$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05ab7c21-bc6b-3040-9a83-5d4e1b5b04ae.roa File: 05ab7c21-bc6b-3040-9a83-5d4e1b5b04ae.roa (raw, json) Hash identifier: 4/1LSCkGx8/LUf4ydoi+NyDkRnc22PUhW2CRkGDZ/XM= Subject key identifier: 3A:C9:73:87:D8:32:C0:22:CA:1F:7E:9E:E7:12:68:22:5D:ED:6D:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE46137CB0BD00ABC3E26CC40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05ab7c21-bc6b-3040-9a83-5d4e1b5b04ae.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 36632 IP address blocks: 2001:500:122::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:37:cb:0b:d0:0a:bc:3e:26:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=8e2b185f-f3ff-4cf7-ac21-bba2d603d906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:01:85:6f:16:96:e8:47:8e:90:15:c4:61: 25:fe:4f:6e:74:67:5b:19:a0:6a:1a:fd:cd:33:81: ee:fa:4d:09:38:49:60:4e:41:3b:c0:27:f8:e1:34: ef:42:08:90:33:bf:e7:11:dc:32:00:f2:7e:4f:9d: fb:4b:44:6e:1c:e5:0d:ba:69:da:eb:e4:23:fe:f0: 87:85:99:09:ea:6a:a2:0a:2e:a3:97:1e:6c:23:d3: 52:1f:ae:8e:7d:2a:5b:6f:69:ad:7c:ae:ca:90:a6: 3f:5b:b7:be:7c:62:58:20:c1:93:0d:5c:9b:5c:c3: 73:25:2c:05:ba:a9:e8:bb:98:e2:60:b2:b5:66:02: 3d:f5:c3:bd:d3:ac:2e:50:77:2d:6e:42:f7:06:9c: 31:fa:cf:01:48:f5:c4:9a:9b:c5:d0:f3:8f:81:cc: b5:34:87:58:02:4b:d4:07:94:44:b1:32:06:be:23: e1:c6:51:65:c0:e6:8d:2d:89:27:c4:4d:09:da:b3: 4f:7c:bb:0f:78:96:59:a2:2e:75:89:cc:92:e5:12: 39:8b:a5:60:b9:30:e2:70:22:78:c9:32:9c:22:86: e5:3f:92:5e:f6:61:6c:d9:4f:f5:43:d6:ba:88:77: 39:24:62:94:60:24:e1:db:72:2d:b5:c4:9a:0c:4d: a6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C9:73:87:D8:32:C0:22:CA:1F:7E:9E:E7:12:68:22:5D:ED:6D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05ab7c21-bc6b-3040-9a83-5d4e1b5b04ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:12:2d:47:48:5b:a8:d7:d9:c0:ba:87:a4:1b:e5:f1:4a:4c: f2:b9:86:1f:ff:7b:22:15:e5:2e:5f:b0:17:95:50:e2:80:69: 99:27:d2:50:3c:28:75:00:e7:fc:5d:1d:9f:32:7d:35:f0:b4: 8d:bb:0f:c7:ca:ea:fa:8b:7b:e7:90:10:bc:24:4e:22:26:59: fb:ec:87:78:21:17:f2:7e:89:bc:98:fa:8d:3f:af:9d:93:6f: e0:98:46:32:3a:40:3d:8c:85:4e:d1:63:ad:0b:40:e7:24:e4: 41:6b:6f:7c:4d:10:6d:b2:df:54:7b:24:eb:78:ff:aa:7b:7b: 62:1c:4c:bd:8b:18:f9:62:f8:fb:ac:d9:c1:ab:21:ea:be:61: e3:16:01:c5:cd:b4:58:36:cd:5e:71:ae:f5:d1:47:45:0e:bd: 2f:5c:d5:7c:33:d0:b7:2d:80:54:5e:82:c2:cb:2e:19:4e:f9: 8c:26:4f:ae:15:71:14:ba:27:c6:7f:ba:df:e6:68:b7:a2:cc: 03:c2:ab:51:79:d6:c2:eb:c0:6e:35:f0:16:13:78:ba:20:91: 85:3b:ea:0d:02:77:b0:73:3f:27:9d:cd:b6:cd:30:4b:3e:78: 27:fb:93:33:47:76:bd:0b:50:79:56:39:a0:06:f9:f0:c6:75: 31:1e:f8:1f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErkYTfLC9AKvD4mzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk OGUyYjE4NWYtZjNmZi00Y2Y3LWFjMjEtYmJhMmQ2MDNkOTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBcBhW8WluhHjpAVxGEl/k9udGdbGaBqGv3N M4Hu+k0JOElgTkE7wCf44TTvQgiQM7/nEdwyAPJ+T537S0RuHOUNumna6+Qj/vCH hZkJ6mqiCi6jlx5sI9NSH66OfSpbb2mtfK7KkKY/W7e+fGJYIMGTDVybXMNzJSwF uqnou5jiYLK1ZgI99cO906wuUHctbkL3Bpwx+s8BSPXEmpvF0POPgcy1NIdYAkvU B5REsTIGviPhxlFlwOaNLYknxE0J2rNPfLsPeJZZoi51icyS5RI5i6VguTDicCJ4 yTKcIoblP5Je9mFs2U/1Q9a6iHc5JGKUYCTh23IttcSaDE2m7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDrJc4fYMsAiyh9+nucSaCJd7W1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDVhYjdjMjEtYmM2Yi0z MDQwLTlhODMtNWQ0ZTFiNWIwNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC5Ei1HSFuo19nAuoekG+XxSkzyuYYf/3siFeUu X7AXlVDigGmZJ9JQPCh1AOf8XR2fMn018LSNuw/Hyur6i3vnkBC8JE4iJln77Id4 IRfyfom8mPqNP6+dk2/gmEYyOkA9jIVO0WOtC0DnJORBa298TRBtst9UeyTreP+q e3tiHEy9ixj5Yvj7rNnBqyHqvmHjFgHFzbRYNs1eca710UdFDr0vXNV8M9C3LYBU XoLCyy4ZTvmMJk+uFXEUuifGf7rf5mi3oswDwqtRedbC68BuNfAWE3i6IJGFO+oN Anewcz8nnc22zTBLPngn+5MzR3a9C1B5VjmgBvnwxnUxHvgf -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:06 2025 by rpki-client