$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477d90c-49d7-3bb3-a4d5-a83ae4c07f87.roa File: 3477d90c-49d7-3bb3-a4d5-a83ae4c07f87.roa (raw, json) Hash identifier: 7hKvt9G94kPiWBrqTo+m1w8L5whqsK4VBeCQABJjL30= Subject key identifier: DF:38:9C:E3:BC:49:D2:3E:00:03:87:AB:58:D4:F0:DB:D0:AC:07:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2CF71235D9A53AC8D5A58B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477d90c-49d7-3bb3-a4d5-a83ae4c07f87.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 396602 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:12:35:d9:a5:3a:c8:d5:a5:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=031133cf-ce7a-42ee-a45b-d2304338748f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:0e:8b:72:6e:40:58:40:fc:89:72:bc:96: b5:82:ca:4e:b6:69:b9:99:d0:9e:4f:05:e8:0b:2e: e5:ab:fa:98:69:0b:d6:96:1b:5f:5d:3d:7d:f8:ce: fd:42:01:00:8a:8c:dc:e2:0f:46:f0:80:44:f8:07: 48:ae:2d:d2:9e:49:81:db:b1:94:96:c4:70:f9:31: c2:c4:2d:93:fc:fb:36:3c:c5:2d:5a:f0:89:b8:0a: 28:93:52:ae:5c:83:f4:dd:8f:d1:bb:55:9f:c2:a8: 4b:71:cb:44:4b:be:bc:21:42:90:6d:d5:90:7f:7f: 10:f5:ef:4c:72:13:73:e7:2f:d8:5e:cf:10:4a:3f: 4b:83:62:49:5e:a0:3b:65:10:b2:2a:30:b3:a6:80: fe:df:d8:5b:10:b4:c4:16:50:de:0e:af:98:e9:63: 1d:28:a7:94:70:b0:48:4d:4d:3d:45:de:8e:7a:99: f4:dd:4b:b3:3b:34:fa:70:89:ed:64:2a:79:bb:60: c9:58:05:13:f3:73:75:8f:ab:95:4c:a1:64:5d:ae: 36:89:82:ac:b3:02:c7:51:76:1e:10:fc:a7:eb:d1: a0:9a:eb:09:42:67:fa:9d:b5:19:d3:82:d2:79:9f: 9a:2d:30:b6:56:eb:08:9d:7a:b2:fe:c2:fe:21:81: 19:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:38:9C:E3:BC:49:D2:3E:00:03:87:AB:58:D4:F0:DB:D0:AC:07:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3477d90c-49d7-3bb3-a4d5-a83ae4c07f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:46:f6:cd:93:92:e8:18:3d:f6:b1:34:9d:29:c1:3a:53:1a: 71:5c:46:97:a9:38:a2:1c:22:61:cc:69:a8:ea:34:a3:3c:ff: e7:e8:e8:8f:ac:e7:aa:10:5c:cf:ee:7c:1e:90:7b:b3:96:47: d4:57:07:61:91:88:16:03:0b:35:ba:d9:da:d6:ee:e9:6b:a4: 22:4b:36:0f:bd:04:54:a1:f9:b1:04:bd:8a:e2:60:e8:0d:2b: 50:f2:00:af:fc:83:c1:23:a8:9e:a4:f1:ea:45:9e:62:c6:c5: d9:31:eb:bf:76:9a:2f:12:23:03:8e:1d:e1:9c:ee:9c:26:ef: 13:b6:76:fe:56:c7:04:64:1f:48:d6:9d:41:0e:d8:62:17:4b: 58:f3:29:56:40:09:42:ae:b9:57:30:03:e5:a2:8b:31:4f:f3: 9b:7c:ed:53:12:35:de:41:c1:6a:6b:b0:c4:84:ca:56:7e:7b: 1c:c6:ae:a1:9f:ef:8e:04:d9:20:8a:c6:da:23:26:3b:38:8f: cd:0f:77:5e:ab:df:b5:9a:26:3f:1f:94:08:2c:81:68:b2:7f: 5b:d6:fe:86:83:60:c4:1f:30:28:c6:8c:a8:12:2b:75:fa:e5: 10:8b:e9:db:bb:a2:32:a2:df:05:11:a2:64:c7:cc:ad:f1:fa: c9:11:8b:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEss9xI12aU6yNWli4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk MDMxMTMzY2YtY2U3YS00MmVlLWE0NWItZDIzMDQzMzg3NDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eMOi3JuQFhA/IlyvJa1gspOtmm5mdCeTwXo Cy7lq/qYaQvWlhtfXT19+M79QgEAiozc4g9G8IBE+AdIri3SnkmB27GUlsRw+THC xC2T/Ps2PMUtWvCJuAook1KuXIP03Y/Ru1WfwqhLcctES768IUKQbdWQf38Q9e9M chNz5y/YXs8QSj9Lg2JJXqA7ZRCyKjCzpoD+39hbELTEFlDeDq+Y6WMdKKeUcLBI TU09Rd6Oepn03UuzOzT6cIntZCp5u2DJWAUT83N1j6uVTKFkXa42iYKsswLHUXYe EPyn69GgmusJQmf6nbUZ04LSeZ+aLTC2VusInXqy/sL+IYEZwQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN84nOO8SdI+AAOHq1jU8NvQrAdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQ3N2Q5MGMtNDlkNy0z YmIzLWE0ZDUtYTgzYWU0YzA3Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCoRvbNk5LoGD32sTSdKcE6UxpxXEaXqTiiHCJh zGmo6jSjPP/n6OiPrOeqEFzP7nwekHuzlkfUVwdhkYgWAws1utna1u7pa6QiSzYP vQRUofmxBL2K4mDoDStQ8gCv/IPBI6iepPHqRZ5ixsXZMeu/dpovEiMDjh3hnO6c Ju8Ttnb+VscEZB9I1p1BDthiF0tY8ylWQAlCrrlXMAPloosxT/ObfO1TEjXeQcFq a7DEhMpWfnscxq6hn++OBNkgisbaIyY7OI/ND3deq9+1miY/H5QILIFosn9b1v6G g2DEHzAoxoyoEit1+uUQi+nbu6Iyot8FEaJkx8yt8frJEYtU -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:14 2025 by rpki-client