$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ca431c-4322-3f56-b170-240d85f3184f.roa File: 81ca431c-4322-3f56-b170-240d85f3184f.roa (raw, json) Hash identifier: Y2cXV/ySjv0qkUCrFf9WN02Ra7KQxWhQv9CvsLGeitM= Subject key identifier: 6D:D1:FB:44:B6:E5:A5:58:7D:B0:81:AB:CF:E8:CE:AC:15:F2:85:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B180703553728834FF24E3700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ca431c-4322-3f56-b170-240d85f3184f.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 396591 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:07:03:55:37:28:83:4f:f2:4e:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=a1b5c36f-08b3-4fec-81ed-d97a00a7d37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:31:73:9e:79:f4:f8:ea:de:c0:66:6f:23: e9:e3:f9:d5:21:8e:83:ac:a0:66:fa:96:27:67:de: 83:79:cf:86:2f:17:fd:51:c2:81:0a:fe:d0:1e:b9: f5:35:84:50:75:73:d1:dd:79:1a:a6:7c:09:f1:b4: df:18:af:39:99:bf:7d:84:c4:0c:d3:6e:c1:57:ca: aa:55:aa:3f:67:24:3d:82:ef:59:0d:2b:9a:e1:b0: 88:1f:76:da:22:13:db:c7:a5:d4:77:91:8d:0f:f5: dc:a1:40:1a:95:b1:3d:23:f4:89:8d:22:d0:e1:4a: ba:11:7d:31:ca:bb:16:c7:3c:8c:51:cd:9b:33:e4: 6c:1d:06:29:80:d3:ad:31:9d:b5:6b:b2:05:5d:e9: 01:ef:69:2a:64:05:17:1a:fe:97:33:14:27:07:90: ff:03:08:39:43:e0:40:e0:55:fd:59:0c:0a:cd:7f: a9:71:cb:50:90:e5:7c:9d:76:36:1b:44:fd:97:42: db:0b:49:77:38:92:6b:11:1d:5d:ae:54:67:4c:3a: e2:d9:fa:45:77:a8:e1:a3:ec:eb:7c:ac:db:e1:c8: 72:f5:03:3e:aa:9f:64:3e:66:27:88:2d:c0:1b:81: 0b:9f:b3:53:4b:2f:e1:55:24:d2:18:22:df:41:56: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D1:FB:44:B6:E5:A5:58:7D:B0:81:AB:CF:E8:CE:AC:15:F2:85:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ca431c-4322-3f56-b170-240d85f3184f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0f:7e:62:77:14:9a:64:37:1a:1e:d5:cc:db:81:99:c5:b2: 36:20:ef:1c:c5:0d:c1:aa:4d:1e:97:7e:4c:c0:61:ff:bf:ed: 1e:b6:b9:e9:3d:5c:77:bd:2d:47:9d:ad:fc:e9:ed:25:7e:9e: cb:a6:7a:59:a0:85:de:b1:6b:d9:93:39:06:7f:ca:81:b9:4e: e8:9f:6a:4e:3f:62:d7:29:03:0c:c8:93:b8:c9:44:0a:f4:68: b3:11:52:2d:8f:bb:b6:21:27:b6:5d:67:ea:63:97:94:a9:b4: 32:83:50:9f:6b:7e:ee:76:eb:d5:bf:a8:f0:3f:63:1f:99:ab: 3b:92:d8:00:70:51:65:90:a4:02:54:a8:a7:00:ff:71:c3:88: f4:ce:e5:88:c8:61:45:a3:f6:8f:a8:b8:b6:8f:1d:2e:e7:5f: 63:f0:ec:0f:64:1a:83:88:f2:36:17:42:1b:40:c9:56:70:c5: a3:83:1b:a6:15:73:a4:df:16:b5:6c:05:9a:78:eb:6c:0f:10: 8f:13:26:e1:8a:5e:0d:84:d8:70:49:e2:65:aa:6d:aa:e0:c0: 77:45:25:40:f5:78:2b:80:66:03:d8:49:c5:10:4a:1c:5f:c4: e3:fe:42:ed:70:2e:c1:d2:53:38:12:65:bf:e6:cf:bb:04:c0: 51:e3:53:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBwNVNyiDT/JONwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YTFiNWMzNmYtMDhiMy00ZmVjLTgxZWQtZDk3YTAwYTdkMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwExc5559Pjq3sBmbyPp4/nVIY6DrKBm+pYn Z96Dec+GLxf9UcKBCv7QHrn1NYRQdXPR3XkapnwJ8bTfGK85mb99hMQM027BV8qq Vao/ZyQ9gu9ZDSua4bCIH3baIhPbx6XUd5GND/XcoUAalbE9I/SJjSLQ4Uq6EX0x yrsWxzyMUc2bM+RsHQYpgNOtMZ21a7IFXekB72kqZAUXGv6XMxQnB5D/Awg5Q+BA 4FX9WQwKzX+pcctQkOV8nXY2G0T9l0LbC0l3OJJrER1drlRnTDri2fpFd6jho+zr fKzb4chy9QM+qp9kPmYniC3AG4ELn7NTSy/hVSTSGCLfQVZBbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG3R+0S25aVYfbCBq8/ozqwV8oXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODFjYTQzMWMtNDMyMi0z ZjU2LWIxNzAtMjQwZDg1ZjMxODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALcPfmJ3FJpkNxoe1czbgZnFsjYg7xzFDcGqTR6XfkzAYf+/7R62 uek9XHe9LUedrfzp7SV+nsumelmghd6xa9mTOQZ/yoG5Tuifak4/YtcpAwzIk7jJ RAr0aLMRUi2Pu7YhJ7ZdZ+pjl5SptDKDUJ9rfu5269W/qPA/Yx+ZqzuS2ABwUWWQ pAJUqKcA/3HDiPTO5YjIYUWj9o+ouLaPHS7nX2Pw7A9kGoOI8jYXQhtAyVZwxaOD G6YVc6TfFrVsBZp462wPEI8TJuGKXg2E2HBJ4mWqbargwHdFJUD1eCuAZgPYScUQ ShxfxOP+Qu1wLsHSUzgSZb/mz7sEwFHjUzU= -----END CERTIFICATE-----Generated at Wed Sep 10 18:03:16 2025 by rpki-client