$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe2b7a4-47a2-3642-a979-a52d05172edd.roa File: cfe2b7a4-47a2-3642-a979-a52d05172edd.roa (raw, json) Hash identifier: dDSDAMdgcBNS04O7LlwBqm9w5fDA4vndloshR0TZsvo= Subject key identifier: D2:A5:4A:65:8D:1A:72:E9:D2:55:E1:A1:48:83:41:D0:3A:A0:11:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F673F4E7D2F93D224CB300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe2b7a4-47a2-3642-a979-a52d05172edd.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396542 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:73:f4:e7:d2:f9:3d:22:4c:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=67dc693a-9c30-494b-889e-8bdbd2ac0e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8a:9b:ef:70:68:cb:67:b3:8a:d8:e8:75:a1: cf:2d:7a:c0:92:fe:6e:84:7a:5e:3a:56:76:7e:b7: 86:4f:b0:d8:40:35:50:9c:d7:a9:26:0b:c7:b8:7b: 8f:16:18:fb:5e:08:cd:fa:b6:80:91:23:7b:b3:27: af:48:10:93:17:01:c4:a9:cb:ee:fe:d9:85:91:9a: 81:55:68:6e:66:da:f6:0a:e4:b0:87:76:49:4e:0c: 84:25:26:5f:cf:d2:e0:b0:fc:59:70:37:ad:f0:0d: bc:cf:89:86:05:7c:f0:09:a8:46:ab:88:ef:b9:4b: 90:99:8d:47:f8:4e:86:8e:c2:c5:4b:de:b4:e7:f6: fa:ec:21:44:16:0c:b2:46:1c:4e:74:a0:47:c4:ce: 04:39:25:c0:33:11:8e:a4:ba:0e:a7:d8:04:98:4e: 03:68:8b:d1:98:77:92:52:ea:5e:20:8e:9a:f5:fd: 87:cc:1a:69:df:ba:66:89:10:7e:d6:42:76:4c:38: 33:2d:fa:29:78:44:98:06:7c:06:19:e2:a8:b4:b6: 18:3b:90:48:aa:dd:d6:35:f5:a6:29:25:48:76:a1: ac:0c:81:64:46:07:14:37:ff:87:54:e0:d8:89:6e: 25:73:73:10:5b:bb:b3:9a:90:bd:d0:8d:5b:01:08: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A5:4A:65:8D:1A:72:E9:D2:55:E1:A1:48:83:41:D0:3A:A0:11:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfe2b7a4-47a2-3642-a979-a52d05172edd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:b0:85:69:23:9c:92:55:a4:0d:3c:e8:50:da:4b:b7:19:8f: af:a1:a8:ee:50:89:73:c3:c7:18:d4:2e:47:55:bd:50:88:fb: bc:78:ab:3c:74:07:c2:e1:7c:14:4d:2d:21:42:c2:f6:0d:29: 07:44:59:b7:99:33:96:45:5c:38:ee:e7:88:d0:ae:4d:66:38: 47:67:0b:58:d5:37:45:5a:85:b9:57:0f:31:0f:4c:7e:12:58: a1:63:25:b5:f7:2f:f7:63:3f:ad:a8:60:96:2c:05:03:c9:ad: 4c:81:8a:f8:b3:17:ad:f1:16:88:92:b8:f6:43:e4:3a:11:9f: be:46:5e:d7:f7:75:22:51:64:3d:f2:19:f2:89:96:37:fa:84: e9:d8:c0:b4:bf:d7:1b:b0:92:7b:18:a3:ef:fa:0c:34:14:c7: 23:10:21:af:b6:5d:39:a8:38:11:ac:39:7e:af:e5:63:ca:4c: c7:b8:aa:94:fd:f0:a9:4f:4a:5f:04:f6:d6:5f:a7:dc:9c:95: 65:af:f2:97:56:cc:33:1c:4c:54:08:72:e0:dc:f2:33:b1:fc: 50:c7:54:e6:8e:08:3c:ad:05:ad:04:c6:e0:14:d8:2b:47:81: 59:ec:f7:eb:ba:7e:5c:90:da:ae:ed:92:73:4f:62:d2:c8:33: de:6d:ee:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nP059L5PSJMswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NjdkYzY5M2EtOWMzMC00OTRiLTg4OWUtOGJkYmQyYWMwZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoqb73Boy2ezitjodaHPLXrAkv5uhHpeOlZ2 freGT7DYQDVQnNepJgvHuHuPFhj7XgjN+raAkSN7syevSBCTFwHEqcvu/tmFkZqB VWhuZtr2CuSwh3ZJTgyEJSZfz9LgsPxZcDet8A28z4mGBXzwCahGq4jvuUuQmY1H +E6GjsLFS9605/b67CFEFgyyRhxOdKBHxM4EOSXAMxGOpLoOp9gEmE4DaIvRmHeS UupeII6a9f2HzBpp37pmiRB+1kJ2TDgzLfopeESYBnwGGeKotLYYO5BIqt3WNfWm KSVIdqGsDIFkRgcUN/+HVODYiW4lc3MQW7uzmpC90I1bAQjaRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNKlSmWNGnLp0lXhoUiDQdA6oBExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZlMmI3YTQtNDdhMi0z NjQyLWE5NzktYTUyZDA1MTcyZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC3sIVpI5ySVaQNPOhQ2ku3GY+voajuUIlzw8cY 1C5HVb1QiPu8eKs8dAfC4XwUTS0hQsL2DSkHRFm3mTOWRVw47ueI0K5NZjhHZwtY 1TdFWoW5Vw8xD0x+ElihYyW19y/3Yz+tqGCWLAUDya1MgYr4sxet8RaIkrj2Q+Q6 EZ++Rl7X93UiUWQ98hnyiZY3+oTp2MC0v9cbsJJ7GKPv+gw0FMcjECGvtl05qDgR rDl+r+VjykzHuKqU/fCpT0pfBPbWX6fcnJVlr/KXVswzHExUCHLg3PIzsfxQx1Tm jgg8rQWtBMbgFNgrR4FZ7Pfrun5ckNqu7ZJzT2LSyDPebe4s -----END CERTIFICATE-----Generated at Sat Aug 23 17:30:49 2025 by rpki-client