$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aef43d9-5fef-32ee-847f-cebbf0b3601d.roa File: 6aef43d9-5fef-32ee-847f-cebbf0b3601d.roa (raw, json) Hash identifier: kdqIlwkvSUFKMANbVFXqfQpHBjbGj0hvZUyPX9WAY0A= Subject key identifier: F5:03:76:8E:B5:CB:AF:1B:08:7E:C9:43:FA:2D:6D:E2:9D:F7:A4:B5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF9515DBC3CDF95B9C9B6BDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aef43d9-5fef-32ee-847f-cebbf0b3601d.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 396591 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:5d:bc:3c:df:95:b9:c9:b6:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=5e843ff7-d8b0-435e-8952-134e1c8f3064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:07:ca:45:e9:7a:cb:03:aa:96:70:ab:92:d6: 76:5d:4d:be:65:e7:c1:0d:88:54:13:d5:0f:56:78: 1d:c1:75:99:36:3c:a3:12:f1:a1:3b:a0:48:ba:bd: 73:88:f6:b7:af:eb:fa:37:69:df:2a:ff:56:42:52: ce:6a:d4:c5:0d:2c:3d:c3:97:86:fa:94:da:be:04: a1:c2:c8:04:35:b9:1c:55:33:82:e0:75:c8:ae:ea: 93:2d:62:fd:77:0b:2d:c5:f4:96:9f:b7:69:37:2c: 0c:c9:b1:c3:ff:ed:fd:14:b7:2c:ad:bb:37:da:78: 66:7c:1e:3f:8e:23:11:82:18:d0:e7:ea:86:3b:b5: 3d:fe:d9:d2:1a:ab:1d:7f:2e:82:99:bd:fa:97:76: e7:99:51:a8:a9:32:0f:01:15:e1:50:83:ce:ac:5a: 35:40:a1:98:5c:aa:e6:54:db:9c:84:29:41:92:6c: b2:1f:0c:0b:20:cd:ec:ec:0a:c4:c1:f0:86:09:81: 92:54:1b:e6:39:8d:8c:b4:13:c1:31:09:cb:c9:c9: 87:b3:20:3b:24:10:b4:be:2d:a5:cf:c8:35:b1:a5: 99:5c:b5:b4:dc:bf:3e:e1:e6:68:a0:00:2a:0a:d1: 88:92:5d:2a:b1:9a:d5:3d:23:40:b4:f6:a2:fa:20: 8e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:03:76:8E:B5:CB:AF:1B:08:7E:C9:43:FA:2D:6D:E2:9D:F7:A4:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6aef43d9-5fef-32ee-847f-cebbf0b3601d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:bd:33:90:2d:56:51:d3:09:a7:4c:05:1a:3c:98:4f:12:5a: 49:e1:c7:ca:f8:09:09:34:0b:c3:c0:f3:49:a1:70:7a:0e:0d: c5:8d:23:d6:06:f3:ab:27:4c:5b:c1:36:cf:2a:64:93:7d:fe: 1c:b7:ea:a6:1c:75:4f:e5:ef:3c:02:c6:cd:a8:ca:5c:2f:af: 33:b4:87:fe:fb:1a:d2:a3:42:59:28:bf:75:d9:13:88:b6:79: a9:8d:76:b9:12:eb:7f:b2:ff:86:d8:c1:6e:eb:e1:c1:f0:62: b7:a8:cf:8d:91:a1:86:f5:ad:fb:8b:9e:f2:cd:d9:3a:ea:94: bd:c1:73:61:cb:8c:a7:0f:7e:bd:57:8b:3e:98:36:85:ca:05: cc:e9:ba:bc:93:78:f6:1e:06:20:41:00:b8:35:76:2b:9d:10: f1:fd:e3:1a:57:71:82:61:f6:dd:a1:07:53:4c:f4:86:88:a0: 17:51:28:d9:02:1b:37:66:a9:c0:37:6b:37:60:e3:8c:2a:85: 71:66:58:bc:66:c8:02:aa:5a:16:c6:0e:52:91:e4:ee:93:a2: d7:2a:79:fa:9f:f8:0a:15:3f:ff:29:b9:91:a9:1c:63:19:7c: 2a:fb:68:66:3a:1f:76:14:ab:53:5b:b6:a8:40:92:51:ed:8c: db:64:bd:30 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEr5UV28PN+Vucm2vcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWU4NDNmZjctZDhiMC00MzVlLTg5NTItMTM0ZTFjOGYzMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAfKRel6ywOqlnCrktZ2XU2+ZefBDYhUE9UP VngdwXWZNjyjEvGhO6BIur1ziPa3r+v6N2nfKv9WQlLOatTFDSw9w5eG+pTavgSh wsgENbkcVTOC4HXIruqTLWL9dwstxfSWn7dpNywMybHD/+39FLcsrbs32nhmfB4/ jiMRghjQ5+qGO7U9/tnSGqsdfy6Cmb36l3bnmVGoqTIPARXhUIPOrFo1QKGYXKrm VNuchClBkmyyHwwLIM3s7ArEwfCGCYGSVBvmOY2MtBPBMQnLycmHsyA7JBC0vi2l z8g1saWZXLW03L8+4eZooAAqCtGIkl0qsZrVPSNAtPai+iCOkQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPUDdo61y68bCH7JQ/otbeKd96S1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmFlZjQzZDktNWZlZi0z MmVlLTg0N2YtY2ViYmYwYjM2MDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAuvTOQLVZR0wmnTAUaPJhPElpJ4cfK+AkJNAvD wPNJoXB6Dg3FjSPWBvOrJ0xbwTbPKmSTff4ct+qmHHVP5e88AsbNqMpcL68ztIf+ +xrSo0JZKL912ROItnmpjXa5Eut/sv+G2MFu6+HB8GK3qM+NkaGG9a37i57yzdk6 6pS9wXNhy4ynD369V4s+mDaFygXM6bq8k3j2HgYgQQC4NXYrnRDx/eMaV3GCYfbd oQdTTPSGiKAXUSjZAhs3ZqnAN2s3YOOMKoVxZli8ZsgCqloWxg5SkeTuk6LXKnn6 n/gKFT//KbmRqRxjGXwq+2hmOh92FKtTW7aoQJJR7YzbZL0w -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:28 2025 by rpki-client