$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a061081-0550-381c-b4f9-e8e4a6b9104d.roa File: 2a061081-0550-381c-b4f9-e8e4a6b9104d.roa (raw, json) Hash identifier: J0av1K+OBzWs5FfED/W5ZRLwaCHXiFAiZaLNyO35BVU= Subject key identifier: BC:C7:3B:9A:9A:F2:3A:4F:2F:4D:63:B0:CD:CF:49:27:E9:B0:CC:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C2D16914C5BBF834BFF40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a061081-0550-381c-b4f9-e8e4a6b9104d.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 396572 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2d:16:91:4c:5b:bf:83:4b:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=d13bdd67-7417-46de-878f-d27feb3f850b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:24:1e:77:78:89:c1:df:d2:20:48:26:e1:31: ee:29:75:ca:5a:4d:2a:6c:17:7a:32:10:b3:ef:7a: 4e:bb:14:fc:e8:0c:30:de:ca:da:b1:c6:cd:0c:8e: 5a:bd:be:32:ab:f2:7e:bf:9f:b9:55:1f:af:25:2c: 08:3f:cb:e5:f0:73:4e:b8:86:ba:33:dc:b5:ce:88: 31:0b:be:d3:bb:23:0f:02:42:b7:9b:a1:44:4f:34: 0d:9b:44:28:ad:41:07:b3:74:21:c3:58:e9:58:2a: 08:c7:30:e9:e3:be:60:bf:ab:08:78:dc:f6:90:f7: b3:bf:09:57:05:28:71:69:0f:c0:5f:35:6d:58:52: 48:d4:dc:39:b8:f3:bd:ac:2c:1d:10:42:54:01:e1: f1:36:c9:da:a6:da:c2:58:26:b4:10:2f:78:fa:41: ce:6e:19:8b:80:7a:f7:be:b9:33:7d:10:66:c2:d8: eb:12:85:73:be:24:af:a1:85:1c:f2:dc:98:ec:43: ab:e6:3c:ec:ec:ac:5d:12:e2:27:ca:28:3c:17:15: 67:f6:a8:cb:45:5f:d2:61:3c:08:f4:09:7b:4d:b0: 2e:49:04:d1:4a:4a:28:66:97:58:00:4d:e5:35:c8: f7:93:22:4b:52:19:51:8a:b8:cc:b2:e8:ea:fe:0d: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C7:3B:9A:9A:F2:3A:4F:2F:4D:63:B0:CD:CF:49:27:E9:B0:CC:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a061081-0550-381c-b4f9-e8e4a6b9104d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:5a:c2:47:29:92:58:d6:31:21:4f:07:ac:f9:0c:79:a7:0a: 2b:3f:7e:53:49:6d:fe:a8:fb:82:e5:7f:13:f3:b0:49:ea:d7: 1e:42:18:0a:0d:da:49:00:5d:bc:45:dd:99:c3:d6:c3:5c:d5: eb:76:db:ca:b7:70:63:bd:07:25:2e:d4:25:6f:06:98:fc:40: 6e:6f:a5:a4:56:ad:ea:aa:c9:20:44:df:73:ac:12:b5:90:0c: 69:e0:0f:43:e3:0e:16:8d:c4:04:c5:55:b8:0e:24:bb:46:c3: c1:3d:88:bb:8e:f1:da:b6:99:3b:aa:0e:52:41:96:9e:aa:2c: 93:87:fa:c2:75:65:17:34:41:70:7f:15:1d:65:b2:a0:07:6f: 5c:47:f0:c7:bc:4d:22:29:b4:aa:1e:1d:66:6e:61:10:a1:3e: 47:8e:01:72:9f:2d:20:2b:e5:ef:4d:67:45:22:db:63:14:cf: a3:60:be:d1:ef:6c:ad:ce:18:f5:fe:c7:fd:e3:ff:25:50:3e: 8c:76:5b:6f:15:1e:a1:18:5e:5d:f8:6b:21:d4:3a:d3:22:04: 9c:20:db:73:5b:03:aa:0a:1e:76:4c:40:b7:7f:13:67:35:d4: 81:f0:dd:ef:f9:16:6c:c6:32:58:bb:f4:87:ba:61:80:86:f6: f7:fa:de:11 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATC0WkUxbv4NL/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDEzYmRkNjctNzQxNy00NmRlLTg3OGYtZDI3ZmViM2Y4NTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iQed3iJwd/SIEgm4THuKXXKWk0qbBd6MhCz 73pOuxT86Aww3srascbNDI5avb4yq/J+v5+5VR+vJSwIP8vl8HNOuIa6M9y1zogx C77TuyMPAkK3m6FETzQNm0QorUEHs3Qhw1jpWCoIxzDp475gv6sIeNz2kPezvwlX BShxaQ/AXzVtWFJI1Nw5uPO9rCwdEEJUAeHxNsnaptrCWCa0EC94+kHObhmLgHr3 vrkzfRBmwtjrEoVzviSvoYUc8tyY7EOr5jzs7KxdEuInyig8FxVn9qjLRV/SYTwI 9Al7TbAuSQTRSkooZpdYAE3lNcj3kyJLUhlRirjMsujq/g1CqwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLzHO5qa8jpPL01jsM3PSSfpsMzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmEwNjEwODEtMDU1MC0z ODFjLWI0ZjktZThlNGE2YjkxMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCJWsJHKZJY1jEhTwes+Qx5pworP35TSW3+qPuC 5X8T87BJ6tceQhgKDdpJAF28Rd2Zw9bDXNXrdtvKt3BjvQclLtQlbwaY/EBub6Wk Vq3qqskgRN9zrBK1kAxp4A9D4w4WjcQExVW4DiS7RsPBPYi7jvHatpk7qg5SQZae qiyTh/rCdWUXNEFwfxUdZbKgB29cR/DHvE0iKbSqHh1mbmEQoT5HjgFyny0gK+Xv TWdFIttjFM+jYL7R72ytzhj1/sf94/8lUD6MdltvFR6hGF5d+Gsh1DrTIgScINtz WwOqCh52TEC3fxNnNdSB8N3v+RZsxjJYu/SHumGAhvb3+t4R -----END CERTIFICATE-----Generated at Wed Sep 10 17:52:28 2025 by rpki-client