$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa File: db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa (raw, json) Hash identifier: TXBfLZtFmJJZo+lJEalD/apzaQru/Oqgh+bgnsT4jEE= Subject key identifier: 97:CB:9D:8F:23:FF:6E:D6:B8:A6:4B:AF:D2:17:2A:C0:59:EF:30:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF95161C9CE995087E38C8900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 36627 IP address blocks: 2001:500:120::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:61:c9:ce:99:50:87:e3:8c:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=78790869-2f2c-4805-95a9-6c3fd3e5c92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:4b:b7:6c:7e:3e:2c:86:e2:93:ea:cd:a8: 5e:5b:90:63:5a:73:46:8f:3c:3e:7c:9a:28:4d:45: 94:65:70:0f:98:54:5f:aa:cc:07:4a:23:62:5e:14: b6:b5:81:cb:1d:21:e0:30:fc:93:c1:56:35:d5:1e: 32:47:fa:95:96:d5:12:0b:8c:e1:b5:c3:25:72:3f: f9:f2:4d:2d:2a:a8:a7:0c:00:97:14:8b:16:f4:50: b8:2b:2b:1f:29:57:43:eb:8a:01:9b:d8:b1:98:35: 91:13:fd:e0:d1:b0:0d:f9:aa:03:a1:74:ec:04:2f: 81:3b:59:b4:be:c9:b0:6f:09:9c:7b:b5:71:c0:6f: 58:53:ab:23:be:f7:86:33:83:42:24:72:cf:46:1b: 04:30:8d:22:d3:72:ac:30:3d:90:dd:b1:26:e4:b5: d8:97:15:77:3b:f4:cb:5d:6b:ca:e8:30:b0:61:bc: 96:88:84:bc:5b:6f:6a:f4:9b:ae:01:6f:37:64:47: 6a:b4:c7:51:1c:9f:fe:96:10:a9:a7:d1:c2:c2:02: d6:c1:82:bb:ce:b5:4a:80:45:99:67:bc:e6:a8:91: 70:ad:1b:83:28:e1:fe:5c:e3:60:ed:0a:a4:da:31: a5:6b:46:33:10:da:ed:e6:d3:6e:6d:28:14:1f:d3: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CB:9D:8F:23:FF:6E:D6:B8:A6:4B:AF:D2:17:2A:C0:59:EF:30:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ab:f2:0e:33:70:aa:ae:0e:b3:87:fb:56:f7:f2:68:b8:33: 18:06:53:5c:93:5e:ec:2f:d4:4d:97:8d:5f:04:f2:6e:0f:1d: c1:16:ba:b7:51:6a:d0:f3:85:5a:14:d8:e0:6b:ae:72:8e:14: 9b:1e:13:04:9a:8e:3c:6a:d4:57:4a:c6:83:e1:38:1c:6a:fa: 3c:9c:a5:44:9b:e3:50:c2:85:63:38:6c:87:91:20:93:4b:b9: 11:3d:47:bd:d5:84:72:0b:48:1f:57:95:c9:08:72:90:e2:08: 41:12:08:b1:a5:e2:96:a2:aa:99:db:77:9f:78:1e:3b:ad:fa: 32:df:d7:a1:f8:d1:24:65:f6:d0:1c:98:00:50:c7:a1:43:72: 39:60:e8:f6:d4:d1:7b:8f:ca:e9:1b:9b:30:9c:9f:c8:a4:e0: ed:01:92:a6:b7:6b:eb:c7:cb:93:34:7a:e3:69:06:1f:4a:c1: 00:00:95:7e:71:b0:70:8d:44:a9:d8:23:f4:6c:19:40:9e:f6: e6:c6:19:ec:c1:e3:3b:5a:88:a8:e6:8a:7d:ce:96:bf:0c:f0: a7:44:a7:23:d2:c0:44:a2:2e:50:74:ff:36:27:f8:04:59:4c: cf:ee:b3:8c:fe:83:99:0d:b3:60:79:b3:ee:ef:7e:19:06:aa: 80:21:0b:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEr5UWHJzplQh+OMiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Nzg3OTA4NjktMmYyYy00ODA1LTk1YTktNmMzZmQzZTVjOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHJLt2x+PiyG4pPqzaheW5BjWnNGjzw+fJoo TUWUZXAPmFRfqswHSiNiXhS2tYHLHSHgMPyTwVY11R4yR/qVltUSC4zhtcMlcj/5 8k0tKqinDACXFIsW9FC4KysfKVdD64oBm9ixmDWRE/3g0bAN+aoDoXTsBC+BO1m0 vsmwbwmce7VxwG9YU6sjvveGM4NCJHLPRhsEMI0i03KsMD2Q3bEm5LXYlxV3O/TL XWvK6DCwYbyWiIS8W29q9JuuAW83ZEdqtMdRHJ/+lhCpp9HCwgLWwYK7zrVKgEWZ Z7zmqJFwrRuDKOH+XONg7Qqk2jGla0YzENrt5tNubSgUH9NILwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJfLnY8j/27WuKZLr9IXKsBZ7zBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI0NjFlYmUtNmZmNS0z ZjljLWI1OTYtNWY1ZmNiYmYwOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBYq/IOM3Cqrg6zh/tW9/JouDMYBlNck17sL9RN l41fBPJuDx3BFrq3UWrQ84VaFNjga65yjhSbHhMEmo48atRXSsaD4Tgcavo8nKVE m+NQwoVjOGyHkSCTS7kRPUe91YRyC0gfV5XJCHKQ4ghBEgixpeKWoqqZ23efeB47 rfoy39eh+NEkZfbQHJgAUMehQ3I5YOj21NF7j8rpG5swnJ/IpODtAZKmt2vrx8uT NHrjaQYfSsEAAJV+cbBwjUSp2CP0bBlAnvbmxhnsweM7Woio5op9zpa/DPCnRKcj 0sBEoi5QdP82J/gEWUzP7rOM/oOZDbNgebPu734ZBqqAIQsL -----END CERTIFICATE-----Generated at Wed Sep 10 17:48:16 2025 by rpki-client