$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa File: 1523e39a-7cf2-37e3-9369-b0d63da25707.roa (raw, json) Hash identifier: eEXJOmES3l20+Gu/pzZh/LbMZYrXmfRkGxlKnjaBUOI= Subject key identifier: 22:BE:DF:22:D6:CD:6B:44:D9:A6:E6:20:2A:36:64:0A:4A:CC:A5:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF9515F4C4DFBCBD0E0C772C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 36626 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:5f:4c:4d:fb:cb:d0:e0:c7:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=ae8e52d6-3e4d-4c9d-88aa-c4d2ef111a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:3f:e8:9f:11:fb:ed:2d:c7:27:8e:cf:03: 2d:a7:1b:79:a5:bf:a8:86:70:25:6b:a5:57:db:de: ec:b8:aa:08:6a:4f:7b:9b:72:08:e0:a7:af:2e:cb: e4:3d:9a:f6:f2:2c:a4:0f:50:d8:60:86:61:c3:fb: 8f:00:58:4e:a6:c0:d4:21:ea:95:5d:e5:29:65:26: 8e:07:12:02:1f:fc:bd:d9:47:32:48:ab:16:2c:05: 07:3c:74:b2:f1:c4:e9:08:f4:6b:0f:be:ac:03:4c: fc:87:44:18:be:1d:08:4a:95:43:cf:bb:b8:ae:2c: 53:19:6a:df:2f:32:98:25:86:c9:63:64:a0:e4:ce: 62:47:10:3b:d8:72:ac:ff:22:f5:1a:73:7a:31:47: 48:36:cd:98:df:8b:c4:31:ef:cc:a8:c2:89:8a:3c: d9:07:a9:0c:26:52:ad:92:90:23:6e:ea:bf:da:b8: 98:83:58:67:4b:da:47:cb:b5:0c:2a:8b:d9:a7:b2: 15:58:e4:23:ee:9d:94:52:a9:84:51:02:78:27:19: 44:c9:44:03:49:37:1d:1a:a4:a5:e5:80:df:3c:86: d1:2b:a8:ef:5b:5a:0c:17:e1:0a:c8:f4:5d:5b:57: ff:5e:23:b6:54:80:52:a7:fa:0e:fd:fe:e5:23:26: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BE:DF:22:D6:CD:6B:44:D9:A6:E6:20:2A:36:64:0A:4A:CC:A5:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:81:14:e1:8e:3c:84:07:49:a8:82:71:db:f5:15:47:ee:3a: c6:0e:61:59:ef:5d:45:31:3e:4d:7e:34:a9:40:0f:b1:b8:9e: f1:ad:e0:4c:75:97:53:6b:9d:41:85:09:e0:45:a0:f2:2c:49: 38:ec:80:44:65:d2:66:ee:c3:b9:db:23:c1:12:0d:ee:9f:a8: 16:da:d7:eb:bd:a8:cc:73:82:0d:81:1f:9a:41:dc:d1:f8:b4: 41:de:4e:ad:70:7f:eb:2e:c5:0d:73:27:e9:df:3d:ce:07:75: 11:f3:bc:79:8a:e6:61:c5:06:ef:81:bd:fb:64:fd:72:19:dc: 62:e7:c9:59:bd:d5:34:c9:6a:c3:5b:f5:61:07:43:f1:79:fb: 78:4a:5f:4f:d5:87:45:bd:23:34:99:31:ef:e4:d9:0f:e0:b4: 8b:bb:d1:f0:fc:9c:62:29:f6:46:f6:1d:5a:85:65:25:ef:8b: 9a:f2:36:b6:1c:d3:49:ac:9f:51:f0:42:be:d7:be:c1:6a:62: 85:37:59:d3:ac:0c:29:6f:49:c9:25:66:ad:12:75:02:39:9a: 16:18:ad:44:3e:41:88:20:68:42:f7:f1:41:b7:77:9e:f7:5c: cd:80:c2:6a:5f:fd:52:97:92:c0:cd:fe:c8:15:7c:21:14:59: e1:ae:1e:68 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEr5UV9MTfvL0ODHcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YWU4ZTUyZDYtM2U0ZC00YzlkLTg4YWEtYzRkMmVmMTExYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzws/6J8R++0txyeOzwMtpxt5pb+ohnAla6VX 297suKoIak97m3II4KevLsvkPZr28iykD1DYYIZhw/uPAFhOpsDUIeqVXeUpZSaO BxICH/y92UcySKsWLAUHPHSy8cTpCPRrD76sA0z8h0QYvh0ISpVDz7u4rixTGWrf LzKYJYbJY2Sg5M5iRxA72HKs/yL1GnN6MUdINs2Y34vEMe/MqMKJijzZB6kMJlKt kpAjbuq/2riYg1hnS9pHy7UMKovZp7IVWOQj7p2UUqmEUQJ4JxlEyUQDSTcdGqSl 5YDfPIbRK6jvW1oMF+EKyPRdW1f/XiO2VIBSp/oO/f7lIyYgpwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCK+3yLWzWtE2abmICo2ZApKzKVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTUyM2UzOWEtN2NmMi0z N2UzLTkzNjktYjBkNjNkYTI1NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBAgRThjjyEB0mognHb9RVH7jrGDmFZ711FMT5N fjSpQA+xuJ7xreBMdZdTa51BhQngRaDyLEk47IBEZdJm7sO52yPBEg3un6gW2tfr vajMc4INgR+aQdzR+LRB3k6tcH/rLsUNcyfp3z3OB3UR87x5iuZhxQbvgb37ZP1y Gdxi58lZvdU0yWrDW/VhB0Pxeft4Sl9P1YdFvSM0mTHv5NkP4LSLu9Hw/JxiKfZG 9h1ahWUl74ua8ja2HNNJrJ9R8EK+177BamKFN1nTrAwpb0nJJWatEnUCOZoWGK1E PkGIIGhC9/FBt3ee91zNgMJqX/1Sl5LAzf7IFXwhFFnhrh5o -----END CERTIFICATE-----Generated at Wed Sep 10 20:44:00 2025 by rpki-client