$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840d1807-462a-3574-8efa-13ec052ddeaf.roa File: 840d1807-462a-3574-8efa-13ec052ddeaf.roa (raw, json) Hash identifier: QF8pqTjmEYF10UO1gCyPv0W+wmTGz17jrYUxXtkTAKw= Subject key identifier: C1:62:FC:A2:E8:05:C8:B2:64:DC:43:7F:D0:A1:DE:77:BF:87:C2:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0CDC17154B856FE6FA8B6800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840d1807-462a-3574-8efa-13ec052ddeaf.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 0 IP address blocks: 2001:500:132::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:17:15:4b:85:6f:e6:fa:8b:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=96e8fcae-96bd-439b-8e03-425017597860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:5d:fb:3f:27:7b:44:8b:d3:12:97:fb:ea: a6:0a:d5:6e:57:6e:66:29:c6:16:69:ba:07:7e:99: 1f:f7:39:68:fa:e2:51:d7:6b:3c:f7:3e:74:ef:04: 93:99:65:46:97:f2:32:b6:8c:07:5c:0b:0f:bb:26: 46:ff:df:ad:26:11:d7:6d:59:78:17:d9:d6:d9:bc: ca:5a:f9:b1:87:bd:62:14:9b:5f:a1:66:f0:d7:e2: 27:eb:b6:28:60:b6:f4:7f:ab:70:7b:09:02:76:df: b0:7c:13:99:42:25:a2:37:7a:ff:63:4c:6b:d7:85: b1:0a:60:aa:23:e8:8a:de:47:9a:73:53:ce:51:34: 40:d9:b8:22:d8:d3:65:34:00:72:b1:a1:62:5e:45: 89:5f:13:b6:c5:31:1f:9d:b1:6c:66:e7:83:bc:63: bd:c5:87:8a:f0:45:73:fa:64:c2:c5:cf:8e:90:be: 35:97:81:1a:2a:c3:0f:b0:d7:84:c6:b3:7d:a0:36: e3:11:03:fb:1f:8c:54:43:a8:33:8e:0d:ec:7e:9d: 10:e3:66:77:d7:be:ea:00:98:98:7f:a4:35:85:b4: 80:93:7f:7a:4e:bf:27:8e:d0:45:d9:36:c7:76:60: 38:9b:9e:2d:c4:9d:f8:0e:59:de:90:34:7e:6f:c3: 1d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:62:FC:A2:E8:05:C8:B2:64:DC:43:7F:D0:A1:DE:77:BF:87:C2:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840d1807-462a-3574-8efa-13ec052ddeaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:132::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b9:e6:2f:31:73:8c:08:2b:2c:67:dc:12:76:bc:30:8d:5a: 48:a1:c9:d4:57:a3:59:f6:1a:ed:c2:70:bc:e3:71:92:f6:ce: f9:af:59:cd:74:08:0d:e7:03:0a:37:27:7e:a8:99:60:34:21: 70:56:1b:3e:97:8f:48:ab:9c:3a:f7:43:95:17:92:2a:e7:d2: 50:d8:02:fd:21:6d:95:42:d8:2f:fa:8a:94:ad:f7:79:fa:d5: d4:31:6c:4e:f7:23:88:9d:cf:d0:0a:a0:ef:ac:54:db:b6:b8: e7:20:09:1e:63:7b:f3:0b:e5:a0:7e:66:b5:ca:80:21:80:2d: 30:59:42:f9:8f:82:9a:c6:56:aa:12:8f:54:78:33:32:90:9a: 5b:73:d1:4b:57:39:ab:45:cf:0b:fb:ee:1c:45:89:9e:97:89: 50:44:3d:9d:00:fe:99:e3:17:ec:3f:38:41:58:85:70:28:23: 75:58:17:ac:2e:72:e0:bf:bb:ed:af:1e:a9:50:2e:c9:0d:9a: f0:64:fd:5d:49:b1:4e:f3:0e:5f:0f:b2:e0:8b:d7:ed:e6:db: 22:90:76:bb:89:2a:d9:fd:51:40:89:e2:aa:21:dd:43:54:0b: 26:30:59:a1:c1:cd:87:6e:b7:f2:40:7b:c2:32:30:ae:6e:d3: 71:8f:6a:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsM3BcVS4Vv5vqLaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk OTZlOGZjYWUtOTZiZC00MzliLThlMDMtNDI1MDE3NTk3ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaJd+z8ne0SL0xKX++qmCtVuV25mKcYWaboH fpkf9zlo+uJR12s89z507wSTmWVGl/IytowHXAsPuyZG/9+tJhHXbVl4F9nW2bzK Wvmxh71iFJtfoWbw1+In67YoYLb0f6twewkCdt+wfBOZQiWiN3r/Y0xr14WxCmCq I+iK3keac1POUTRA2bgi2NNlNABysaFiXkWJXxO2xTEfnbFsZueDvGO9xYeK8EVz +mTCxc+OkL41l4EaKsMPsNeExrN9oDbjEQP7H4xUQ6gzjg3sfp0Q42Z3177qAJiY f6Q1hbSAk396Tr8njtBF2TbHdmA4m54txJ34DlnekDR+b8MdswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMFi/KLoBciyZNxDf9Ch3ne/h8LzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQwZDE4MDctNDYyYS0z NTc0LThlZmEtMTNlYzA1MmRkZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADe55i8xc4wIKyxn3BJ2vDCNWkihydRXo1n2Gu3CcLzjcZL2zvmv Wc10CA3nAwo3J36omWA0IXBWGz6Xj0irnDr3Q5UXkirn0lDYAv0hbZVC2C/6ipSt 93n61dQxbE73I4idz9AKoO+sVNu2uOcgCR5je/ML5aB+ZrXKgCGALTBZQvmPgprG VqoSj1R4MzKQmltz0UtXOatFzwv77hxFiZ6XiVBEPZ0A/pnjF+w/OEFYhXAoI3VY F6wucuC/u+2vHqlQLskNmvBk/V1JsU7zDl8PsuCL1+3m2yKQdruJKtn9UUCJ4qoh 3UNUCyYwWaHBzYdut/JAe8IyMK5u03GPagk= -----END CERTIFICATE-----Generated at Wed Sep 10 17:59:51 2025 by rpki-client