$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/795d12b5-79d4-3fd0-ae54-c13de3c48860.roa File: 795d12b5-79d4-3fd0-ae54-c13de3c48860.roa (raw, json) Hash identifier: E8FFF2nMF0wNPwc7anr7hAmp/1fZSD4Bbkx3AomxWwo= Subject key identifier: E3:91:4B:99:07:7E:70:20:13:AF:5F:54:C0:A6:B9:9E:5D:02:77:3A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B180701030B38CFBD77B2C220 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/795d12b5-79d4-3fd0-ae54-c13de3c48860.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 396580 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:07:01:03:0b:38:cf:bd:77:b2:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=ad1401b3-a07c-4989-9f00-95e7dbc48b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e6:8f:6d:93:df:78:b2:bc:fa:05:8e:50:dd: 76:ba:03:08:e3:52:86:b6:18:d5:5a:77:ca:d2:13: e0:85:81:8c:82:69:6c:5e:43:e1:fa:ef:46:c3:f2: d3:35:e7:56:ae:ff:42:90:3a:2d:0d:ca:56:e3:23: 37:63:5b:77:68:c6:f9:39:f0:9c:02:de:d3:6a:3d: 8d:0a:00:f7:1e:7f:b1:19:55:99:16:b6:60:3e:2e: cf:7e:e0:1d:ee:e2:82:97:99:70:dd:60:71:d3:ee: 4a:52:12:2e:78:d3:06:46:44:88:6b:c3:23:a2:e4: 43:81:48:65:45:b9:e7:4f:79:43:be:8f:9a:d7:2c: 31:1d:2f:91:66:1e:4c:04:45:99:a5:fb:c3:dd:90: e9:c9:e4:78:c5:3a:ae:2b:f6:57:6f:79:92:83:ee: 5a:e1:ca:5d:ec:96:0e:4e:55:11:72:6d:0d:9f:c4: ed:7f:5c:ef:f2:5b:ad:31:d8:06:ff:af:e6:a0:bb: 5b:9f:54:de:a9:4a:6c:b9:e9:9b:bb:c4:81:2d:05: 9d:74:f5:ce:ba:db:db:e4:a8:61:d1:f3:68:34:e2: 45:46:01:b2:76:72:ac:6e:e5:4c:81:9c:f0:b0:fb: 95:3d:ab:5f:e8:36:ed:2c:da:e3:11:47:80:c0:10: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:91:4B:99:07:7E:70:20:13:AF:5F:54:C0:A6:B9:9E:5D:02:77:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/795d12b5-79d4-3fd0-ae54-c13de3c48860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7b:91:6b:a4:ef:dd:96:b7:f2:43:eb:15:cd:14:a8:f9:32: 97:29:ec:2b:3a:7c:eb:9f:22:d2:32:71:e4:ab:11:13:53:bb: 12:55:5c:1a:a1:6e:68:66:7e:08:e7:13:68:a7:2f:ce:21:87: cc:40:84:c5:2b:4c:71:89:8d:d4:1d:50:80:8a:b1:8f:2f:da: 1e:8a:a3:0a:74:71:e2:86:49:6a:30:8d:c6:9d:07:c6:ca:48: d1:a8:4a:7f:b1:77:31:74:23:e9:5c:de:62:68:96:3e:63:82: b5:80:a1:2e:23:62:67:38:3f:57:43:17:5f:18:a1:5d:be:7d: 48:db:ab:eb:b9:19:cc:8a:a3:fd:55:49:1e:76:00:e3:09:94: a0:cb:91:83:40:e2:8b:32:15:5d:2b:6b:3c:ee:fc:db:32:9e: 36:73:bc:d0:e1:ac:9b:86:2f:08:8b:aa:43:04:d3:96:59:46: 83:3b:b0:0e:d2:92:57:a1:2f:6f:14:c4:74:17:af:61:46:00: 15:c0:81:e7:f0:51:3a:96:29:86:1a:0c:5d:e7:96:c9:38:ea: 9b:c8:b7:0a:ea:c0:0d:1f:26:81:16:b6:e4:53:ca:0c:9c:3c: e3:71:bb:33:49:98:4d:6e:42:49:d3:c5:8e:76:73:94:94:bd: e5:79:ef:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBwEDCzjPvXeywiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YWQxNDAxYjMtYTA3Yy00OTg5LTlmMDAtOTVlN2RiYzQ4YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+aPbZPfeLK8+gWOUN12ugMI41KGthjVWnfK 0hPghYGMgmlsXkPh+u9Gw/LTNedWrv9CkDotDcpW4yM3Y1t3aMb5OfCcAt7Taj2N CgD3Hn+xGVWZFrZgPi7PfuAd7uKCl5lw3WBx0+5KUhIueNMGRkSIa8MjouRDgUhl RbnnT3lDvo+a1ywxHS+RZh5MBEWZpfvD3ZDpyeR4xTquK/ZXb3mSg+5a4cpd7JYO TlURcm0Nn8Ttf1zv8lutMdgG/6/moLtbn1TeqUpsuembu8SBLQWddPXOutvb5Khh 0fNoNOJFRgGydnKsbuVMgZzwsPuVPatf6DbtLNrjEUeAwBD1SQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOORS5kHfnAgE69fVMCmuZ5dAnc6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzk1ZDEyYjUtNzlkNC0z ZmQwLWFlNTQtYzEzZGUzYzQ4ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGR7kWuk792Wt/JD6xXNFKj5Mpcp7Cs6fOufItIyceSrERNTuxJV XBqhbmhmfgjnE2inL84hh8xAhMUrTHGJjdQdUICKsY8v2h6Kowp0ceKGSWowjcad B8bKSNGoSn+xdzF0I+lc3mJolj5jgrWAoS4jYmc4P1dDF18YoV2+fUjbq+u5GcyK o/1VSR52AOMJlKDLkYNA4osyFV0razzu/NsynjZzvNDhrJuGLwiLqkME05ZZRoM7 sA7SklehL28UxHQXr2FGABXAgefwUTqWKYYaDF3nlsk46pvItwrqwA0fJoEWtuRT ygycPONxuzNJmE1uQknTxY52c5SUveV57/E= -----END CERTIFICATE-----Generated at Wed Sep 10 20:43:07 2025 by rpki-client