$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e33fc74-1c8b-3952-b46a-86f41a4c3bc7.roa File: 4e33fc74-1c8b-3952-b46a-86f41a4c3bc7.roa (raw, json) Hash identifier: 3uYACuS8OzOvkVwADwBCdKV4AgQxtKdUCS3PDjkgA5o= Subject key identifier: 9F:76:32:DC:95:96:0D:AA:FD:A6:5A:93:7C:48:CE:E3:02:B3:F2:33 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE196D144F8708128A2A983C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e33fc74-1c8b-3952-b46a-86f41a4c3bc7.roa Signing time: Sun 17 Aug 2025 01:00:32 +0000 ROA not before: Sun 17 Aug 2025 01:00:32 +0000 ROA not after: Sat 15 Nov 2025 02:00:32 +0000 asID: 397197 IP address blocks: 2001:500:124::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:96:d1:44:f8:70:81:28:a2:a9:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 17 01:00:32 2025 GMT Not After : Nov 15 02:00:32 2025 GMT Subject: CN=a513a71d-3890-4e2b-a524-73af1469e3bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:5b:3c:cc:c0:f1:ef:df:06:93:19:e7:8d: 47:ad:ad:13:8b:ce:da:a9:12:3b:a2:26:60:b0:ae: a0:bc:e3:4a:22:fb:10:a2:7d:65:59:0a:ec:52:cd: e7:7d:40:ee:7a:c3:6a:ce:79:1c:45:42:19:e5:3b: a5:aa:45:53:12:1e:26:c1:a6:70:dc:4e:73:c3:88: 92:0e:f7:c8:b8:46:ed:eb:1b:e8:cd:6b:16:c9:3f: 95:4f:29:c6:ab:ed:af:07:83:3c:f7:e6:44:64:95: d5:ed:9e:bc:49:f9:57:3e:95:cc:58:c3:5f:fc:7f: aa:cb:f5:98:ae:1f:91:4d:14:40:70:a8:c4:c0:49: 02:1b:83:92:4c:53:18:ab:d1:9a:c8:02:1c:1a:9d: 9c:49:2e:aa:d6:2d:89:f8:f5:66:ab:d0:03:2f:80: c8:29:17:1b:c3:3c:dd:ad:9d:b1:21:87:c6:19:64: 8e:54:d5:6f:9c:cb:41:1f:fa:19:9c:b5:7b:08:e9: d9:c2:cd:5c:b7:14:7e:f2:08:7f:34:d6:e0:fc:f9: 98:65:13:dc:5b:53:28:9b:79:0a:14:1c:18:38:94: f9:71:03:cf:00:3f:e2:9d:76:5a:78:22:d8:cf:02: 33:5f:13:60:ba:08:c4:64:6c:cd:e6:f5:0b:ec:b2: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:76:32:DC:95:96:0D:AA:FD:A6:5A:93:7C:48:CE:E3:02:B3:F2:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e33fc74-1c8b-3952-b46a-86f41a4c3bc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:124:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:89:12:3b:31:26:28:bb:4e:fa:a4:b2:d9:ad:e9:13:72:c7: 00:8c:76:b2:71:de:e7:60:4b:9e:36:be:ab:ff:c1:5b:bd:b1: 71:23:44:9d:97:0f:cd:31:10:bb:59:45:22:c3:c6:16:14:67: 24:d2:9c:58:1e:25:13:1b:b4:0a:b2:b7:54:34:ad:1a:6f:f8: d8:d3:10:92:b8:dd:9c:69:a6:0b:67:5c:36:fb:14:22:31:c2: fb:d4:e6:c6:5b:83:47:ef:6d:58:40:cc:bc:50:10:d6:ee:6b: 33:45:ab:81:a3:96:18:d8:2c:fd:7e:3f:57:56:4f:c8:d8:eb: 2c:e2:15:53:ac:ed:70:52:d4:c4:de:a5:bc:ff:56:d3:73:13: 85:54:46:43:db:5b:9e:d7:e2:4f:a4:ce:46:0a:cd:0a:ce:47: 73:50:3f:64:cd:53:0d:4c:2c:a0:a3:ab:61:a2:37:fc:58:a2: fd:8a:b3:b6:f2:e6:ad:6a:87:74:61:1f:62:c8:c8:36:e5:4e: bd:d4:ab:16:a8:cb:22:55:cf:95:e7:66:9b:ee:c7:7a:38:2f: 96:42:c2:cd:b0:97:c5:b0:ed:71:e5:d3:b0:e2:24:d1:22:73: 61:a9:3d:7f:04:85:8b:dd:30:56:5f:e1:4f:e1:5b:ee:f5:b8: ec:16:29:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhltFE+HCBKKKpg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk YTUxM2E3MWQtMzg5MC00ZTJiLWE1MjQtNzNhZjE0NjllM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzNbPMzA8e/fBpMZ541Hra0Ti87aqRI7oiZg sK6gvONKIvsQon1lWQrsUs3nfUDuesNqznkcRUIZ5TulqkVTEh4mwaZw3E5zw4iS DvfIuEbt6xvozWsWyT+VTynGq+2vB4M89+ZEZJXV7Z68SflXPpXMWMNf/H+qy/WY rh+RTRRAcKjEwEkCG4OSTFMYq9GayAIcGp2cSS6q1i2J+PVmq9ADL4DIKRcbwzzd rZ2xIYfGGWSOVNVvnMtBH/oZnLV7COnZws1ctxR+8gh/NNbg/PmYZRPcW1Mom3kK FBwYOJT5cQPPAD/inXZaeCLYzwIzXxNgugjEZGzN5vUL7LLXiQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ92MtyVlg2q/aZak3xIzuMCs/IzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGUzM2ZjNzQtMWM4Yi0z OTUyLWI0NmEtODZmNDFhNGMzYmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAaiRI7MSYou076pLLZrekTcscAjHaycd7nYEue Nr6r/8FbvbFxI0Sdlw/NMRC7WUUiw8YWFGck0pxYHiUTG7QKsrdUNK0ab/jY0xCS uN2caaYLZ1w2+xQiMcL71ObGW4NH721YQMy8UBDW7mszRauBo5YY2Cz9fj9XVk/I 2Oss4hVTrO1wUtTE3qW8/1bTcxOFVEZD21ue1+JPpM5GCs0KzkdzUD9kzVMNTCyg o6thojf8WKL9irO28uataod0YR9iyMg25U691KsWqMsiVc+V52ab7sd6OC+WQsLN sJfFsO1x5dOw4iTRInNhqT1/BIWL3TBWX+FP4Vvu9bjsFim1 -----END CERTIFICATE-----Generated at Wed Oct 29 07:16:04 2025 by rpki-client