$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa File: 0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa (raw, json) Hash identifier: ePOeebAYgK2JYHn2e//R7trUGEjmlO7kd77Rk3jSZHc= Subject key identifier: 80:A6:7E:D5:16:19:12:A4:80:7C:24:0F:D4:C3:93:E1:B3:86:60:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF9515EC2A69AD4C84B974080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 36624 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:5e:c2:a6:9a:d4:c8:4b:97:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=d35410f5-8bc8-40a2-bc5a-a183a751c6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:b6:9e:a8:9c:53:5c:99:df:43:cd:45:3e: b8:37:c7:7e:20:76:72:95:3a:e2:23:12:b5:aa:bb: 21:44:e3:48:be:aa:b7:2c:5f:40:49:04:29:5f:19: 78:27:9b:55:21:14:09:64:a0:bf:e2:7c:bf:99:31: 62:4d:78:f8:27:6f:b5:85:84:fe:d6:d4:da:95:5c: f3:0f:0a:64:75:d4:be:7d:6a:f5:81:5d:1b:89:58: b5:e0:ea:91:3c:00:c3:57:91:0d:22:6b:6a:e4:ff: f1:04:f2:df:3b:46:a8:e7:ce:48:37:21:74:a5:47: 15:0f:b6:26:ef:5e:71:00:33:0c:d1:9d:99:32:11: c2:0a:4b:4d:69:ca:fa:1b:a7:c2:bf:d7:d2:40:24: 46:80:29:a2:dd:59:dd:17:48:9c:78:96:d0:2f:e4: 4e:5e:40:49:b3:50:81:3f:54:9f:3d:65:8a:01:75: 0a:2d:16:6c:f4:5c:98:85:0c:fe:de:fe:19:6b:3b: 1e:10:33:da:39:9b:f3:d6:aa:7f:5d:82:58:fe:92: 15:fc:33:de:0a:45:ad:9c:bc:bc:8a:73:94:d1:b9: ef:41:a3:db:be:d5:b3:16:3f:f7:e5:9e:cd:66:9b: d2:b6:e6:df:9f:76:8c:2b:89:c8:ab:03:d0:75:39: 83:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A6:7E:D5:16:19:12:A4:80:7C:24:0F:D4:C3:93:E1:B3:86:60:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0042ca43-f62d-331a-bf7a-d18021f9eb0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c2:f4:6d:0f:7f:b6:62:00:6f:2e:b0:a0:5d:2e:59:1b:53: 75:cb:e5:f2:7c:6e:c3:95:2b:e2:be:ba:2c:61:9b:a6:cc:44: 1f:2f:48:3c:63:5d:5a:d8:b2:db:81:95:c7:9a:42:91:66:01: d6:6a:77:af:cb:d2:0d:56:18:c8:2b:fc:37:90:d0:51:3e:e6: d9:d4:3d:c4:b7:c0:3a:04:f1:f6:8b:0e:60:b5:ce:72:e6:c5: 5f:32:d1:da:cf:ed:8f:52:3f:d5:5f:b0:65:12:2f:e5:69:e2: 8e:f3:05:73:d1:6b:2a:88:0d:af:ec:33:6c:70:c9:9e:aa:8b: 97:20:99:a4:d5:c5:57:77:d9:57:49:22:f4:f0:b7:fa:ee:04: 24:ce:6f:35:0e:b4:0e:c2:ac:69:1a:35:6e:68:4f:28:93:3d: d9:d7:f5:d5:4e:75:ad:ac:4a:d1:ec:61:b0:31:34:c5:c9:c8: e0:52:8d:e9:32:61:c6:e6:e8:88:99:ba:00:ed:d5:d0:84:18: 96:fc:ee:54:c9:03:7b:00:3c:28:e1:56:64:1a:a9:99:05:bb: 0d:38:62:6e:ab:cd:3f:eb:75:0e:25:7b:93:dc:13:73:14:ba: 4a:4a:88:bc:57:23:41:e5:27:44:6c:a1:20:7d:aa:6b:de:9d: fb:f5:58:6b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEr5UV7CpprUyEuXQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDM1NDEwZjUtOGJjOC00MGEyLWJjNWEtYTE4M2E3NTFjNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4K2nqicU1yZ30PNRT64N8d+IHZylTriIxK1 qrshRONIvqq3LF9ASQQpXxl4J5tVIRQJZKC/4ny/mTFiTXj4J2+1hYT+1tTalVzz DwpkddS+fWr1gV0biVi14OqRPADDV5ENImtq5P/xBPLfO0ao585INyF0pUcVD7Ym 715xADMM0Z2ZMhHCCktNacr6G6fCv9fSQCRGgCmi3VndF0iceJbQL+ROXkBJs1CB P1SfPWWKAXUKLRZs9FyYhQz+3v4ZazseEDPaOZvz1qp/XYJY/pIV/DPeCkWtnLy8 inOU0bnvQaPbvtWzFj/35Z7NZpvStubfn3aMK4nIqwPQdTmDewIDAQABo4IDYjCC A14wHQYDVR0OBBYEFICmftUWGRKkgHwkD9TDk+GzhmCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDA0MmNhNDMtZjYyZC0z MzFhLWJmN2EtZDE4MDIxZjllYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCOwvRtD3+2YgBvLrCgXS5ZG1N1y+XyfG7DlSvi vrosYZumzEQfL0g8Y11a2LLbgZXHmkKRZgHWanevy9INVhjIK/w3kNBRPubZ1D3E t8A6BPH2iw5gtc5y5sVfMtHaz+2PUj/VX7BlEi/laeKO8wVz0WsqiA2v7DNscMme qouXIJmk1cVXd9lXSSL08Lf67gQkzm81DrQOwqxpGjVuaE8okz3Z1/XVTnWtrErR 7GGwMTTFycjgUo3pMmHG5uiImboA7dXQhBiW/O5UyQN7ADwo4VZkGqmZBbsNOGJu q80/63UOJXuT3BNzFLpKSoi8VyNB5SdEbKEgfapr3p379Vhr -----END CERTIFICATE-----Generated at Wed Oct 29 07:20:19 2025 by rpki-client