$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889003fe-64bf-3281-8fd1-cd1925648618.roa File: 889003fe-64bf-3281-8fd1-cd1925648618.roa (raw, json) Hash identifier: x5/rqkqKcNi7Jzp26iRtEzJ4ZbYyMsPRctmFufG3qaU= Subject key identifier: 09:A1:C4:50:4F:E1:16:2F:A5:E5:3E:7D:AA:A5:A1:81:92:AF:FA:17 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE9F67792C5A98DABD2761274 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889003fe-64bf-3281-8fd1-cd1925648618.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 396567 IP address blocks: 2001:500:121::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:77:92:c5:a9:8d:ab:d2:76:12:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=38600b0b-7c71-407d-977b-e240506c8109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:96:8a:7c:2a:f3:6a:ec:4b:79:43:20:e2: 2c:e5:6a:9d:a1:49:1f:1e:9b:d8:f9:98:b6:20:00: 8b:2d:f1:39:e2:ff:27:28:d9:aa:36:39:e8:5d:0f: 40:69:ad:12:d4:53:20:95:26:61:62:7b:1b:b2:ae: 23:4e:79:bf:18:8d:31:27:a9:20:72:84:d0:76:ce: bf:cf:6f:27:9a:5b:dd:7d:11:be:ef:f1:57:22:15: 8e:59:63:d6:d0:c9:56:91:a5:cb:e5:6c:c3:6f:6f: fe:a9:a7:0e:2a:a4:c7:78:07:36:dd:0c:72:12:06: 64:85:e9:af:f0:b9:4e:53:86:49:d1:61:6b:a2:05: 40:dc:f3:5f:a3:8a:bf:78:de:47:d6:b4:33:c5:2d: 07:b1:fc:93:1c:e8:aa:d8:18:43:67:ab:bc:ad:e6: 27:8e:43:d9:4f:34:75:d6:7a:9c:2f:0c:8a:e7:4f: 7b:75:a2:76:ec:ac:51:7c:f1:96:53:06:bb:7d:09: 66:eb:3a:29:56:00:a8:b7:93:92:09:25:28:f3:0e: f2:41:9c:9b:d5:4a:10:d6:bf:91:ab:47:11:31:aa: 67:ee:b2:95:15:03:55:82:21:83:0f:fa:ec:85:18: 6e:ac:5a:41:3c:12:34:06:c3:17:e0:c4:18:a1:1a: f0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A1:C4:50:4F:E1:16:2F:A5:E5:3E:7D:AA:A5:A1:81:92:AF:FA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/889003fe-64bf-3281-8fd1-cd1925648618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:60:8d:24:c2:8b:80:d0:27:30:9a:0f:70:38:d9:fc:45:0c: 7c:12:10:71:b6:61:14:3a:e1:ec:db:ce:e5:b0:4e:ed:c5:5f: 18:b7:e8:92:5d:06:51:07:07:ab:3a:f4:33:04:6b:32:f0:4a: 5d:ed:12:1d:26:12:3e:67:fb:b8:00:4a:38:dc:6c:d8:a9:22: 5e:f4:89:44:b4:36:05:1d:85:6f:4e:ee:42:57:7a:10:0d:0d: 35:ac:53:8f:a3:b5:3f:8d:3e:9f:44:60:ab:58:02:c3:93:e7: bd:49:cd:c4:53:57:bf:d6:ac:14:7d:6c:5c:65:42:ac:41:1a: 3c:3a:42:6b:e1:6e:e5:43:3a:34:d3:d4:cd:8d:d0:15:0d:38: d2:63:83:48:c5:d2:ca:82:21:bb:4c:6a:93:de:1a:61:64:02: 30:a6:61:89:c1:6a:0d:0c:5c:45:70:ef:52:f3:7b:f9:46:b6: a5:cf:a8:a8:83:a1:81:c4:9e:e7:5d:36:53:8d:cf:29:f1:64: 36:5d:72:57:40:82:f0:be:02:70:bb:ca:2b:52:c9:39:a2:d2: 45:68:09:87:81:e4:8a:2b:70:db:29:ef:85:c9:39:bb:28:cf: fd:80:5a:93:b5:64:10:dc:99:e5:43:28:ea:c0:9e:33:b2:06: f3:d8:1e:e9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9neSxamNq9J2EnQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk Mzg2MDBiMGItN2M3MS00MDdkLTk3N2ItZTI0MDUwNmM4MTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVSWinwq82rsS3lDIOIs5WqdoUkfHpvY+Zi2 IACLLfE54v8nKNmqNjnoXQ9Aaa0S1FMglSZhYnsbsq4jTnm/GI0xJ6kgcoTQds6/ z28nmlvdfRG+7/FXIhWOWWPW0MlWkaXL5WzDb2/+qacOKqTHeAc23QxyEgZkhemv 8LlOU4ZJ0WFrogVA3PNfo4q/eN5H1rQzxS0HsfyTHOiq2BhDZ6u8reYnjkPZTzR1 1nqcLwyK5097daJ27KxRfPGWUwa7fQlm6zopVgCot5OSCSUo8w7yQZyb1UoQ1r+R q0cRMapn7rKVFQNVgiGDD/rshRhurFpBPBI0BsMX4MQYoRrw9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAmhxFBP4RYvpeU+faqloYGSr/oXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODg5MDAzZmUtNjRiZi0z MjgxLThmZDEtY2QxOTI1NjQ4NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCZYI0kwouA0Ccwmg9wONn8RQx8EhBxtmEUOuHs 287lsE7txV8Yt+iSXQZRBwerOvQzBGsy8Epd7RIdJhI+Z/u4AEo43GzYqSJe9IlE tDYFHYVvTu5CV3oQDQ01rFOPo7U/jT6fRGCrWALDk+e9Sc3EU1e/1qwUfWxcZUKs QRo8OkJr4W7lQzo009TNjdAVDTjSY4NIxdLKgiG7TGqT3hphZAIwpmGJwWoNDFxF cO9S83v5Rralz6iog6GBxJ7nXTZTjc8p8WQ2XXJXQILwvgJwu8orUsk5otJFaAmH geSKK3DbKe+FyTm7KM/9gFqTtWQQ3JnlQyjqwJ4zsgbz2B7p -----END CERTIFICATE-----Generated at Wed Oct 29 07:08:03 2025 by rpki-client