$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/851c0678-a48c-3ece-b2ce-39e1514d099e.roa File: 851c0678-a48c-3ece-b2ce-39e1514d099e.roa (raw, json) Hash identifier: flnTkKmR/UrKF1rZjTP7zOc7PumLS5JFxQSLHVo1io0= Subject key identifier: 84:10:47:B4:9B:AA:7F:C1:2E:F7:38:10:CC:91:12:29:48:00:42:6D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A11984DF548DA00609D0940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/851c0678-a48c-3ece-b2ce-39e1514d099e.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 397205 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:98:4d:f5:48:da:00:60:9d:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=d25c99c5-cc04-42c0-8662-7a547672aaac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:c7:e4:1a:9b:68:94:60:9b:38:51:d0:8b: a7:65:4a:9e:a2:96:34:b3:8e:e4:25:97:71:6d:a7: 26:ac:7c:97:a5:b3:e6:72:bd:08:39:2d:ae:d5:dd: 34:38:6a:44:bc:5c:43:34:bf:11:18:f2:6b:3c:37: 39:e9:cf:ad:4d:01:1c:ef:8c:bf:c5:b0:b5:a8:41: 5f:69:db:40:ba:07:cc:a6:68:9e:e2:36:cc:f1:f6: 3b:6b:af:9e:ed:c5:85:34:5c:46:5a:f5:fa:54:86: b6:1a:33:78:09:a3:85:fe:4c:3a:a9:50:2a:e9:65: fd:76:57:c8:c6:0a:db:bc:81:a5:e5:d8:a0:3f:44: 6c:ae:5d:fe:a5:09:a6:6c:1c:94:43:49:0f:3a:f6: 91:7e:0d:e0:f3:b7:4f:70:f1:15:c7:12:5a:63:1b: a5:8b:47:59:0f:ba:bc:94:fe:76:ce:cc:75:9b:d0: 28:ab:57:e8:50:83:3d:91:6f:f8:3a:fa:c2:6b:c9: 1b:81:16:54:9c:fb:f2:2b:0c:30:65:81:ba:74:c7: ed:3f:e4:56:d2:aa:48:38:a2:81:38:33:57:a1:52: e0:eb:27:a0:25:36:ad:f0:c7:df:1d:12:5a:3f:3d: 23:5f:2c:38:0d:43:c8:f9:f9:cb:ce:1e:25:d2:4b: ca:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:10:47:B4:9B:AA:7F:C1:2E:F7:38:10:CC:91:12:29:48:00:42:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/851c0678-a48c-3ece-b2ce-39e1514d099e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:45:a7:8a:e0:54:06:a2:fc:4c:bd:90:24:b8:75:75:0c:21: 09:9c:11:41:1c:97:97:2c:9f:aa:ca:5b:4e:62:fb:2b:cc:98: 42:68:8a:ce:be:28:02:65:c1:1e:1f:16:d2:07:a7:57:0f:9a: 04:d3:41:8b:58:01:22:25:0f:c5:cf:f9:21:bb:23:a0:2b:1b: 2d:9b:ca:23:91:3f:bc:a1:c8:3f:ef:8d:b6:ed:76:a7:a4:92: cc:d9:93:6f:07:48:44:ec:68:25:76:da:ec:9e:a2:b8:7d:9d: 2b:15:bb:c5:9c:7c:fb:46:e7:6c:09:b1:a6:4d:77:ff:44:0f: 3b:80:29:22:e0:da:07:13:b8:a3:bd:2d:3b:fc:a8:1a:f9:fa: 4d:da:48:9a:25:d6:d8:f0:9a:f7:a1:2e:9c:a6:d7:9d:8e:97: f3:ed:e9:bf:97:39:77:4f:b0:9c:94:0c:47:7e:f7:4e:99:07: c5:3b:05:19:d6:ef:68:71:ee:0f:5b:50:53:e1:8f:7d:10:4f: a9:5f:6f:a6:da:df:fe:be:8f:8c:70:bd:39:12:8b:dd:40:79: 6e:fe:91:19:23:0d:85:a7:f0:31:b0:34:10:5c:33:66:e7:03: 5d:af:9c:e7:f4:82:4c:38:d2:0b:21:92:86:e8:04:57:09:2e: 1a:83:b9:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZhN9UjaAGCdCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZDI1Yzk5YzUtY2MwNC00MmMwLTg2NjItN2E1NDc2NzJhYWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXHH5BqbaJRgmzhR0IunZUqeopY0s47kJZdx bacmrHyXpbPmcr0IOS2u1d00OGpEvFxDNL8RGPJrPDc56c+tTQEc74y/xbC1qEFf adtAugfMpmie4jbM8fY7a6+e7cWFNFxGWvX6VIa2GjN4CaOF/kw6qVAq6WX9dlfI xgrbvIGl5digP0Rsrl3+pQmmbByUQ0kPOvaRfg3g87dPcPEVxxJaYxuli0dZD7q8 lP52zsx1m9Aoq1foUIM9kW/4OvrCa8kbgRZUnPvyKwwwZYG6dMftP+RW0qpIOKKB ODNXoVLg6yegJTat8MffHRJaPz0jXyw4DUPI+fnLzh4l0kvK7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIQQR7Sbqn/BLvc4EMyREilIAEJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODUxYzA2NzgtYTQ4Yy0z ZWNlLWIyY2UtMzllMTUxNGQwOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFVFp4rgVAai/Ey9kCS4dXUMIQmcEUEcl5csn6rKW05i+yvMmEJo is6+KAJlwR4fFtIHp1cPmgTTQYtYASIlD8XP+SG7I6ArGy2byiORP7yhyD/vjbbt dqekkszZk28HSETsaCV22uyeorh9nSsVu8WcfPtG52wJsaZNd/9EDzuAKSLg2gcT uKO9LTv8qBr5+k3aSJol1tjwmvehLpym152Ol/Pt6b+XOXdPsJyUDEd+906ZB8U7 BRnW72hx7g9bUFPhj30QT6lfb6ba3/6+j4xwvTkSi91AeW7+kRkjDYWn8DGwNBBc M2bnA12vnOf0gkw40gshkoboBFcJLhqDuQ4= -----END CERTIFICATE-----Generated at Wed Sep 10 17:48:00 2025 by rpki-client