$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa File: df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa (raw, json) Hash identifier: RZYGtYnkKmfKj+lK6UPmiHsQ3GpzHTRWUOLNUVEyVKg= Subject key identifier: 9A:05:F2:74:9A:9D:AC:77:57:AB:B0:EC:F6:9E:5C:E1:20:36:68:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196FDC311B8C1FAACAAB380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 36629 IP address blocks: 2001:500:126::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:fd:c3:11:b8:c1:fa:ac:aa:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=14f52a51-10a6-4c46-ac7c-ca88dd43fff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3f:20:52:20:69:bb:9c:ef:e5:c8:b7:6d:97: 2f:d6:85:fa:a9:4c:aa:2a:75:4e:6c:05:2a:72:f7: 81:59:c2:b6:2c:b3:9f:97:67:a1:3e:8c:26:36:fb: d5:8d:88:c1:63:f7:7a:b6:9c:24:ae:c1:15:e6:81: f1:8b:2f:b6:cb:00:d1:d0:3c:81:a6:84:9b:58:1e: 35:12:68:06:3d:25:9a:12:58:65:54:73:bf:c1:08: d9:13:76:4b:51:fd:3d:93:14:75:f1:7f:8d:1d:ea: ca:4f:1c:54:9b:e3:38:1d:f0:f1:da:cb:f4:76:59: b0:a0:0d:c1:36:cd:cb:38:b6:9e:27:fc:89:67:ef: de:4b:fe:09:82:dd:9f:06:c3:ea:51:42:c0:1c:bd: 2d:93:34:53:66:41:8d:ff:ad:bd:eb:1f:9c:0d:04: 1b:dd:a7:05:6e:2b:79:10:31:80:76:24:c3:24:8a: fc:13:c4:b8:ea:89:3a:6f:1e:24:0c:05:20:6a:27: d0:c9:1b:15:7b:4f:fe:66:86:b3:88:88:8c:e6:bb: b5:71:8e:b7:1a:b3:cc:47:72:85:92:33:89:87:29: 93:02:dc:0c:95:4c:a9:eb:95:09:3c:f2:6d:49:2b: 73:6a:1e:14:49:20:5e:29:46:ae:83:ca:5c:43:09: fc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:05:F2:74:9A:9D:AC:77:57:AB:B0:EC:F6:9E:5C:E1:20:36:68:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df3a3076-4869-3a4b-b0fa-2b94a1f52fec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:08:82:5e:f4:25:a6:e7:03:d5:3b:67:5c:09:65:54:93:03: 13:1c:e4:b9:62:05:6f:46:fc:cc:8b:b4:38:41:ef:d4:8c:0e: 7f:9e:a4:5a:e6:69:bb:ea:aa:3a:6f:25:ec:fc:86:d9:15:4f: 86:3b:99:6f:bd:df:fe:67:92:ea:29:04:cd:68:76:3f:91:e3: 19:d6:b1:3e:5d:90:c2:29:4a:c1:b1:50:e7:ef:9c:10:3e:b2: 4e:da:4a:8f:fa:ce:ef:6d:9f:7f:4a:9c:ad:54:93:15:e4:50: e4:3b:fc:c6:64:8b:b0:39:b6:6c:7b:ec:fa:81:7e:b6:b7:62: 79:0b:e4:26:53:14:f8:4c:c7:03:c7:41:ab:da:2b:da:7e:b4: a9:cf:2c:e9:44:66:f4:9b:8f:4f:4e:dd:c3:5a:a7:5d:35:ec: da:8f:a5:36:f6:52:7d:be:c2:0c:6e:28:7c:7d:bf:af:aa:5d: fa:6c:77:4a:9e:e2:ce:e7:72:8d:be:0d:e9:e8:54:b0:04:3f: c7:6a:78:59:37:fd:11:51:f0:4b:8d:d7:6c:f9:30:48:06:09: 61:ae:d7:fe:ec:aa:f0:70:ce:5e:c0:f1:ed:66:6e:4d:55:a8: 7f:51:77:1b:d3:44:e7:ee:6f:74:ba:4e:b0:7f:3c:b7:46:a9: 49:4b:d8:2c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlv3DEbjB+qyqs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MTRmNTJhNTEtMTBhNi00YzQ2LWFjN2MtY2E4OGRkNDNmZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT8gUiBpu5zv5ci3bZcv1oX6qUyqKnVObAUq cveBWcK2LLOfl2ehPowmNvvVjYjBY/d6tpwkrsEV5oHxiy+2ywDR0DyBpoSbWB41 EmgGPSWaElhlVHO/wQjZE3ZLUf09kxR18X+NHerKTxxUm+M4HfDx2sv0dlmwoA3B Ns3LOLaeJ/yJZ+/eS/4Jgt2fBsPqUULAHL0tkzRTZkGN/6296x+cDQQb3acFbit5 EDGAdiTDJIr8E8S46ok6bx4kDAUgaifQyRsVe0/+ZoaziIiM5ru1cY63GrPMR3KF kjOJhymTAtwMlUyp65UJPPJtSStzah4USSBeKUaug8pcQwn8tQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJoF8nSanax3V6uw7PaeXOEgNmjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGYzYTMwNzYtNDg2OS0z YTRiLWIwZmEtMmI5NGExZjUyZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBkCIJe9CWm5wPVO2dcCWVUkwMTHOS5YgVvRvzM i7Q4Qe/UjA5/nqRa5mm76qo6byXs/IbZFU+GO5lvvd/+Z5LqKQTNaHY/keMZ1rE+ XZDCKUrBsVDn75wQPrJO2kqP+s7vbZ9/SpytVJMV5FDkO/zGZIuwObZse+z6gX62 t2J5C+QmUxT4TMcDx0Gr2ivafrSpzyzpRGb0m49PTt3DWqddNezaj6U29lJ9vsIM bih8fb+vql36bHdKnuLO53KNvg3p6FSwBD/HanhZN/0RUfBLjdds+TBIBglhrtf+ 7KrwcM5ewPHtZm5NVah/UXcb00Tn7m90uk6wfzy3RqlJS9gs -----END CERTIFICATE-----Generated at Sat Aug 23 13:05:01 2025 by rpki-client