:f8:be:1f:14:a1:c0:f6:dc:aa:93:8b:6a:b6:3b:07:a3: 02:84:b5:c9:91:30:25:0e:ef:03:85:66:cd:f3:9b:82:9a:74: 99:e9:46:ab:c5:d8:6e:0d:c3:1c:eb:6e:77:e2:ae:04:9a:4e: e8:f0:7b:21:13:20:ae:c1:07:d4:57:0b:60:01:d4:46:6d:aa: 4d:7e:1d:4a:15:e4:d7:91:c4:e5:03:99:73:81:08:99:61:f0: 3b:3b:e8:8b:35:8a:4b:e9:1e:ee:b8:f8:cf:1b:70:61:0d:f0: c3:0e:68:a5:d2:b2:76:09:06:0e:1b:74:4c:6c:e5:20:04:1d: 71:b3:9a:c0:dd:3b:39:95:93:49:df:d3:de:11:19:70:39:63: 81:57:66:5b:c9:7e:49:7e:16:ad:54:c0:0c:0d:48:fd:c8:04: 60:34:8e:ea -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nmEcEC7LyfaOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk MzAzY2ViYzYtMzJkYi00YzQ0LThhZmMtYTA0NTdlYTczMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCC4oPc6fVJsaOMF/mb4zpEB0ppg1wfBMKw6 PZ5LDOOtpFkY57wvih3nP30oFrgN3NJsRs/P6XX9sj2fENOrgELQtiYNDcW4lbva 5lQuuZva0q4P+C9amtPh9y0h+Bgm9ntW8uBOsxiWNQRmWMUTASeIB4E+M1YymEp7 SdgUbhuGAt1cJG0opblt30X+iK4F++sQYKA/WZbVoAcR0GRR5Kc3OG3YFubRqfwX 19v+ZpmVmAH7hgJQaxzBd5da1YLyobEqQg6saULoQ05g2Me+oIwPa+yxfREERLm/ jGs9JYeVVyF2hsYZEVjVUJDD/Uz5Ryi9f47ZboaPdSCk7/XHxQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFI7HfKJNzeFqznsy3BGbckf/dTMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzZjdiMDUtZWM1Ny0z ODc2LWJmMTYtNTIxODk5ODNlODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB5QFJLdJOvTDdlHTuqFBtJ5omP1gHvLLJByrBH MyIphpDRr44MWCxM2oxZbHgLuvhEFqtqwdcsaCQWb4tKuKi2zPbzX6wNgeRhlyxv ZiMNRo6hAdtNnFhzqgRvoPi+HxShwPbcqpOLarY7B6MChLXJkTAlDu8DhWbN85uC mnSZ6UarxdhuDcMc62534q4Emk7o8HshEyCuwQfUVwtgAdRGbapNfh1KFeTXkcTl A5lzgQiZYfA7O+iLNYpL6R7uuPjPG3BhDfDDDmil0rJ2CQYOG3RMbOUgBB1xs5rA 3Ts5lZNJ39PeERlwOWOBV2ZbyX5JfhatVMAMDUj9yARgNI7q -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:55 2025 by rpki-client