$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e8c6737-9952-3b7f-8222-641ebcd032a0.roa File: 2e8c6737-9952-3b7f-8222-641ebcd032a0.roa (raw, json) Hash identifier: h3sjV1cIEG6O7KnFmjOAh9uuaxj64F4Njw8bGC8OEBI= Subject key identifier: 7D:8A:0A:63:76:B4:C0:04:EE:98:58:8F:5E:A6:67:2C:39:7B:2A:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C289F504A1EA26BDCF800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e8c6737-9952-3b7f-8222-641ebcd032a0.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 396599 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:28:9f:50:4a:1e:a2:6b:dc:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=d82e5250-f264-4829-a350-014b603b5225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:74:5a:90:ea:10:dc:e3:a0:c4:b4:a9:31:35: 9a:ee:a7:2c:04:09:e5:33:4c:91:f9:ba:fa:7f:b0: d7:3a:5c:8b:a9:c5:a1:bf:0b:4f:ce:95:81:23:c9: 6e:c3:57:a4:3d:8e:1e:85:0c:10:bb:1b:e8:79:f8: b2:1e:05:5b:74:cc:8d:f5:0b:67:21:a4:1b:89:5e: 12:84:c9:99:d3:f3:6c:09:8d:3f:be:5a:79:63:75: 0c:7d:ce:78:62:a2:31:3a:97:40:78:a3:87:e4:00: 25:24:23:96:80:68:4a:91:39:d8:0a:fa:f8:0d:07: 1b:2c:34:f9:e0:cf:6e:04:bd:e2:ab:d5:24:34:95: 79:e9:71:62:40:0f:78:47:91:f2:5c:1e:af:f6:a5: 4e:fe:9d:61:63:13:a3:a6:5a:66:dc:21:9a:b7:a5: 27:ec:15:15:66:b3:bb:37:89:a1:41:62:85:c7:8f: 22:a5:35:b3:f4:f2:d0:f8:cd:04:38:a5:24:52:6e: bf:b9:be:12:fc:22:8a:23:98:92:61:d8:28:9c:9f: a7:91:1c:f5:4d:af:0b:8c:b8:1f:be:b0:04:98:7a: f6:f2:fd:2c:0f:be:53:7e:be:65:24:63:9a:f1:43: 6d:f3:cb:d5:5b:72:80:e2:e7:8e:02:0b:60:b7:a8: 95:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:8A:0A:63:76:B4:C0:04:EE:98:58:8F:5E:A6:67:2C:39:7B:2A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e8c6737-9952-3b7f-8222-641ebcd032a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:42:c3:58:1e:1e:62:88:d3:e2:90:85:e3:01:0b:85:a8:29: 52:8b:cb:a2:5d:53:d0:37:76:f7:48:34:6d:42:c3:b9:00:06: 39:e9:cc:c9:d1:01:84:a9:9d:cb:33:9a:65:1a:8d:0a:cb:d9: 1b:8d:56:96:ec:06:00:db:db:44:50:02:ba:e1:b6:ac:15:bb: 0f:fe:74:ba:5f:17:d3:6a:e5:8b:23:f5:c2:09:56:19:ef:19: 1f:9b:c0:47:49:a7:13:55:f2:d2:bf:c4:5d:dc:59:10:20:f0: 48:d7:38:75:f6:c4:29:48:71:ef:27:85:df:56:10:c1:bc:83: de:ab:61:16:09:f3:50:ec:57:7a:84:06:fb:70:8c:8f:05:f3: 41:42:de:64:27:bf:4d:8d:c2:79:a4:12:3f:28:dd:61:79:b4: 22:d5:2b:b4:ae:c0:98:96:f7:c7:37:23:5c:1a:75:f7:38:f9: 80:e1:68:6c:cd:9a:c7:6e:54:94:4f:4a:3c:bc:0c:a2:99:8b: 8e:7a:1b:12:09:88:0b:7b:dc:d0:d8:34:d5:6d:10:d4:28:4a: dd:9f:e6:1c:05:a8:b7:37:dd:92:85:72:d4:f9:e3:e3:ca:04: 9c:67:cf:1e:c1:5a:6f:05:94:bc:c3:f6:b2:db:2e:2f:cf:1c: e3:6e:fd:d9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATCifUEoeomvc+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZDgyZTUyNTAtZjI2NC00ODI5LWEzNTAtMDE0YjYwM2I1MjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnRakOoQ3OOgxLSpMTWa7qcsBAnlM0yR+br6 f7DXOlyLqcWhvwtPzpWBI8luw1ekPY4ehQwQuxvoefiyHgVbdMyN9QtnIaQbiV4S hMmZ0/NsCY0/vlp5Y3UMfc54YqIxOpdAeKOH5AAlJCOWgGhKkTnYCvr4DQcbLDT5 4M9uBL3iq9UkNJV56XFiQA94R5HyXB6v9qVO/p1hYxOjplpm3CGat6Un7BUVZrO7 N4mhQWKFx48ipTWz9PLQ+M0EOKUkUm6/ub4S/CKKI5iSYdgonJ+nkRz1Ta8LjLgf vrAEmHr28v0sD75Tfr5lJGOa8UNt88vVW3KA4ueOAgtgt6iV+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH2KCmN2tMAE7phYj16mZyw5eyoCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmU4YzY3MzctOTk1Mi0z YjdmLTgyMjItNjQxZWJjZDAzMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAwQsNYHh5iiNPikIXjAQuFqClSi8uiXVPQN3b3 SDRtQsO5AAY56czJ0QGEqZ3LM5plGo0Ky9kbjVaW7AYA29tEUAK64basFbsP/nS6 XxfTauWLI/XCCVYZ7xkfm8BHSacTVfLSv8Rd3FkQIPBI1zh19sQpSHHvJ4XfVhDB vIPeq2EWCfNQ7Fd6hAb7cIyPBfNBQt5kJ79NjcJ5pBI/KN1hebQi1Su0rsCYlvfH NyNcGnX3OPmA4WhszZrHblSUT0o8vAyimYuOehsSCYgLe9zQ2DTVbRDUKErdn+Yc Bai3N92ShXLU+ePjygScZ88ewVpvBZS8w/ay2y4vzxzjbv3Z -----END CERTIFICATE-----Generated at Wed Sep 10 17:52:16 2025 by rpki-client