$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa File: 645b07f9-416b-3a45-abac-a1788c7a9e98.roa (raw, json) Hash identifier: YvCbVy06ryCukCut31QyyOjd3rHAqGvbmbD+J/2P/Is= Subject key identifier: BB:38:18:48:D2:B2:D6:A7:C8:CE:9D:51:E2:F3:73:AA:67:51:82:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A11992CCED8D2683188BF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 36617 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:99:2c:ce:d8:d2:68:31:88:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=a8e9719d-541b-4c3f-a404-c57de80aaffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:08:7e:3d:bd:93:20:a2:15:da:76:74:7b: ff:c9:bc:57:c6:20:4f:42:86:3e:0e:a5:15:cc:30: ce:28:13:9d:b4:93:a4:d8:4f:d8:38:5d:1e:8f:a7: 78:27:75:d5:39:c9:39:bf:c2:4e:af:f2:8a:4c:68: 28:b6:65:03:67:25:1e:93:b1:a3:da:43:ac:f9:ea: e7:1c:26:80:e8:cd:bd:ed:b9:96:63:c7:61:4d:c7: 36:e8:e6:e1:58:42:d6:f9:51:96:cc:62:a2:9b:10: 22:27:24:18:4a:53:fc:c6:3a:82:42:bc:f6:b5:98: 3e:e1:d9:34:1d:f8:6e:5e:72:13:dd:a0:cd:f8:d4: 92:dd:1c:6d:69:3d:47:92:5d:a7:93:c8:b8:3f:63: da:de:3a:65:7c:b8:3a:0f:42:61:cc:ec:e1:b5:89: 90:50:bd:c9:ab:4d:d0:5b:67:de:8b:c0:1e:a6:ec: 01:ed:1b:6c:a0:70:58:ea:0e:2a:34:01:3b:5c:67: d2:f2:aa:72:ce:45:8e:93:6e:3a:84:ca:ee:b3:45: 74:b4:e9:2d:dc:bc:b8:11:aa:8d:7f:f3:92:80:81: 03:96:95:0e:7e:4c:69:58:25:6d:db:91:a2:ac:08: 0d:48:c3:96:c9:18:f1:a8:3b:52:38:70:82:f5:2d: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:38:18:48:D2:B2:D6:A7:C8:CE:9D:51:E2:F3:73:AA:67:51:82:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/645b07f9-416b-3a45-abac-a1788c7a9e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:4e:04:8b:5d:7e:7c:eb:f7:27:1d:c2:81:a5:76:a4:c7:44: 9b:ce:f1:10:09:76:f8:55:f8:ef:32:e7:6e:cb:01:ba:65:9d: e8:8a:29:b4:ae:75:78:d5:44:69:01:6f:98:0d:f6:67:a1:cc: e1:6d:f8:29:a3:84:cb:32:2b:ec:20:39:53:61:57:83:e1:e2: 11:5a:6c:03:a0:e1:2e:0f:1c:0a:4e:c1:73:93:29:12:a1:a0: d6:ce:b7:bf:9f:cf:2e:91:99:6c:05:c3:cf:74:34:2e:22:a8: 0a:97:9e:c3:a0:ed:44:7c:e7:38:b9:25:80:5d:53:8c:34:d9: 23:91:27:11:db:85:ef:43:b9:8a:18:9b:56:a3:77:09:b9:5d: 26:4d:18:14:2d:af:c1:b6:8b:62:92:c8:41:a7:1e:fa:2a:25: d4:45:f2:54:33:44:7e:02:38:35:53:ca:7e:d2:17:44:7d:c1: 28:4c:3a:f2:2c:54:05:d4:97:c7:1a:bf:8b:ab:81:a4:c9:48: ee:55:f6:53:fb:90:84:33:0a:3e:4d:0f:ca:00:0b:f3:7b:04: 8b:2e:83:db:f6:87:7d:85:3e:42:f5:4a:16:e2:13:c1:57:8d: 7f:1b:7a:d8:ac:0a:3e:41:6a:81:24:b4:67:0e:53:05:15:8e: b9:ba:b0:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZksztjSaDGIv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YThlOTcxOWQtNTQxYi00YzNmLWE0MDQtYzU3ZGU4MGFhZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtUIfj29kyCiFdp2dHv/ybxXxiBPQoY+DqUV zDDOKBOdtJOk2E/YOF0ej6d4J3XVOck5v8JOr/KKTGgotmUDZyUek7Gj2kOs+ern HCaA6M297bmWY8dhTcc26ObhWELW+VGWzGKimxAiJyQYSlP8xjqCQrz2tZg+4dk0 HfhuXnIT3aDN+NSS3RxtaT1Hkl2nk8i4P2Pa3jplfLg6D0JhzOzhtYmQUL3Jq03Q W2fei8AepuwB7RtsoHBY6g4qNAE7XGfS8qpyzkWOk246hMrus0V0tOkt3Ly4EaqN f/OSgIEDlpUOfkxpWCVt25GirAgNSMOWyRjxqDtSOHCC9S3IdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLs4GEjSstanyM6dUeLzc6pnUYLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ1YjA3ZjktNDE2Yi0z YTQ1LWFiYWMtYTE3ODhjN2E5ZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK5OBItdfnzr9ycdwoGldqTHRJvO8RAJdvhV+O8y527LAbplneiK KbSudXjVRGkBb5gN9mehzOFt+CmjhMsyK+wgOVNhV4Ph4hFabAOg4S4PHApOwXOT KRKhoNbOt7+fzy6RmWwFw890NC4iqAqXnsOg7UR85zi5JYBdU4w02SORJxHbhe9D uYoYm1ajdwm5XSZNGBQtr8G2i2KSyEGnHvoqJdRF8lQzRH4CODVTyn7SF0R9wShM OvIsVAXUl8cav4urgaTJSO5V9lP7kIQzCj5ND8oAC/N7BIsug9v2h32FPkL1Shbi E8FXjX8betisCj5BaoEktGcOUwUVjrm6sEs= -----END CERTIFICATE-----Generated at Wed Sep 10 18:00:53 2025 by rpki-client