$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2840d5cb-8d0f-3170-99da-f80722695d4d.roa File: 2840d5cb-8d0f-3170-99da-f80722695d4d.roa (raw, json) Hash identifier: umaxJ6+4h/fftAX74t8meztp2GpZnxhf3fMAHwP6Hxg= Subject key identifier: B2:27:F2:30:C6:1C:12:B5:26:22:34:F7:3F:C9:C2:ED:D8:50:10:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F67A24EADE83D38E335000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2840d5cb-8d0f-3170-99da-f80722695d4d.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 36626 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7a:24:ea:de:83:d3:8e:33:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=523367cd-6ce9-4e3f-9485-d8e8ad33619e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dc:dc:b9:5a:2d:9d:ba:da:c8:08:34:22:f7: 21:8e:59:07:33:ac:b3:9f:1b:63:2f:40:9b:e7:41: 8c:6d:f8:be:11:b9:a8:bc:4a:6a:fe:04:2b:6f:9c: 84:05:71:df:aa:81:48:99:c6:10:b5:91:9a:76:12: e1:ce:04:83:c8:9c:b6:17:f0:d3:cf:cb:33:d4:51: d8:32:47:17:45:2e:ad:13:d9:7b:12:de:6a:07:6b: df:77:30:d9:0a:78:3f:41:a7:9a:5e:3d:14:b8:88: 66:ee:c5:cb:21:33:09:58:63:b6:7a:c5:b4:ff:e2: 8d:ec:cc:c7:aa:e4:f5:04:43:e2:95:ee:a8:5c:97: 32:d3:28:90:58:58:09:c4:f0:ee:b9:9f:5a:a3:ee: df:b6:1a:d4:71:b9:3e:f1:eb:a5:e2:32:81:b1:29: 26:0e:ce:11:0f:5d:29:8c:85:47:93:df:91:98:9a: 75:51:dd:7c:3f:86:75:e0:f7:01:5b:fa:05:40:e9: 5f:1c:69:f6:f3:1a:34:25:31:c1:48:77:e3:b8:07: 9d:3f:a5:09:9b:dc:53:96:ef:c9:f3:c5:e0:ba:15: 69:87:26:2d:6f:bc:2a:ab:fa:ef:e9:df:ad:92:22: 21:88:99:14:1d:71:f2:aa:d8:d6:b3:53:9b:55:63: 4e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:27:F2:30:C6:1C:12:B5:26:22:34:F7:3F:C9:C2:ED:D8:50:10:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2840d5cb-8d0f-3170-99da-f80722695d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f6:d9:10:ba:f7:1c:97:8c:f3:2d:c8:0c:a7:f3:bb:77:27: 7f:b9:11:f0:df:38:17:12:c5:c8:a5:3f:e1:3f:a1:4b:3c:e7: 42:4d:05:b3:3e:75:2a:09:4d:ed:aa:79:93:f6:a1:fe:2d:4d: 0e:bd:70:40:97:7c:97:eb:98:93:8c:34:3c:7e:cd:bf:51:de: 2c:69:b6:7c:2a:13:af:27:b8:ca:38:ba:e9:47:38:8a:4a:75: f3:a6:7a:0a:ab:89:5e:d4:8c:d0:bc:58:a8:bf:9d:5c:58:a8: 1b:f9:66:db:91:25:72:7f:0b:c2:91:1d:c2:1d:75:07:ac:0f: 0a:d0:b1:95:72:dc:0d:eb:86:fc:6c:0a:dd:d2:38:e3:34:26: a7:7c:1c:fc:58:52:0a:f5:84:2b:f6:40:24:8f:76:b8:6e:48: a5:cd:c0:db:b9:ec:d1:31:d4:46:00:0f:87:2e:a0:7d:6b:5f: bb:68:c1:0e:a8:74:ad:9a:da:8c:3c:6d:2e:06:05:00:50:76: c4:42:f8:dc:c9:b4:b9:40:7d:49:3d:1a:0e:72:30:b7:a5:fc: 4d:89:13:78:84:a2:80:b9:e6:53:c4:25:fc:b9:43:c6:ec:31: 2f:92:5f:9d:e1:93:37:c4:1b:a4:d5:f1:7b:d7:ec:7e:14:d4: 50:b5:71:31 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nok6t6D044zUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk NTIzMzY3Y2QtNmNlOS00ZTNmLTk0ODUtZDhlOGFkMzM2MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9zcuVotnbrayAg0IvchjlkHM6yznxtjL0Cb 50GMbfi+EbmovEpq/gQrb5yEBXHfqoFImcYQtZGadhLhzgSDyJy2F/DTz8sz1FHY MkcXRS6tE9l7Et5qB2vfdzDZCng/QaeaXj0UuIhm7sXLITMJWGO2esW0/+KN7MzH quT1BEPile6oXJcy0yiQWFgJxPDuuZ9ao+7fthrUcbk+8eul4jKBsSkmDs4RD10p jIVHk9+RmJp1Ud18P4Z14PcBW/oFQOlfHGn28xo0JTHBSHfjuAedP6UJm9xTlu/J 88XguhVphyYtb7wqq/rv6d+tkiIhiJkUHXHyqtjWs1ObVWNOuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLIn8jDGHBK1JiI09z/Jwu3YUBAWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg0MGQ1Y2ItOGQwZi0z MTcwLTk5ZGEtZjgwNzIyNjk1ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA29tkQuvccl4zzLcgMp/O7dyd/uRHw3zgXEsXI pT/hP6FLPOdCTQWzPnUqCU3tqnmT9qH+LU0OvXBAl3yX65iTjDQ8fs2/Ud4sabZ8 KhOvJ7jKOLrpRziKSnXzpnoKq4le1IzQvFiov51cWKgb+WbbkSVyfwvCkR3CHXUH rA8K0LGVctwN64b8bArd0jjjNCanfBz8WFIK9YQr9kAkj3a4bkilzcDbuezRMdRG AA+HLqB9a1+7aMEOqHStmtqMPG0uBgUAUHbEQvjcybS5QH1JPRoOcjC3pfxNiRN4 hKKAueZTxCX8uUPG7DEvkl+d4ZM3xBuk1fF71+x+FNRQtXEx -----END CERTIFICATE-----Generated at Wed Oct 29 07:18:51 2025 by rpki-client