$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d061289-ce4a-3b11-8f3a-af42807fdc38.roa File: 2d061289-ce4a-3b11-8f3a-af42807fdc38.roa (raw, json) Hash identifier: app1yfIazQs//42VPlYCXvXTlCfGUzLyClsQ4mVJrFg= Subject key identifier: 68:9A:C1:AC:FB:29:0A:9B:D6:9D:10:41:A4:6C:37:59:56:32:3A:49 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF95164F555993EB8F7983690 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d061289-ce4a-3b11-8f3a-af42807fdc38.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 396582 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:64:f5:55:99:3e:b8:f7:98:36:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=00d9768d-2f37-4d46-b86f-7b60da0c71e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:4d:f7:56:eb:6b:9c:23:92:e2:38:3e:b0: 1b:4a:76:62:a4:de:43:7e:17:21:ba:f0:38:5c:02: 45:b2:a9:14:1f:64:70:35:dc:b1:02:f3:c0:50:01: 44:91:cd:c3:99:25:ea:81:88:91:63:7e:04:39:f4: be:ca:55:ac:14:fb:3d:87:b8:3e:f8:47:aa:b6:79: 31:27:f2:e0:09:00:b4:a3:39:76:44:fc:26:75:a5: 91:c6:91:cd:cb:3a:c6:f1:6c:88:af:b1:b5:d3:33: 4c:d0:2a:42:e2:23:7a:07:51:64:95:63:e7:52:a9: fd:61:f1:46:0a:27:9d:27:f1:c1:08:01:b2:62:5c: a8:cb:22:6d:27:b2:c5:3d:48:26:13:83:63:dd:60: 64:4a:c5:fb:b6:d7:1d:40:65:78:67:51:61:68:92: f3:01:93:8f:81:92:a8:90:d9:63:4e:fa:ca:61:e4: c7:59:48:f4:f4:1b:8b:d3:9a:3a:04:db:cc:28:84: 92:7e:b7:56:4b:5f:e2:59:d3:93:29:89:82:39:74: cd:34:ea:fe:8f:d0:6f:99:e8:0e:ab:2e:77:3f:f5: e6:4c:95:30:fc:de:9f:93:20:c7:8c:35:70:f9:90: b3:e7:e4:e4:55:97:2c:f7:33:9d:61:4e:26:c6:13: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9A:C1:AC:FB:29:0A:9B:D6:9D:10:41:A4:6C:37:59:56:32:3A:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d061289-ce4a-3b11-8f3a-af42807fdc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:ca:a5:a0:fb:14:63:24:59:83:1f:17:f9:7e:02:0c:86:d3: 73:6c:17:37:77:05:05:2e:c7:b0:0f:5d:d0:ee:ff:87:39:f8: 3c:53:8a:ad:83:5f:36:6c:a5:11:a4:91:00:fb:88:43:a2:ad: 61:34:76:47:f1:72:11:1d:14:51:7f:4d:44:ea:3d:f6:c2:f6: 49:db:f8:fd:94:92:9a:dd:f3:ef:ba:23:8e:f6:7f:b0:9e:a0: 0f:6d:e2:49:2f:25:64:25:54:49:ee:bd:c1:10:d2:d6:08:2b: 52:d2:c1:51:df:7b:32:6c:bb:94:42:de:7e:3b:26:e6:96:39: 4e:b5:2f:b2:51:a2:4f:74:6c:eb:d2:da:25:ba:e9:74:21:09: 70:ea:36:07:32:ea:4d:8c:24:42:88:93:57:f8:a5:45:a6:1f: a1:2c:d8:2a:3a:0c:f9:d0:35:33:8f:27:7b:dd:a9:0a:06:32: 2f:76:22:ea:18:74:9c:73:d2:22:d9:d9:ed:e0:c4:f2:8d:7b: 38:78:6d:80:b5:42:3c:cd:9e:c4:25:06:83:37:f3:38:ee:8b: b9:53:77:cb:a3:77:db:48:69:eb:de:6d:5d:f8:39:9d:b3:a3: ba:33:93:c9:a1:82:7e:12:8c:0f:23:bf:09:9e:2e:fc:de:12: 07:7f:f4:da -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEr5UWT1VZk+uPeYNpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDBkOTc2OGQtMmYzNy00ZDQ2LWI4NmYtN2I2MGRhMGM3MWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldVN91bra5wjkuI4PrAbSnZipN5DfhchuvA4 XAJFsqkUH2RwNdyxAvPAUAFEkc3DmSXqgYiRY34EOfS+ylWsFPs9h7g++Eeqtnkx J/LgCQC0ozl2RPwmdaWRxpHNyzrG8WyIr7G10zNM0CpC4iN6B1FklWPnUqn9YfFG CiedJ/HBCAGyYlyoyyJtJ7LFPUgmE4Nj3WBkSsX7ttcdQGV4Z1FhaJLzAZOPgZKo kNljTvrKYeTHWUj09BuL05o6BNvMKISSfrdWS1/iWdOTKYmCOXTNNOr+j9BvmegO qy53P/XmTJUw/N6fkyDHjDVw+ZCz5+TkVZcs9zOdYU4mxhMqQwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGiawaz7KQqb1p0QQaRsN1lWMjpJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQwNjEyODktY2U0YS0z YjExLThmM2EtYWY0MjgwN2ZkYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBHyqWg+xRjJFmDHxf5fgIMhtNzbBc3dwUFLsew D13Q7v+HOfg8U4qtg182bKURpJEA+4hDoq1hNHZH8XIRHRRRf01E6j32wvZJ2/j9 lJKa3fPvuiOO9n+wnqAPbeJJLyVkJVRJ7r3BENLWCCtS0sFR33sybLuUQt5+Oybm ljlOtS+yUaJPdGzr0toluul0IQlw6jYHMupNjCRCiJNX+KVFph+hLNgqOgz50DUz jyd73akKBjIvdiLqGHScc9Ii2dnt4MTyjXs4eG2AtUI8zZ7EJQaDN/M47ou5U3fL o3fbSGnr3m1d+Dmds6O6M5PJoYJ+EowPI78Jni783hIHf/Ta -----END CERTIFICATE-----Generated at Wed Sep 10 18:02:04 2025 by rpki-client