$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73de676-04b5-3fcd-8235-13a590126d3b.roa File: f73de676-04b5-3fcd-8235-13a590126d3b.roa (raw, json) Hash identifier: AM5brFQS+eSTmHWjZL1jCAFJC0Tddk6QmwpcLTFJ6RY= Subject key identifier: CB:5D:64:FA:76:18:E6:72:3C:53:01:DF:74:02:2D:26:5E:9A:83:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE19702FF240A17B220B56D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73de676-04b5-3fcd-8235-13a590126d3b.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 397208 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:97:02:ff:24:0a:17:b2:20:b5:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=0878cc20-533c-4576-b55f-df1561c3d901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:85:b1:9e:b9:29:35:80:8a:f2:07:0d:df:dc: 76:cb:75:31:d5:4b:49:41:74:8c:a0:69:64:5a:fe: 15:cb:dd:20:41:1a:ec:4d:b1:fd:01:01:cb:59:06: 55:28:fd:96:fc:10:a7:16:71:ef:e7:ec:53:1c:ac: 38:cc:a0:e5:9b:d0:d1:f3:cc:f6:23:05:ed:09:27: 5e:d6:0a:30:ee:a3:9c:3d:95:be:c5:8b:04:b0:1d: f1:3e:12:23:10:ac:4f:91:f8:6b:33:0d:fa:f5:30: 6c:89:6a:55:20:1f:95:5a:c6:43:81:e4:f1:a4:d0: 87:48:17:4a:26:9f:14:b4:ea:4b:79:4b:9f:ce:b6: 40:69:ed:bc:c3:f0:27:45:36:b9:39:b6:e9:26:67: 1c:5d:85:84:64:19:67:77:c8:91:7c:d1:5f:94:50: 60:91:df:21:ad:a3:d1:20:1d:02:16:67:c6:f1:1b: d0:f2:a0:4c:fb:f2:ad:13:a1:e5:48:6c:3f:f4:92: 39:bb:95:0a:bb:05:73:9e:00:f7:1e:c5:79:c4:b0: f4:22:d5:f5:4c:85:d4:45:e5:af:c5:d4:cc:8b:d3: 95:7f:44:21:49:b7:b6:1d:2c:0c:59:fb:0c:2c:ec: d3:e4:61:96:ca:cc:85:48:1b:b1:d9:d8:1d:46:7f: 87:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5D:64:FA:76:18:E6:72:3C:53:01:DF:74:02:2D:26:5E:9A:83:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f73de676-04b5-3fcd-8235-13a590126d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e8:a4:96:78:79:71:57:e8:a8:e4:07:15:91:a7:8a:b3:f3: b2:77:b1:76:ae:de:75:e9:f3:3a:80:b3:8e:33:1b:44:58:14: a4:9a:57:65:a7:12:45:f5:04:e3:26:11:54:5f:79:40:d9:27: 25:11:e1:a9:50:cf:8e:a5:0c:08:a5:71:02:d3:51:2e:4e:08: 02:57:d6:54:56:06:7e:0d:4b:77:c9:df:6b:8e:1f:af:94:a7: 8c:24:90:59:8d:20:c9:71:9a:ff:9d:ec:cc:98:8b:06:4c:48: 78:44:a3:98:17:23:be:b7:10:61:ac:e3:a3:66:3f:71:74:4c: cd:ce:a6:f0:0d:b5:52:73:38:c0:fb:f6:e9:89:25:82:94:43: 54:a6:a1:68:af:02:15:0b:29:fb:3c:0e:cc:06:5f:ff:33:74: ce:c8:c6:98:03:30:44:d2:97:87:34:12:8d:e7:f8:24:f2:0f: 53:91:2b:9f:4d:60:40:42:3f:b0:c1:85:53:db:35:a6:f4:96: c9:28:33:8b:05:16:fe:5c:5c:c8:fc:9b:56:53:5b:af:38:d8: 50:db:e6:80:ce:51:d5:66:36:be:7d:62:32:42:18:cf:d1:05: 37:7a:4c:79:f4:69:e0:b1:25:72:a6:87:93:8c:26:26:4f:dd: ce:b1:5a:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlwL/JAoXsiC1bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk MDg3OGNjMjAtNTMzYy00NTc2LWI1NWYtZGYxNTYxYzNkOTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIWxnrkpNYCK8gcN39x2y3Ux1UtJQXSMoGlk Wv4Vy90gQRrsTbH9AQHLWQZVKP2W/BCnFnHv5+xTHKw4zKDlm9DR88z2IwXtCSde 1gow7qOcPZW+xYsEsB3xPhIjEKxPkfhrMw369TBsiWpVIB+VWsZDgeTxpNCHSBdK Jp8UtOpLeUufzrZAae28w/AnRTa5ObbpJmccXYWEZBlnd8iRfNFflFBgkd8hraPR IB0CFmfG8RvQ8qBM+/KtE6HlSGw/9JI5u5UKuwVzngD3HsV5xLD0ItX1TIXUReWv xdTMi9OVf0QhSbe2HSwMWfsMLOzT5GGWysyFSBux2dgdRn+HBwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMtdZPp2GOZyPFMB33QCLSZemoNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjczZGU2NzYtMDRiNS0z ZmNkLTgyMzUtMTNhNTkwMTI2ZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBq6KSWeHlxV+io5AcVkaeKs/Oyd7F2rt516fM6 gLOOMxtEWBSkmldlpxJF9QTjJhFUX3lA2SclEeGpUM+OpQwIpXEC01EuTggCV9ZU VgZ+DUt3yd9rjh+vlKeMJJBZjSDJcZr/nezMmIsGTEh4RKOYFyO+txBhrOOjZj9x dEzNzqbwDbVSczjA+/bpiSWClENUpqForwIVCyn7PA7MBl//M3TOyMaYAzBE0peH NBKN5/gk8g9TkSufTWBAQj+wwYVT2zWm9JbJKDOLBRb+XFzI/JtWU1uvONhQ2+aA zlHVZja+fWIyQhjP0QU3ekx59GngsSVypoeTjCYmT93OsVoV -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:52 2025 by rpki-client