$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f34c224-21c3-31c2-9bc9-43aee845aecd.roa File: 3f34c224-21c3-31c2-9bc9-43aee845aecd.roa (raw, json) Hash identifier: BccHCspN/o2HsAt+2s2mCzxh4BYtJIIz1gGeqtQFxvE= Subject key identifier: FC:84:E3:3C:4D:C2:EA:DD:2D:CE:E5:71:02:33:C6:AD:00:4E:4A:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A1199C7451E273F083F0540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f34c224-21c3-31c2-9bc9-43aee845aecd.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396549 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:99:c7:45:1e:27:3f:08:3f:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=5e2d0898-63a3-4db7-ad55-cc4191f6f0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:72:10:4f:25:6c:5c:d2:51:9a:86:96:20: 0d:61:fd:90:1b:fb:16:f5:56:f8:1d:08:8f:14:cd: 62:6b:f9:c3:3c:0a:dd:12:70:25:af:10:e2:17:a9: b1:4c:07:d1:f7:0d:ee:ba:70:60:b8:a8:62:46:33: cd:6d:8e:ae:93:a8:9b:c8:b2:af:d0:91:39:00:8c: b8:82:db:95:2f:ee:00:47:4c:6f:2b:18:22:ca:2a: fc:d4:24:82:ba:a6:39:9f:2b:81:59:4e:ff:22:20: 47:e5:b6:a0:b4:24:26:72:1f:1a:4c:f0:58:43:5d: 47:05:be:30:ed:70:4f:e0:fe:9f:2d:d5:70:45:eb: b8:8c:92:ff:6b:0e:76:92:bb:8d:da:00:13:90:cd: 30:69:75:80:35:ea:93:c4:1e:c8:c7:b4:17:e8:c9: b7:78:60:6d:0c:ec:c4:0e:ad:40:0b:79:30:a5:17: d5:50:8a:35:89:a5:63:93:85:9f:16:0c:83:52:54: a3:71:32:bb:e5:6e:97:72:cd:fb:d1:92:cf:d8:41: 1b:ea:25:7c:07:9c:8d:69:cc:be:29:62:31:f8:30: eb:29:23:38:ae:5a:04:2e:00:cf:ba:a8:5c:5a:87: c9:04:bb:7b:af:e8:3e:d8:0e:d3:de:47:f2:40:d8: c0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:84:E3:3C:4D:C2:EA:DD:2D:CE:E5:71:02:33:C6:AD:00:4E:4A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f34c224-21c3-31c2-9bc9-43aee845aecd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b1:e0:05:df:06:12:5c:45:f1:14:6d:ba:b7:97:81:14:e6: 74:49:47:48:f6:4f:c9:9c:7e:03:c9:b7:66:57:2a:f1:4e:6f: 5b:16:b8:35:c5:4d:d3:64:38:64:7c:2f:99:79:77:5e:b7:75: fd:10:e4:cd:01:30:71:20:59:9a:13:c0:c3:1b:d1:4c:f2:58: a0:16:44:49:6f:b1:51:4e:7b:89:cd:fd:75:c2:50:28:09:f3: e7:bd:6a:9b:60:36:47:7d:fa:c9:74:58:61:bb:45:ae:62:26: e1:1d:02:05:cc:9d:e3:a7:54:ae:0c:1e:b6:f4:b4:a5:ba:40: 49:d0:71:9d:72:15:e0:45:0b:4a:0e:09:eb:87:90:e4:73:f3: 3b:59:05:91:e1:a7:88:91:e7:ef:17:45:fa:29:1d:26:e1:16: 7f:99:8d:13:7a:24:0a:e5:60:c5:2a:c1:c6:24:c2:79:86:c3: 1b:b4:96:97:3f:9f:57:be:c8:eb:cb:14:70:b7:39:45:c9:cb: 39:92:a1:69:6e:42:46:bc:ab:a0:19:b1:43:f4:7a:7e:1a:90: 07:df:97:74:84:45:5b:b1:bf:64:61:f0:6a:5b:77:17:bf:70: 2d:28:cd:3a:2c:91:b2:a8:6e:08:23:21:58:a1:c9:07:90:92: 7c:bb:52:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZnHRR4nPwg/BUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NWUyZDA4OTgtNjNhMy00ZGI3LWFkNTUtY2M0MTkxZjZmMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJVyEE8lbFzSUZqGliANYf2QG/sW9Vb4HQiP FM1ia/nDPArdEnAlrxDiF6mxTAfR9w3uunBguKhiRjPNbY6uk6ibyLKv0JE5AIy4 gtuVL+4AR0xvKxgiyir81CSCuqY5nyuBWU7/IiBH5bagtCQmch8aTPBYQ11HBb4w 7XBP4P6fLdVwReu4jJL/aw52kruN2gATkM0waXWANeqTxB7Ix7QX6Mm3eGBtDOzE Dq1AC3kwpRfVUIo1iaVjk4WfFgyDUlSjcTK75W6Xcs370ZLP2EEb6iV8B5yNacy+ KWIx+DDrKSM4rloELgDPuqhcWofJBLt7r+g+2A7T3kfyQNjA5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPyE4zxNwurdLc7lcQIzxq0ATkr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YzNGMyMjQtMjFjMy0z MWMyLTliYzktNDNhZWU4NDVhZWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHix4AXfBhJcRfEUbbq3l4EU5nRJR0j2T8mcfgPJt2ZXKvFOb1sW uDXFTdNkOGR8L5l5d163df0Q5M0BMHEgWZoTwMMb0UzyWKAWRElvsVFOe4nN/XXC UCgJ8+e9aptgNkd9+sl0WGG7Ra5iJuEdAgXMneOnVK4MHrb0tKW6QEnQcZ1yFeBF C0oOCeuHkORz8ztZBZHhp4iR5+8XRfopHSbhFn+ZjRN6JArlYMUqwcYkwnmGwxu0 lpc/n1e+yOvLFHC3OUXJyzmSoWluQka8q6AZsUP0en4akAffl3SERVuxv2Rh8Gpb dxe/cC0ozToskbKobggjIVihyQeQkny7UrU= -----END CERTIFICATE-----Generated at Wed Oct 29 07:22:49 2025 by rpki-client