$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2871cde-bf8e-30b2-ab4d-370976c5e0ac.roa File: e2871cde-bf8e-30b2-ab4d-370976c5e0ac.roa (raw, json) Hash identifier: GWvO4X3hZmmXkqQSdHFlZyBfW5TcoagxK/J5JZsjCaw= Subject key identifier: 32:41:D7:38:29:3A:D0:8F:A9:82:61:81:DB:7E:37:D1:40:06:49:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B3AEC53533C743D6BC4B30AE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2871cde-bf8e-30b2-ab4d-370976c5e0ac.roa Signing time: Thu 18 Sep 2025 01:00:32 +0000 ROA not before: Thu 18 Sep 2025 01:00:32 +0000 ROA not after: Wed 17 Dec 2025 02:00:32 +0000 asID: 396582 IP address blocks: 2001:500:30ff::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3a:ec:53:53:3c:74:3d:6b:c4:b3:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 18 01:00:32 2025 GMT Not After : Dec 17 02:00:32 2025 GMT Subject: CN=dfc52ed8-eeaf-4975-89e0-9b6237e68afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:73:c1:53:69:bd:81:d4:fd:b6:5c:0f:a7: 0b:93:d3:a7:51:eb:80:8d:72:88:73:2f:6c:11:c7: a2:a6:67:5a:e8:b4:f7:be:73:85:d5:78:15:20:59: 74:45:19:d1:eb:11:6f:5e:e0:b0:b5:3d:5d:87:71: e4:3b:39:b5:0a:ff:51:0e:17:48:d9:fa:ea:a9:83: ac:37:6a:50:9d:48:23:77:83:38:5b:a5:6e:bd:b5: b1:8d:88:fb:fe:81:de:c7:6e:6b:73:a5:c5:49:e3: 1d:58:9c:52:66:9d:7a:b5:94:82:14:54:84:13:e1: 22:6d:4d:8c:f2:94:f4:b5:75:cc:a9:a6:bf:56:6c: 22:22:07:83:cd:09:7d:1a:ef:13:54:35:8f:f1:c1: 24:ac:9a:41:9d:70:be:23:7e:ba:9a:19:40:28:ec: 4b:41:cb:a5:5d:06:18:d3:c1:88:40:41:0e:4e:87: b2:31:07:2d:8b:da:45:82:71:f3:2d:23:1d:b2:5a: 06:b6:01:2f:d9:55:83:c1:13:54:ab:15:e3:06:94: 26:64:bf:77:40:10:01:6d:6d:78:1e:17:66:19:ab: d8:e6:7a:59:07:71:ad:0a:84:c6:58:f7:84:5f:5c: a3:ab:35:07:0a:29:26:f0:e8:a7:de:e0:02:0e:5e: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:41:D7:38:29:3A:D0:8F:A9:82:61:81:DB:7E:37:D1:40:06:49:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2871cde-bf8e-30b2-ab4d-370976c5e0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:30ff:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bb:09:fd:83:4e:7c:d4:23:6b:60:d5:22:a8:5c:d8:f8:a2: b4:53:98:b1:48:fa:58:45:40:c4:d0:03:1e:ca:53:81:46:40: a6:9d:07:4c:8c:c4:30:c2:ec:bf:ed:84:c4:9f:f7:be:91:f5: 8d:bc:ed:42:f4:b3:e0:64:6e:70:fd:fa:38:7c:b6:83:fb:16: 14:74:52:ca:1a:a0:a5:1c:57:6c:ce:fa:87:8e:4a:bc:b6:02: 6f:ac:04:59:93:53:73:34:7b:88:b6:aa:58:d1:41:5d:dd:55: 76:98:97:ca:4f:e8:8a:3e:01:b6:6a:f0:b0:96:17:18:85:08: 90:e3:cb:2c:8b:a2:39:11:bc:a7:d3:78:59:2f:8e:02:7b:ac: 87:94:36:d0:5e:a0:21:36:68:3b:46:d3:a1:ab:a3:c1:f8:8b: b6:ca:0a:52:44:ac:77:6c:5e:c0:3c:a1:53:fe:91:88:b3:c0: d2:fa:a4:e0:db:fb:a8:e4:a9:20:4b:44:41:ec:a0:43:bc:e8: 3d:89:f5:18:18:d9:51:87:9a:dd:48:56:ee:ca:74:47:52:dc: 8d:91:05:af:43:71:9a:dd:88:b6:6c:b4:eb:73:4e:73:d9:35: 4f:ac:9f:c4:88:96:68:dd:17:a2:a1:1f:5b:55:55:e6:8e:5d: 39:c1:da:c0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs67FNTPHQ9a8SzCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk ZGZjNTJlZDgtZWVhZi00OTc1LTg5ZTAtOWI2MjM3ZTY4YWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXxzwVNpvYHU/bZcD6cLk9OnUeuAjXKIcy9s Eceipmda6LT3vnOF1XgVIFl0RRnR6xFvXuCwtT1dh3HkOzm1Cv9RDhdI2frqqYOs N2pQnUgjd4M4W6VuvbWxjYj7/oHex25rc6XFSeMdWJxSZp16tZSCFFSEE+EibU2M 8pT0tXXMqaa/VmwiIgeDzQl9Gu8TVDWP8cEkrJpBnXC+I366mhlAKOxLQculXQYY 08GIQEEOToeyMQcti9pFgnHzLSMdsloGtgEv2VWDwRNUqxXjBpQmZL93QBABbW14 HhdmGavY5npZB3GtCoTGWPeEX1yjqzUHCikm8Oin3uACDl6AnQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDJB1zgpOtCPqYJhgdt+N9FABkmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTI4NzFjZGUtYmY4ZS0z MGIyLWFiNGQtMzcwOTc2YzVlMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBvuwn9g0581CNrYNUiqFzY+KK0U5ixSPpYRUDE 0AMeylOBRkCmnQdMjMQwwuy/7YTEn/e+kfWNvO1C9LPgZG5w/fo4fLaD+xYUdFLK GqClHFdszvqHjkq8tgJvrARZk1NzNHuItqpY0UFd3VV2mJfKT+iKPgG2avCwlhcY hQiQ48ssi6I5Ebyn03hZL44Ce6yHlDbQXqAhNmg7RtOhq6PB+Iu2ygpSRKx3bF7A PKFT/pGIs8DS+qTg2/uo5KkgS0RB7KBDvOg9ifUYGNlRh5rdSFbuynRHUtyNkQWv Q3Ga3Yi2bLTrc05z2TVPrJ/EiJZo3ReioR9bVVXmjl05wdrA -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:05 2025 by rpki-client