$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/486f5335-611e-3676-8539-5fc0618035b3.roa File: 486f5335-611e-3676-8539-5fc0618035b3.roa (raw, json) Hash identifier: tFABDI6BRCCoZCI92V31DVePuNgckeBU0TSpDV/1hfc= Subject key identifier: 24:AD:C9:51:AD:9F:7B:C5:D0:DF:8C:0C:73:7A:61:7A:55:9A:02:8C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1B7419C1BA70CBFD3D320 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/486f5335-611e-3676-8539-5fc0618035b3.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 396586 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b7:41:9c:1b:a7:0c:bf:d3:d3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=3dd41db4-8a53-49b7-9675-acdb9e2e7a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ad:3a:cf:0c:bc:1d:6e:ad:8d:2c:fc:77:90: 6c:15:f0:9c:2d:f1:eb:41:96:e3:7d:53:3c:b7:31: d8:f0:4e:5c:87:56:40:bc:a9:c9:8a:c7:e5:bd:7f: c6:cf:71:f4:ad:af:8c:e2:e0:6b:4f:83:ec:ea:f1: 7d:75:2d:7f:6c:2b:70:30:1d:45:a2:13:6e:6d:40: 5c:1c:1f:55:d0:81:c0:79:51:0c:f0:eb:dc:b4:fc: f3:34:e5:b9:57:f7:fc:20:69:aa:ea:b4:09:67:22: 37:06:be:2f:e1:d6:9c:8a:77:5e:5f:12:45:c3:b3: fb:e7:87:ad:bc:9a:1b:dd:c0:9a:08:89:e2:34:5b: be:5d:13:f8:13:89:d7:dd:bf:c7:37:a7:0a:c4:93: 82:e3:49:ce:45:a9:2a:76:3b:9b:eb:7b:06:e9:79: b6:bc:50:95:37:34:f5:14:18:e0:76:1c:1e:a6:36: 4b:9e:b6:a5:74:a4:32:8d:27:94:29:a1:06:b7:2f: e0:3d:6a:d6:06:9e:6a:87:6b:9e:43:27:56:65:f8: 49:c9:6f:16:02:ae:1d:7c:6a:56:a0:61:0f:14:bb: 56:d8:0d:0f:9e:9c:3b:a7:fc:e0:f7:ec:bd:9a:29: c7:e0:b5:42:f8:e3:5f:19:23:c1:2c:8a:cf:ce:67: 97:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AD:C9:51:AD:9F:7B:C5:D0:DF:8C:0C:73:7A:61:7A:55:9A:02:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/486f5335-611e-3676-8539-5fc0618035b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:5f:d4:66:38:61:33:99:67:f2:b7:74:97:c0:d9:96:6c:84: 50:56:76:c9:fe:4c:31:5f:bc:6c:b4:f7:3b:22:25:d0:d6:96: 07:56:7e:66:2d:38:b3:83:62:f6:63:15:34:1a:4e:7b:7e:d9: 70:d5:44:db:dd:46:01:0e:64:48:9e:34:6d:c8:ab:a3:42:35: df:9c:e9:08:d6:33:23:d4:29:cf:94:45:91:76:88:d3:ec:49: d0:e0:38:17:7e:3e:88:6a:f3:e1:86:31:d3:cf:73:42:15:9f: ea:a2:c0:b9:dd:b9:c6:e8:a7:30:00:ca:58:84:64:9f:94:01: bd:6e:6d:5d:a8:c9:f5:e9:9c:05:63:80:61:95:9f:0d:d7:0d: 1e:64:26:28:6e:1c:d1:7f:55:f6:7f:c3:0a:c5:d7:05:eb:18: 1c:4b:aa:12:f9:5e:f0:07:45:cc:88:9d:16:cc:44:71:4a:fe: ff:0b:82:08:ee:fc:1e:de:99:d2:4d:2c:ea:52:67:bd:a4:d2: f0:36:5c:96:c7:65:1d:0d:24:70:a3:43:cf:9c:4a:10:e7:5c: 78:75:84:a5:57:7d:9d:d5:8d:00:e4:d3:c7:bb:98:c3:d6:36: ad:6f:ea:aa:df:3c:bf:27:7d:95:c2:44:4b:12:96:aa:50:3b: 16:d6:3d:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bdBnBunDL/T0yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk M2RkNDFkYjQtOGE1My00OWI3LTk2NzUtYWNkYjllMmU3YTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK06zwy8HW6tjSz8d5BsFfCcLfHrQZbjfVM8 tzHY8E5ch1ZAvKnJisflvX/Gz3H0ra+M4uBrT4Ps6vF9dS1/bCtwMB1FohNubUBc HB9V0IHAeVEM8OvctPzzNOW5V/f8IGmq6rQJZyI3Br4v4dacindeXxJFw7P754et vJob3cCaCIniNFu+XRP4E4nX3b/HN6cKxJOC40nORakqdjub63sG6Xm2vFCVNzT1 FBjgdhwepjZLnraldKQyjSeUKaEGty/gPWrWBp5qh2ueQydWZfhJyW8WAq4dfGpW oGEPFLtW2A0Pnpw7p/zg9+y9minH4LVC+ONfGSPBLIrPzmeXVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCStyVGtn3vF0N+MDHN6YXpVmgKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDg2ZjUzMzUtNjExZS0z Njc2LTg1MzktNWZjMDYxODAzNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABZf1GY4YTOZZ/K3dJfA2ZZshFBWdsn+TDFfvGy09zsiJdDWlgdW fmYtOLODYvZjFTQaTnt+2XDVRNvdRgEOZEieNG3Iq6NCNd+c6QjWMyPUKc+URZF2 iNPsSdDgOBd+Pohq8+GGMdPPc0IVn+qiwLnducbopzAAyliEZJ+UAb1ubV2oyfXp nAVjgGGVnw3XDR5kJihuHNF/VfZ/wwrF1wXrGBxLqhL5XvAHRcyInRbMRHFK/v8L ggju/B7emdJNLOpSZ72k0vA2XJbHZR0NJHCjQ8+cShDnXHh1hKVXfZ3VjQDk08e7 mMPWNq1v6qrfPL8nfZXCREsSlqpQOxbWPTg= -----END CERTIFICATE-----Generated at Wed Sep 10 17:58:11 2025 by rpki-client