$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbe17ab-919b-3f6d-b984-4480a6a569ef.roa File: 5fbe17ab-919b-3f6d-b984-4480a6a569ef.roa (raw, json) Hash identifier: TNnn84UZFTQvSoZIYH2zTTPQ4NIDZWAIblLyvXoetgA= Subject key identifier: 97:A8:17:2F:73:A8:2A:33:CE:B7:91:8D:DB:66:3A:6C:39:D5:BE:CD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1806FDD5ED65F88EE3BE5900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbe17ab-919b-3f6d-b984-4480a6a569ef.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 396553 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:fd:d5:ed:65:f8:8e:e3:be:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=1de195a4-39d2-4f6c-a03b-7e302c666654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3a:85:2a:02:6f:eb:5b:65:89:7b:0a:00:a5: 52:e3:38:2c:a0:e2:7a:0e:34:33:45:4c:6d:72:c9: 1b:da:4a:20:62:f6:b9:3b:f1:c9:22:ae:36:f9:b9: b8:22:9e:a8:69:1a:87:64:61:7b:c1:77:25:8d:9a: 04:63:f9:82:18:7e:ba:85:92:50:65:12:ba:3b:aa: f2:2f:6c:f8:d3:5b:d4:cc:b5:ee:68:1a:42:5a:2f: 8e:64:ab:54:c8:b0:2f:20:99:e3:9d:6c:04:47:e8: d7:8e:f7:d1:93:ce:a0:e9:df:e1:ec:7b:88:bd:9a: 2b:f8:5a:d1:f9:4d:57:6a:58:fb:7c:8e:a9:e9:bd: 9d:12:0c:eb:38:95:f5:c5:e8:1c:44:32:37:f3:84: 70:13:c3:83:6e:e0:6d:4b:1a:b6:59:2a:66:b8:76: 66:ea:3b:05:76:1b:67:91:02:4c:17:8e:3f:53:57: 65:d2:cc:96:0c:f4:13:eb:e2:5c:38:d6:b8:68:79: 69:d1:e1:f1:56:24:77:dd:30:eb:ff:e0:94:92:88: 1f:77:e8:89:9b:30:94:27:70:0c:0c:cf:b1:23:65: 5e:95:70:a9:82:97:67:34:26:6f:f0:8d:4e:2d:3c: 46:84:5d:b5:74:11:30:cf:6f:5e:f9:a9:67:0e:ca: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A8:17:2F:73:A8:2A:33:CE:B7:91:8D:DB:66:3A:6C:39:D5:BE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5fbe17ab-919b-3f6d-b984-4480a6a569ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ce:ab:b7:ed:4d:9d:06:d3:1d:09:c4:31:7e:5c:d2:bb:80: d1:f4:43:4e:77:4a:ed:2c:4f:7b:fd:9a:ec:a1:80:5e:30:c0: ae:53:c9:27:43:63:a4:e0:55:25:e5:93:8f:a8:02:12:93:f3: 0e:72:22:5b:b8:31:c3:70:c3:5e:ef:4e:47:8a:c7:f7:2a:13: 7c:e7:41:91:4b:58:32:80:3b:ab:77:a9:8a:00:a5:0a:d8:2f: 0c:db:c5:57:51:db:0c:d4:aa:e7:1f:a2:67:a8:39:88:e3:b6: 91:6b:10:d0:b1:9e:bb:f7:bf:3c:1f:8b:25:59:30:5c:8f:d7: 77:1e:55:db:f9:30:2f:4f:7b:65:ab:0e:d4:a9:96:a3:b6:d4: 2d:e8:3e:6d:e9:e7:84:89:e2:30:d0:53:3d:6d:e4:e6:4d:ce: 9b:c2:39:8b:50:65:d6:ac:90:3a:9a:da:06:64:a1:53:a8:20: aa:dd:fc:61:ad:e7:69:57:d4:5d:5f:60:d9:7e:6d:b2:f0:80: fc:58:0f:21:80:a3:fc:ba:4c:c0:3a:40:5e:df:9d:75:92:2a: 59:f3:e9:54:18:22:44:0c:44:ec:c9:86:0a:ed:f1:d9:89:33: 5c:b5:7f:8c:d4:54:97:38:a4:20:01:16:ad:29:11:ae:07:f2: a3:46:a7:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBv3V7WX4juO+WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MWRlMTk1YTQtMzlkMi00ZjZjLWEwM2ItN2UzMDJjNjY2NjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzqFKgJv61tliXsKAKVS4zgsoOJ6DjQzRUxt cskb2kogYva5O/HJIq42+bm4Ip6oaRqHZGF7wXcljZoEY/mCGH66hZJQZRK6O6ry L2z401vUzLXuaBpCWi+OZKtUyLAvIJnjnWwER+jXjvfRk86g6d/h7HuIvZor+FrR +U1Xalj7fI6p6b2dEgzrOJX1xegcRDI384RwE8ODbuBtSxq2WSpmuHZm6jsFdhtn kQJMF44/U1dl0syWDPQT6+JcONa4aHlp0eHxViR33TDr/+CUkogfd+iJmzCUJ3AM DM+xI2VelXCpgpdnNCZv8I1OLTxGhF21dBEwz29e+alnDsoJgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJeoFy9zqCozzreRjdtmOmw51b7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWZiZTE3YWItOTE5Yi0z ZjZkLWI5ODQtNDQ4MGE2YTU2OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFnOq7ftTZ0G0x0JxDF+XNK7gNH0Q053Su0sT3v9muyhgF4wwK5T ySdDY6TgVSXlk4+oAhKT8w5yIlu4McNww17vTkeKx/cqE3znQZFLWDKAO6t3qYoA pQrYLwzbxVdR2wzUqucfomeoOYjjtpFrENCxnrv3vzwfiyVZMFyP13ceVdv5MC9P e2WrDtSplqO21C3oPm3p54SJ4jDQUz1t5OZNzpvCOYtQZdaskDqa2gZkoVOoIKrd /GGt52lX1F1fYNl+bbLwgPxYDyGAo/y6TMA6QF7fnXWSKlnz6VQYIkQMROzJhgrt 8dmJM1y1f4zUVJc4pCABFq0pEa4H8qNGp0I= -----END CERTIFICATE-----Generated at Wed Sep 10 18:00:39 2025 by rpki-client