$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa File: 21aa4f37-1aef-3131-91eb-374125dffe2b.roa (raw, json) Hash identifier: ZII29A4/FXRV7X/D/cvSCIxotd8fUbWkJDz9LrQ+3c4= Subject key identifier: 2E:EA:2F:40:9E:94:41:FD:3C:DB:E9:8A:4D:12:42:D2:4D:54:C9:C0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196F8936BCA9D1D8E40142C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 396617 IP address blocks: 2001:500:125::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:f8:93:6b:ca:9d:1d:8e:40:14:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=acb22723-cd68-4b4f-ab55-4ca307f6df80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:01:ba:61:eb:95:0b:44:7c:27:20:3c:73:67: ff:6a:60:74:2f:d3:6a:5a:5a:c7:4d:1a:6a:0b:b5: 31:ae:6f:03:2a:ac:ea:2e:1a:3c:72:c7:2b:04:b6: 30:79:c5:93:55:85:32:ae:3c:20:cc:fc:90:7a:45: b0:4b:c0:53:2c:cb:79:c7:f3:93:be:be:6a:21:08: ce:19:f2:e7:93:e3:67:72:92:81:1f:e5:1f:d0:63: 4e:0e:31:76:4c:12:21:a5:b0:5e:df:f1:bf:51:dd: 27:99:fd:37:56:ee:ec:87:01:30:5f:89:22:c2:5a: 1f:a6:bb:cb:89:86:ba:18:a5:a3:72:89:db:52:6f: da:3d:9d:b2:56:ab:24:6f:4e:70:b6:b7:08:7e:c1: dc:82:e9:af:b0:0a:21:ed:5b:ec:56:12:54:ed:a1: 0e:df:79:6c:6b:9b:81:66:98:f5:76:d8:ad:83:7b: ee:11:aa:b8:0b:a4:5b:87:e8:8b:16:a9:79:8d:52: 27:8b:65:12:4d:13:8d:bb:17:dc:09:30:08:dc:64: af:67:f2:92:48:97:78:98:5b:04:2c:49:da:bb:a0: 40:c0:1e:7e:d0:b1:d7:dc:25:70:81:b4:4b:ba:63: 58:c5:f8:c9:c0:7b:bc:20:f4:de:90:df:b0:e1:ba: 32:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:EA:2F:40:9E:94:41:FD:3C:DB:E9:8A:4D:12:42:D2:4D:54:C9:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21aa4f37-1aef-3131-91eb-374125dffe2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5a:fa:f3:9f:59:92:14:09:5c:61:53:f6:cc:fa:3a:4f:07: 4b:0f:fd:83:a0:1c:4b:e8:72:5d:3a:07:ff:b9:10:51:ae:87: 7e:be:d0:2d:03:69:7f:a3:27:7b:be:df:d5:86:0a:d0:81:a2: 5e:d4:4c:7b:6b:fd:29:78:41:21:88:ba:09:7a:11:d9:82:8a: bf:8c:56:f5:99:75:63:82:f5:46:f2:1a:2a:de:4c:cb:84:ae: e5:12:dd:7f:2b:00:b8:a4:e3:1a:ac:9f:ec:80:75:45:91:21: e5:75:dc:94:9f:30:81:cc:70:14:15:e3:b0:bb:29:36:ab:9b: fb:b3:6e:f7:f4:79:45:24:e1:9d:98:f5:66:78:38:df:92:6e: f2:f3:e9:35:f6:3d:93:20:47:ca:ab:3c:f5:3a:d7:1f:7b:27: 3c:84:49:5b:6f:c1:94:64:2e:7e:f5:84:3c:a5:a4:44:60:80: f6:02:2e:3a:cc:cf:78:c7:7a:fe:99:3a:e2:83:16:c6:b2:eb: a1:f5:b8:c4:c0:af:40:5c:b4:79:31:9e:c1:25:8f:d1:a3:da: 5f:12:d4:7e:e7:b0:97:5d:fb:4a:fb:a1:b9:bb:05:7c:ee:a6: 63:50:b5:53:f5:0b:9a:ee:5b:ed:d9:c0:fc:05:0c:64:d2:b9: 57:2d:74:e4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlviTa8qdHY5AFCwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YWNiMjI3MjMtY2Q2OC00YjRmLWFiNTUtNGNhMzA3ZjZkZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQG6YeuVC0R8JyA8c2f/amB0L9NqWlrHTRpq C7Uxrm8DKqzqLho8cscrBLYwecWTVYUyrjwgzPyQekWwS8BTLMt5x/OTvr5qIQjO GfLnk+NncpKBH+Uf0GNODjF2TBIhpbBe3/G/Ud0nmf03Vu7shwEwX4kiwlofprvL iYa6GKWjconbUm/aPZ2yVqskb05wtrcIfsHcgumvsAoh7VvsVhJU7aEO33lsa5uB Zpj1dtitg3vuEaq4C6Rbh+iLFql5jVIni2USTRONuxfcCTAI3GSvZ/KSSJd4mFsE LEnau6BAwB5+0LHX3CVwgbRLumNYxfjJwHu8IPTekN+w4boyEQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC7qL0CelEH9PNvpik0SQtJNVMnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFhYTRmMzctMWFlZi0z MTMxLTkxZWItMzc0MTI1ZGZmZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA3Wvrzn1mSFAlcYVP2zPo6TwdLD/2DoBxL6HJd Ogf/uRBRrod+vtAtA2l/oyd7vt/VhgrQgaJe1Ex7a/0peEEhiLoJehHZgoq/jFb1 mXVjgvVG8hoq3kzLhK7lEt1/KwC4pOMarJ/sgHVFkSHlddyUnzCBzHAUFeOwuyk2 q5v7s2739HlFJOGdmPVmeDjfkm7y8+k19j2TIEfKqzz1Otcfeyc8hElbb8GUZC5+ 9YQ8paREYID2Ai46zM94x3r+mTrigxbGsuuh9bjEwK9AXLR5MZ7BJY/Ro9pfEtR+ 57CXXftK+6G5uwV87qZjULVT9Qua7lvt2cD8BQxk0rlXLXTk -----END CERTIFICATE-----Generated at Wed Oct 29 07:16:27 2025 by rpki-client