$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b981d05-5ece-31de-bf32-c532d235161d.roa File: 3b981d05-5ece-31de-bf32-c532d235161d.roa (raw, json) Hash identifier: 4viV0maAneNG7JRj/uKvgsdcItgCxmba3IUqqoKnQZg= Subject key identifier: BD:89:1C:B2:20:D5:A0:D9:68:A7:3E:6C:FB:F3:0A:40:43:9B:99:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A11956A035541BED9596740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b981d05-5ece-31de-bf32-c532d235161d.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396613 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:95:6a:03:55:41:be:d9:59:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=3c1f428d-3caf-45b6-bc2f-e4c36d734441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:54:a2:29:cd:59:63:7c:3b:40:90:70:74: 2e:1d:ed:de:cd:cf:6d:7c:29:4e:6f:3c:53:81:4f: f2:84:df:41:85:c1:8d:93:9d:ee:f0:28:b4:fa:d7: 21:f8:cb:69:ee:97:75:a4:64:52:75:48:99:ca:8c: 09:f2:1f:a0:be:d0:47:d5:bb:59:56:57:a8:60:81: be:49:9a:ee:7e:bc:d6:9e:83:36:3e:b1:47:65:cd: 6c:b7:26:fe:2d:69:bf:18:70:5b:82:1e:f9:00:b7: 37:a3:36:b1:c4:e4:54:c3:1e:1a:4e:2d:41:2a:cf: 3f:e7:c4:13:3e:5b:6a:8f:9a:11:b8:2e:79:33:ea: 7b:8a:31:f3:71:44:cf:17:de:ac:29:3f:54:a6:85: b9:1d:ad:81:48:55:cd:72:c3:0a:3f:e6:b5:72:c2: ab:3f:07:e5:d6:43:90:9f:93:b3:48:2d:18:bc:cb: 71:a2:06:03:71:ad:da:b4:a9:a8:a2:f2:f7:66:32: b7:04:a9:8b:58:e6:36:75:93:d3:78:fe:d8:40:a3: e1:81:97:89:e8:28:e3:54:4d:de:53:e0:75:a6:df: 0b:b5:4f:94:22:49:26:14:b2:a0:5d:2f:5d:cd:f0: fe:8f:a4:48:9a:22:f3:47:82:5a:f9:66:93:e8:e6: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:89:1C:B2:20:D5:A0:D9:68:A7:3E:6C:FB:F3:0A:40:43:9B:99:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b981d05-5ece-31de-bf32-c532d235161d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:b9:6f:b6:97:de:7a:86:54:78:da:9e:d6:93:5a:cd:4a:83: 24:35:df:79:a5:e8:f9:2d:78:b8:f7:79:42:7d:6f:41:2a:77: 70:30:c9:33:2b:5b:12:1e:b4:db:3d:79:94:cf:bd:ad:b5:25: a3:f8:37:15:39:9d:52:db:8b:97:a5:74:49:48:41:ca:6f:8a: db:b5:b6:24:00:63:28:ee:bb:e4:8a:d7:36:0d:3d:78:01:62: 8e:73:30:0f:d3:9b:8c:59:99:13:e0:18:a3:6f:93:08:b0:4f: 1d:c5:bf:23:e7:4d:fb:89:cb:75:87:ef:6d:f4:76:03:93:0b: 1d:dc:28:b0:79:2a:ea:a0:d8:c9:a0:0e:60:01:16:92:65:82: fa:aa:95:98:d1:3d:19:da:70:e3:7f:43:0c:82:f3:98:6f:fa: d6:29:86:e4:50:eb:19:69:22:42:d1:e5:d6:da:6f:be:46:12: 70:da:05:53:99:40:ff:08:7a:db:91:ec:9b:e9:2d:94:f6:92: 07:71:63:40:a4:09:56:b9:32:7d:46:eb:25:f1:93:87:81:2f: 54:a3:27:9a:b0:58:a9:f8:e3:4b:e8:08:52:77:69:1b:a0:12: 9a:b1:c4:da:a5:ac:83:1a:a2:f3:45:bc:95:89:97:18:23:c5: b5:44:e5:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZVqA1VBvtlZZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk M2MxZjQyOGQtM2NhZi00NWI2LWJjMmYtZTRjMzZkNzM0NDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t1UoinNWWN8O0CQcHQuHe3ezc9tfClObzxT gU/yhN9BhcGNk53u8Ci0+tch+Mtp7pd1pGRSdUiZyowJ8h+gvtBH1btZVleoYIG+ SZrufrzWnoM2PrFHZc1styb+LWm/GHBbgh75ALc3ozaxxORUwx4aTi1BKs8/58QT Pltqj5oRuC55M+p7ijHzcUTPF96sKT9UpoW5Ha2BSFXNcsMKP+a1csKrPwfl1kOQ n5OzSC0YvMtxogYDca3atKmoovL3ZjK3BKmLWOY2dZPTeP7YQKPhgZeJ6CjjVE3e U+B1pt8LtU+UIkkmFLKgXS9dzfD+j6RImiLzR4Ja+WaT6Ob7ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL2JHLIg1aDZaKc+bPvzCkBDm5loMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2I5ODFkMDUtNWVjZS0z MWRlLWJmMzItYzUzMmQyMzUxNjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL65b7aX3nqGVHjantaTWs1KgyQ133ml6PkteLj3eUJ9b0Eqd3Aw yTMrWxIetNs9eZTPva21JaP4NxU5nVLbi5eldElIQcpvitu1tiQAYyjuu+SK1zYN PXgBYo5zMA/Tm4xZmRPgGKNvkwiwTx3FvyPnTfuJy3WH7230dgOTCx3cKLB5Kuqg 2MmgDmABFpJlgvqqlZjRPRnacON/QwyC85hv+tYphuRQ6xlpIkLR5dbab75GEnDa BVOZQP8IetuR7JvpLZT2kgdxY0CkCVa5Mn1G6yXxk4eBL1SjJ5qwWKn440voCFJ3 aRugEpqxxNqlrIMaovNFvJWJlxgjxbVE5f8= -----END CERTIFICATE-----Generated at Wed Sep 10 20:49:04 2025 by rpki-client