$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa File: 209ae32f-e634-38d0-ae30-cca37a438043.roa (raw, json) Hash identifier: 6cn3odngikXExP556xcvJesuNm6Vhdw+6x0l531pXak= Subject key identifier: 10:95:1D:55:40:3A:14:5C:6B:A2:7F:14:D1:1F:9F:C5:D2:BF:9A:0B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C2BB2FA6BD562198B9100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 396567 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2b:b2:fa:6b:d5:62:19:8b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=056b3fc3-8f83-4fe6-a4a7-41b63d8972e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:61:68:a1:55:70:37:a3:ea:4a:c3:da:97: 5e:5c:96:3c:7e:c5:91:4b:f7:fd:57:d6:2b:26:d9: 68:a5:77:c4:7c:b7:a3:53:4a:d0:61:c2:48:80:34: 50:b3:d6:f2:07:88:15:cf:eb:f2:1b:55:64:74:d5: f0:07:30:a5:a4:41:ba:10:c0:fd:70:9b:7d:39:cb: 22:06:05:ad:36:44:8d:1e:7c:25:09:d3:86:3d:fe: ae:6e:9f:47:84:63:99:3d:c4:eb:ad:71:e8:eb:32: 12:8b:a3:6c:18:12:72:22:c0:bd:2a:11:91:9b:7c: 3c:58:e2:44:5c:e8:f9:b1:82:b4:13:e0:a2:6f:35: cc:bc:4b:f3:2d:ae:66:58:55:8d:25:66:1f:2b:1e: 03:77:b0:52:a4:24:52:d0:39:b5:74:af:49:22:a3: 25:df:8e:9a:98:02:f8:62:cd:3c:e2:45:bf:79:81: de:d0:60:da:40:4f:ec:e1:ee:64:e6:df:44:70:c9: b0:96:3e:2a:a4:86:55:fb:21:a0:5b:99:6d:a0:4f: 37:61:c9:c2:64:09:de:37:f2:1c:5b:d5:13:ca:e0: a2:19:a6:93:09:10:76:f7:25:03:b7:96:fd:ae:21: fc:0f:e3:52:31:41:e6:d5:45:a6:f8:e7:2f:77:e7: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:1D:55:40:3A:14:5C:6B:A2:7F:14:D1:1F:9F:C5:D2:BF:9A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:3e:9a:1d:6e:0a:c9:d6:4b:73:a0:1e:b8:6a:f6:47:62:8b: 02:7e:2e:49:fe:21:bf:71:6d:2d:4b:63:39:f6:77:62:6d:d6: b1:8a:43:b9:a6:d9:9a:63:e2:28:f5:16:99:89:c8:e9:ff:17: 99:14:3e:25:3b:96:4b:f8:e4:04:8d:9b:1e:11:f5:48:50:66: d6:9c:e2:b3:07:da:7a:a3:0f:da:f4:f6:27:45:59:f5:f8:72: b3:e1:5a:dc:59:2b:b5:8d:3f:63:ff:29:86:d4:98:9d:a7:41: c0:a5:77:a9:bd:b4:b7:a9:d0:78:91:e8:af:df:41:6c:08:05: 98:ea:e1:c1:fb:21:c7:66:2e:cc:cd:09:86:4e:cd:7c:b5:63: ef:08:34:7c:df:89:e1:a8:18:14:5b:6f:58:8b:ae:3c:a1:5f: af:f3:0e:7a:be:a9:04:dc:3d:7c:b5:c5:7b:a1:83:12:c8:18: 98:11:54:e6:33:31:66:ae:b0:d3:5a:1b:d1:72:b3:71:db:54: 98:f9:08:d3:13:84:60:f8:4e:dd:a1:8e:96:39:3d:f4:67:72: cc:92:e3:c5:ef:58:47:09:83:88:8c:75:90:7a:f1:08:3b:62: 2c:4d:ac:f5:af:08:ec:5f:e8:23:f5:1b:ca:94:b0:8a:72:32: a9:42:4d:72 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATCuy+mvVYhmLkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MDU2YjNmYzMtOGY4My00ZmU2LWE0YTctNDFiNjNkODk3MmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIFhaKFVcDej6krD2pdeXJY8fsWRS/f9V9Yr JtlopXfEfLejU0rQYcJIgDRQs9byB4gVz+vyG1VkdNXwBzClpEG6EMD9cJt9Ocsi BgWtNkSNHnwlCdOGPf6ubp9HhGOZPcTrrXHo6zISi6NsGBJyIsC9KhGRm3w8WOJE XOj5sYK0E+CibzXMvEvzLa5mWFWNJWYfKx4Dd7BSpCRS0Dm1dK9JIqMl346amAL4 Ys084kW/eYHe0GDaQE/s4e5k5t9EcMmwlj4qpIZV+yGgW5ltoE83YcnCZAneN/Ic W9UTyuCiGaaTCRB29yUDt5b9riH8D+NSMUHm1UWm+Ocvd+c7TwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBCVHVVAOhRca6J/FNEfn8XSv5oLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA5YWUzMmYtZTYzNC0z OGQwLWFlMzAtY2NhMzdhNDM4MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC0PpodbgrJ1ktzoB64avZHYosCfi5J/iG/cW0t S2M59ndibdaxikO5ptmaY+Io9RaZicjp/xeZFD4lO5ZL+OQEjZseEfVIUGbWnOKz B9p6ow/a9PYnRVn1+HKz4VrcWSu1jT9j/ymG1Jidp0HApXepvbS3qdB4keiv30Fs CAWY6uHB+yHHZi7MzQmGTs18tWPvCDR834nhqBgUW29Yi648oV+v8w56vqkE3D18 tcV7oYMSyBiYEVTmMzFmrrDTWhvRcrNx21SY+QjTE4Rg+E7doY6WOT30Z3LMkuPF 71hHCYOIjHWQevEIO2IsTaz1rwjsX+gj9RvKlLCKcjKpQk1y -----END CERTIFICATE-----Generated at Wed Sep 10 20:47:20 2025 by rpki-client