$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa File: 38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa (raw, json) Hash identifier: JHBakD+u5qvgU/fEqgtuxcwB9S4GAxdk/+ZPamXGhpY= Subject key identifier: 86:93:D5:E7:BF:0E:20:46:E4:6A:EF:30:50:89:A4:24:54:AE:D9:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A119C6437A7DBC6F8D47D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396582 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:9c:64:37:a7:db:c6:f8:d4:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=89e37de2-ad65-4e64-8b4c-deb7a03ed1a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:c9:83:eb:e5:2f:9b:67:94:c6:ab:f2:f3: 14:cd:7e:52:4a:e5:f9:82:24:c7:5d:3c:33:cd:52: fb:73:bd:98:96:ea:df:9c:b0:f3:99:99:d4:9f:4a: 41:19:0b:9c:1f:ce:c9:e4:82:70:2d:28:8f:e9:3e: 01:d4:79:f3:08:88:c0:fb:58:b1:ed:eb:6f:3f:53: 87:31:5f:12:df:90:eb:07:b2:fa:53:6f:03:2d:63: ee:b6:ef:01:b2:ac:98:18:13:7e:cb:1c:4c:1b:82: b4:97:d7:d3:5b:61:f7:9f:af:25:4f:5d:49:5e:ea: 2e:ce:8c:e1:bb:85:29:b8:5c:d5:a9:fe:28:c0:23: ed:5a:e1:35:39:59:9b:3b:09:1a:35:67:cb:2c:c8: e0:46:5e:df:ff:9f:ab:79:f7:67:21:a0:38:16:d3: 04:04:b7:b5:7f:9a:71:fa:9c:16:de:5a:69:f4:63: 7a:9b:46:ab:b1:f4:ba:1f:d4:01:64:ff:a5:0b:8a: 8e:41:84:a6:60:50:91:5e:46:f2:be:50:85:55:9f: b5:23:91:cc:9d:19:f5:91:92:d8:08:66:09:41:9d: ab:1a:bf:c2:f6:4b:87:e1:70:1b:ee:b0:aa:e9:b3: 5f:82:63:8e:4b:6d:57:43:f4:44:89:11:78:0e:8e: 8e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:93:D5:E7:BF:0E:20:46:E4:6A:EF:30:50:89:A4:24:54:AE:D9:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/38173ab9-eaeb-3b02-b41c-fbabdeaa48ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a6:d3:04:5a:2d:ca:47:97:9e:2a:19:a4:cd:9f:85:aa:11: 06:9f:11:00:9f:41:2a:be:52:e9:9f:c8:e1:50:1c:30:a3:6d: ed:b9:7b:dd:4b:d0:0e:21:7d:57:35:69:bb:d9:6a:46:06:aa: 66:14:90:d0:2c:34:8e:78:d8:96:b1:d3:00:b6:b4:59:01:d0: 08:d6:8a:52:80:23:51:5b:ca:5e:0e:34:82:25:75:6e:0a:fa: 13:f8:8a:16:d9:49:2f:bc:94:db:b7:bd:b6:9d:7b:67:8d:1e: d9:0f:f9:0e:d7:fe:57:b3:08:7b:24:af:d4:b3:f7:6a:19:e3: 0c:9a:da:71:9a:a7:e3:99:8f:b2:7f:f2:6b:88:30:06:43:5d: 2c:49:b7:c3:0e:f0:cb:84:8c:85:32:67:29:d4:05:7c:cc:e7: ba:d1:f6:13:be:51:ac:06:f0:77:ad:b4:d1:c2:5a:bd:03:ab: 5e:6c:b0:6d:74:74:7b:88:ff:2f:89:80:21:38:fd:a7:74:18: 1e:90:d1:8a:3c:cb:68:5f:bb:88:1f:b0:dd:af:6b:1f:b5:f5: e6:77:85:76:5e:5d:e5:94:99:5e:b0:d4:cf:9f:17:d6:39:9d: ff:40:e4:5c:f4:ef:b2:a9:e3:dd:86:7e:7d:a5:af:d2:e3:e5: 7d:8c:f4:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZxkN6fbxvjUfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ODllMzdkZTItYWQ2NS00ZTY0LThiNGMtZGViN2EwM2VkMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5DJg+vlL5tnlMar8vMUzX5SSuX5giTHXTwz zVL7c72YlurfnLDzmZnUn0pBGQucH87J5IJwLSiP6T4B1HnzCIjA+1ix7etvP1OH MV8S35DrB7L6U28DLWPutu8BsqyYGBN+yxxMG4K0l9fTW2H3n68lT11JXuouzozh u4UpuFzVqf4owCPtWuE1OVmbOwkaNWfLLMjgRl7f/5+refdnIaA4FtMEBLe1f5px +pwW3lpp9GN6m0arsfS6H9QBZP+lC4qOQYSmYFCRXkbyvlCFVZ+1I5HMnRn1kZLY CGYJQZ2rGr/C9kuH4XAb7rCq6bNfgmOOS21XQ/REiRF4Do6OwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIaT1ee/DiBG5GrvMFCJpCRUrtldMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzgxNzNhYjktZWFlYi0z YjAyLWI0MWMtZmJhYmRlYWE0OGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJum0wRaLcpHl54qGaTNn4WqEQafEQCfQSq+UumfyOFQHDCjbe25 e91L0A4hfVc1abvZakYGqmYUkNAsNI542Jax0wC2tFkB0AjWilKAI1Fbyl4ONIIl dW4K+hP4ihbZSS+8lNu3vbade2eNHtkP+Q7X/lezCHskr9Sz92oZ4wya2nGap+OZ j7J/8muIMAZDXSxJt8MO8MuEjIUyZynUBXzM57rR9hO+UawG8HettNHCWr0Dq15s sG10dHuI/y+JgCE4/ad0GB6Q0Yo8y2hfu4gfsN2vax+19eZ3hXZeXeWUmV6w1M+f F9Y5nf9A5Fz077Kp492Gfn2lr9Lj5X2M9Ls= -----END CERTIFICATE-----Generated at Wed Oct 29 07:16:08 2025 by rpki-client