$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e34ea97-d214-39ea-809e-464ba4adfd3c.roa File: 0e34ea97-d214-39ea-809e-464ba4adfd3c.roa (raw, json) Hash identifier: jJbEilMWg9NhnLjKMy5T3wcu5rKeaB2gjRQS+hCoJTU= Subject key identifier: CB:21:E4:76:62:AC:E9:9F:87:51:84:23:95:4F:15:A3:57:B9:AF:11 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF95162315B68CF411C46C8E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e34ea97-d214-39ea-809e-464ba4adfd3c.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 397205 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:62:31:5b:68:cf:41:1c:46:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=f1858e02-b434-4e63-a6c2-e3e2dbb9cc68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:8a:79:a4:d6:40:00:3d:4c:23:80:78:ac: 3a:21:cf:92:86:22:f2:a2:84:37:41:80:2b:84:74: 33:b7:eb:b7:52:20:06:2f:aa:c5:ba:30:20:b9:16: 6d:26:79:cd:7d:ba:d6:0e:eb:37:6a:7e:ca:5b:48: 99:31:21:df:c9:f6:28:d5:be:3f:5a:c9:5e:e1:da: 80:6c:9d:13:69:98:45:a1:6c:68:ca:f6:a7:49:c0: 10:0f:22:f1:6d:2a:4e:91:0f:4a:6a:a0:c9:55:88: 6b:f9:aa:3a:8c:6b:2d:18:4f:68:86:66:d5:9e:f1: bd:86:63:18:96:0d:74:bb:b1:ec:a1:80:61:a6:9f: 0e:9e:dd:4f:4a:fd:08:a6:30:c1:97:2a:ff:cf:93: 3f:77:8d:42:47:bf:57:32:de:7c:f4:89:b4:92:ce: 26:82:8b:44:c0:13:ea:6d:52:bf:e8:f2:2a:36:ef: 9f:a0:6a:d2:d0:cd:00:28:68:4b:a3:8a:94:16:cb: b9:fb:93:8c:e0:40:c0:36:0c:76:b7:dd:5b:d3:c6: 93:c7:da:cc:1e:35:e3:19:0a:23:55:80:27:87:54: ad:2f:7d:5b:26:a3:15:5c:90:ec:49:d2:91:f7:11: 7e:4b:ee:bb:01:15:52:c3:37:24:15:14:a5:a4:c9: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:21:E4:76:62:AC:E9:9F:87:51:84:23:95:4F:15:A3:57:B9:AF:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e34ea97-d214-39ea-809e-464ba4adfd3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:eb:31:16:76:6b:38:e3:44:e6:d0:8e:cb:35:45:10:46:bd: 66:35:0e:ae:b3:6b:a3:0d:0e:2e:a3:8e:35:e6:5c:45:f2:6a: f6:3d:70:62:a7:53:29:aa:64:ac:91:eb:f6:2e:d5:a2:de:42: 04:b6:8b:2d:65:c7:35:c9:d7:a5:68:bb:af:ca:c6:81:a6:34: d1:58:a6:c7:90:f7:5f:c9:69:2e:07:c9:6e:ff:05:85:f1:91: 13:8a:f7:55:8e:9a:88:da:fb:e1:2f:f3:31:01:af:27:b3:42: c5:ac:8f:0c:71:eb:7c:86:8a:6e:12:0e:c5:5e:68:50:8b:6b: d7:72:72:7e:80:be:42:29:e0:6f:8f:c7:13:e8:33:fb:2d:8e: 7d:be:c2:32:26:66:2c:76:0a:f3:2f:e8:80:0c:07:5b:70:a7: fc:8e:d0:9e:b1:1e:35:96:3e:9f:6d:f7:b2:0a:37:ab:ab:da: a7:c8:7c:5b:5d:5f:32:f0:50:a1:ea:04:00:22:36:44:cc:da: ee:d9:14:74:dc:36:6f:2a:69:a1:30:bd:bf:8c:b4:48:75:22: c1:b6:54:3b:b3:26:89:27:8a:29:f8:81:52:94:a0:27:35:89: 72:74:79:e2:ad:e3:66:a4:16:93:8b:a9:b9:2d:1e:f4:b4:c1: 0b:94:1c:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEr5UWIxW2jPQRxGyOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjE4NThlMDItYjQzNC00ZTYzLWE2YzItZTNlMmRiYjljYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6aKeaTWQAA9TCOAeKw6Ic+ShiLyooQ3QYAr hHQzt+u3UiAGL6rFujAguRZtJnnNfbrWDus3an7KW0iZMSHfyfYo1b4/Wsle4dqA bJ0TaZhFoWxoyvanScAQDyLxbSpOkQ9KaqDJVYhr+ao6jGstGE9ohmbVnvG9hmMY lg10u7HsoYBhpp8Ont1PSv0IpjDBlyr/z5M/d41CR79XMt589Im0ks4mgotEwBPq bVK/6PIqNu+foGrS0M0AKGhLo4qUFsu5+5OM4EDANgx2t91b08aTx9rMHjXjGQoj VYAnh1StL31bJqMVXJDsSdKR9xF+S+67ARVSwzckFRSlpMlUiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMsh5HZirOmfh1GEI5VPFaNXua8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGUzNGVhOTctZDIxNC0z OWVhLTgwOWUtNDY0YmE0YWRmZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC96zEWdms440Tm0I7LNUUQRr1mNQ6us2ujDQ4u o4415lxF8mr2PXBip1MpqmSskev2LtWi3kIEtostZcc1ydelaLuvysaBpjTRWKbH kPdfyWkuB8lu/wWF8ZETivdVjpqI2vvhL/MxAa8ns0LFrI8Mcet8hopuEg7FXmhQ i2vXcnJ+gL5CKeBvj8cT6DP7LY59vsIyJmYsdgrzL+iADAdbcKf8jtCesR41lj6f bfeyCjerq9qnyHxbXV8y8FCh6gQAIjZEzNru2RR03DZvKmmhML2/jLRIdSLBtlQ7 syaJJ4op+IFSlKAnNYlydHnireNmpBaTi6m5LR70tMELlBwz -----END CERTIFICATE-----Generated at Wed Sep 10 20:43:24 2025 by rpki-client