$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99671a2-1fd5-3c5c-9b69-6357cdd44a3f.roa File: f99671a2-1fd5-3c5c-9b69-6357cdd44a3f.roa (raw, json) Hash identifier: YlGaaGb/1yeC4CGayHYCr7VLSDbblylFv4vjJNWnILI= Subject key identifier: 37:2F:B3:1D:CC:4C:53:2B:01:EF:07:96:E7:E5:DA:25:47:FD:3B:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196F2A9E13AF3389857A960 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99671a2-1fd5-3c5c-9b69-6357cdd44a3f.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 396546 IP address blocks: 2001:500:127::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:f2:a9:e1:3a:f3:38:98:57:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=c2b39b93-04e0-4a7b-9489-6639449d1bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:2b:ff:d5:f4:a3:2a:8a:33:f5:1e:de:82: 87:61:61:ea:d0:dd:58:0e:3f:2d:c9:8c:e4:b3:78: 1b:97:5a:d4:26:3a:e9:1a:72:c7:d7:63:f3:64:39: da:53:60:6c:eb:d2:88:26:f5:c6:71:fd:47:49:3c: 34:8a:43:cb:a1:22:5f:a8:a4:7c:88:3b:fb:99:6b: 29:75:54:9c:c2:b5:64:92:c0:c2:7d:c7:79:51:0c: 0d:1a:08:9a:98:26:06:2d:14:38:08:bd:38:7e:13: 2f:69:b4:62:66:2b:b6:e0:1a:92:0d:e3:0c:5a:dc: 20:8d:a5:2d:88:96:36:15:4b:2c:25:35:17:6e:6f: 3b:22:97:6f:7d:46:6e:a8:5a:77:9d:3b:cf:ba:8f: 41:1a:45:d7:a8:79:40:e7:76:a2:7e:3d:5e:cb:d3: 6d:62:d2:09:76:ca:78:72:85:1c:5a:d5:d2:a7:48: 23:f9:6d:4a:be:37:0d:61:fb:5b:1e:f8:1a:c1:dc: 4e:92:ab:16:9a:77:d8:f8:26:99:36:02:08:f4:1b: 93:e6:44:13:63:5c:96:d7:b1:fc:ac:75:5f:8c:e1: 5a:77:62:b3:0f:0d:52:a0:50:43:fe:c4:f9:b6:0f: 97:74:13:5f:bb:16:9e:5a:10:11:ff:ee:4b:b4:6b: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2F:B3:1D:CC:4C:53:2B:01:EF:07:96:E7:E5:DA:25:47:FD:3B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f99671a2-1fd5-3c5c-9b69-6357cdd44a3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4a:0d:d1:5c:15:3d:33:e8:9b:10:9e:5e:ba:18:3e:48:bb: ed:43:db:f5:e7:22:7a:09:6d:e9:c9:4c:09:01:1a:a2:6e:da: 1e:72:bb:e4:34:82:a7:e6:26:56:e8:27:57:8e:85:21:f1:85: a0:aa:7f:0e:0f:84:e1:16:ff:4f:4a:1a:f9:a7:4f:66:73:bf: 86:0c:08:d4:39:d0:e4:e7:93:42:97:6a:42:0f:06:33:0b:5c: 80:c1:f6:38:79:2e:c5:b0:7c:c5:f6:83:1a:48:69:30:1d:ad: 21:27:95:a9:b4:1b:45:c1:b2:4f:2d:f0:44:d0:fb:d1:7a:eb: db:83:0f:d4:99:e5:56:45:0e:78:63:4a:8b:b3:cc:c4:64:d6: 02:2f:08:5b:90:65:d0:ad:2c:ec:72:ed:0e:96:b9:02:7e:88: 77:2a:14:ea:fc:00:4b:40:1b:a8:f8:d9:8b:36:6f:71:77:63: 88:c1:2b:d0:fe:c7:10:22:9a:18:b5:85:5c:56:ce:d6:fb:c8: ce:38:3a:c7:ee:35:47:bc:00:ce:c7:4a:e8:ce:e6:71:06:4f: 7f:8d:97:aa:5a:58:13:9c:8f:85:b6:b1:13:89:7e:88:5f:f6: c3:cf:c8:6f:1b:27:0b:7b:2d:be:3f:be:f6:0a:8b:82:0e:6a: 9e:44:f1:e8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlvKp4TrzOJhXqWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YzJiMzliOTMtMDRlMC00YTdiLTk0ODktNjYzOTQ0OWQxYmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVQr/9X0oyqKM/Ue3oKHYWHq0N1YDj8tyYzk s3gbl1rUJjrpGnLH12PzZDnaU2Bs69KIJvXGcf1HSTw0ikPLoSJfqKR8iDv7mWsp dVScwrVkksDCfcd5UQwNGgiamCYGLRQ4CL04fhMvabRiZiu24BqSDeMMWtwgjaUt iJY2FUssJTUXbm87IpdvfUZuqFp3nTvPuo9BGkXXqHlA53aifj1ey9NtYtIJdsp4 coUcWtXSp0gj+W1KvjcNYftbHvgawdxOkqsWmnfY+CaZNgII9BuT5kQTY1yW17H8 rHVfjOFad2KzDw1SoFBD/sT5tg+XdBNfuxaeWhAR/+5LtGslNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDcvsx3MTFMrAe8Hlufl2iVH/Tv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk5NjcxYTItMWZkNS0z YzVjLTliNjktNjM1N2NkZDQ0YTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAQSg3RXBU9M+ibEJ5euhg+SLvtQ9v15yJ6CW3p yUwJARqibtoecrvkNIKn5iZW6CdXjoUh8YWgqn8OD4ThFv9PShr5p09mc7+GDAjU OdDk55NCl2pCDwYzC1yAwfY4eS7FsHzF9oMaSGkwHa0hJ5WptBtFwbJPLfBE0PvR euvbgw/UmeVWRQ54Y0qLs8zEZNYCLwhbkGXQrSzscu0OlrkCfoh3KhTq/ABLQBuo +NmLNm9xd2OIwSvQ/scQIpoYtYVcVs7W+8jOODrH7jVHvADOx0rozuZxBk9/jZeq WlgTnI+FtrETiX6IX/bDz8hvGycLey2+P772CouCDmqeRPHo -----END CERTIFICATE-----Generated at Sun Aug 24 01:15:36 2025 by rpki-client