$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa File: e327dd02-2788-385a-abb3-3f7d57e3407c.roa (raw, json) Hash identifier: MnTUlS6IOWuJecJApWekOuN8j4efa7eUmBLuTqFilTk= Subject key identifier: D9:4F:E2:67:09:5C:78:1C:FE:C0:E9:3E:A9:F5:35:80:EE:24:CE:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE461373AD7DA18552B49BB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 397210 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:37:3a:d7:da:18:55:2b:49:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=ca86f241-7b36-4de0-a4bf-3a82e278c54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:35:7c:a3:cc:20:05:fc:7c:9f:2e:d4:04:bf: 2c:b2:7f:56:87:59:80:95:a9:2c:50:db:d6:9e:02: 63:16:a9:b1:db:ed:a2:bc:47:d8:ec:be:50:d5:1b: 23:d7:3d:5d:3c:16:d7:2e:f7:f0:be:0f:08:d5:d1: 1d:62:df:1e:2a:43:9a:44:c8:f2:bc:a2:09:90:03: ec:ee:25:93:f1:16:97:91:91:61:40:92:89:a4:92: 7c:7a:1d:55:01:ad:ac:62:8e:c5:d9:dd:37:23:5a: 39:09:18:80:9e:56:d9:97:9b:f9:b6:31:82:e8:e6: 54:ad:87:81:8a:62:be:10:90:8e:bc:cd:0e:02:9b: cb:3b:34:27:1b:bb:9b:01:b3:d5:74:d2:85:2b:ce: 24:3d:90:aa:08:7a:dc:6d:b3:24:dc:a4:cb:1e:8d: 4f:5e:40:3c:95:dd:51:32:00:e9:74:8f:ae:3b:f0: 9c:e8:18:73:c4:b6:a3:53:9c:2f:a6:23:9d:58:2a: 0a:b8:20:53:80:98:6b:ae:cd:15:b9:8d:cb:d2:fd: 4f:0d:db:2a:ff:9a:33:64:8a:14:fb:58:0e:f2:46: 73:04:b8:88:62:a6:e1:93:c3:ab:4d:d3:1c:3f:10: 73:4e:e2:0c:13:38:27:e9:aa:14:84:5a:3c:66:1d: cf:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4F:E2:67:09:5C:78:1C:FE:C0:E9:3E:A9:F5:35:80:EE:24:CE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e327dd02-2788-385a-abb3-3f7d57e3407c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:84:45:7a:bd:f9:4c:21:c8:ed:f8:e3:2a:26:73:18:c0:9f: 4e:06:be:87:bf:94:93:a5:91:b6:ac:69:ed:23:17:05:3a:33: 3b:c5:e7:d6:02:6a:ef:18:a8:8f:95:5b:cd:6f:b2:47:63:ec: 79:e8:59:03:1c:ee:6b:c4:81:db:a4:13:22:79:56:8a:01:14: ba:b8:32:23:df:12:86:47:3a:b0:34:2b:5e:e1:2f:4e:71:9e: 71:ce:46:99:08:f4:17:71:7b:69:cd:1b:b0:61:38:56:94:9e: 43:14:67:5a:5e:b8:8d:bb:cd:4f:fa:59:9e:0b:a1:cd:2a:64: 2a:02:00:73:5b:60:33:c9:6f:1a:3c:8b:bd:2a:a7:db:79:ee: 8e:b9:87:f1:73:be:7a:b4:53:96:fa:48:74:e6:b8:d3:d3:36: 83:0d:b7:83:0d:6e:eb:23:7a:12:d8:c3:d4:c4:af:0b:6c:db: ad:a6:94:32:17:0a:e5:58:53:47:44:d7:f2:ec:be:2c:33:da: 14:13:01:ea:18:31:92:0d:0c:9e:26:95:11:fd:27:90:e8:31: 49:6c:26:fe:80:f7:5f:90:27:7c:05:2b:55:33:db:7f:ff:e2: a5:20:d9:9f:19:4a:b6:f7:b4:61:9a:a1:64:df:61:0b:6d:70: c5:bc:73:a9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErkYTc619oYVStJu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2E4NmYyNDEtN2IzNi00ZGUwLWE0YmYtM2E4MmUyNzhjNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujV8o8wgBfx8ny7UBL8ssn9Wh1mAlaksUNvW ngJjFqmx2+2ivEfY7L5Q1Rsj1z1dPBbXLvfwvg8I1dEdYt8eKkOaRMjyvKIJkAPs 7iWT8RaXkZFhQJKJpJJ8eh1VAa2sYo7F2d03I1o5CRiAnlbZl5v5tjGC6OZUrYeB imK+EJCOvM0OApvLOzQnG7ubAbPVdNKFK84kPZCqCHrcbbMk3KTLHo1PXkA8ld1R MgDpdI+uO/Cc6BhzxLajU5wvpiOdWCoKuCBTgJhrrs0VuY3L0v1PDdsq/5ozZIoU +1gO8kZzBLiIYqbhk8OrTdMcPxBzTuIMEzgn6aoUhFo8Zh3P4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNlP4mcJXHgc/sDpPqn1NYDuJM55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTMyN2RkMDItMjc4OC0z ODVhLWFiYjMtM2Y3ZDU3ZTM0MDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC6hEV6vflMIcjt+OMqJnMYwJ9OBr6Hv5STpZG2 rGntIxcFOjM7xefWAmrvGKiPlVvNb7JHY+x56FkDHO5rxIHbpBMieVaKARS6uDIj 3xKGRzqwNCte4S9OcZ5xzkaZCPQXcXtpzRuwYThWlJ5DFGdaXriNu81P+lmeC6HN KmQqAgBzW2AzyW8aPIu9Kqfbee6OuYfxc756tFOW+kh05rjT0zaDDbeDDW7rI3oS 2MPUxK8LbNutppQyFwrlWFNHRNfy7L4sM9oUEwHqGDGSDQyeJpUR/SeQ6DFJbCb+ gPdfkCd8BStVM9t//+KlINmfGUq297RhmqFk32ELbXDFvHOp -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:44 2025 by rpki-client