$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa File: abff4389-a8a1-36b0-8f25-2173ebce19de.roa (raw, json) Hash identifier: 2y6yqXA7YeWf2OtTSimLmy8jhpIV1Zd7ZMcR2etZyl0= Subject key identifier: E4:60:B2:C6:29:5C:04:23:1D:CC:F0:56:07:C4:95:80:99:E3:39:D0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C2CF1BA0D300CC39DAB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 396590 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2c:f1:ba:0d:30:0c:c3:9d:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=7ba5bc1f-b48c-4e2d-a95c-6db38590374e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:6d:ef:b4:06:67:34:e9:9d:44:6a:37:9f: ca:ca:b8:74:6a:19:6b:10:af:cc:94:06:b1:0e:e0: a3:bc:d9:fb:47:f2:84:8b:0d:cc:53:88:c3:5a:74: 36:73:a3:5f:0d:91:b2:88:c3:52:d7:a6:d4:ee:1a: a7:48:45:5e:9e:88:f7:6b:d1:39:69:3c:7a:0f:53: 10:a2:83:6e:e8:a3:c7:9e:f7:54:8f:33:38:2f:df: e1:b9:6f:a1:cc:27:be:ea:86:61:5e:3c:e7:a7:b1: 47:9f:be:b8:10:50:36:7c:0e:19:06:a6:05:c8:0e: 6d:ba:20:ff:a5:8d:3b:f2:9b:c3:71:0f:69:fc:c7: aa:8d:3d:2a:f6:50:79:da:60:7e:4e:c1:29:b0:96: 69:02:55:7e:00:8c:16:0c:c0:ce:85:fa:67:54:ce: cb:70:13:a1:8d:95:47:45:de:7d:62:9b:b2:8c:97: 0a:09:ff:73:ab:30:43:ad:1b:87:d9:e3:83:25:8e: 10:00:3b:62:1b:20:e2:ea:c6:84:08:2b:68:45:64: 42:86:1e:76:81:86:57:3d:be:5f:b9:7b:7b:ac:41: 39:c5:2c:82:38:c2:62:24:a7:31:5e:ed:ac:64:50: 8b:7b:e4:f6:48:72:84:51:a8:9c:fc:ee:ed:11:e4: c5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:60:B2:C6:29:5C:04:23:1D:CC:F0:56:07:C4:95:80:99:E3:39:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abff4389-a8a1-36b0-8f25-2173ebce19de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:4e:4f:61:55:74:8a:06:a1:8a:69:46:f6:c5:e7:b3:aa:70: 3f:95:4f:14:ad:50:f0:20:7a:7b:5e:5b:7d:aa:a4:5f:cb:23: a3:0b:7e:c7:2f:1d:e6:2a:62:ff:ee:4a:d8:79:4a:d9:db:ea: 97:27:07:d9:41:6d:56:bb:9e:2b:3c:8e:b0:ca:58:1c:2e:4a: 7e:12:db:72:08:56:0f:45:79:36:b5:34:19:fb:03:9f:c1:9f: 96:6e:4e:6a:9d:e5:e2:52:1f:63:03:53:9a:ea:c6:db:fe:c5: 1d:b0:53:d7:07:26:d1:18:1f:93:95:8a:9d:60:89:8e:06:a4: 42:a7:28:77:02:ca:e0:5e:f0:1c:e2:5b:9c:dd:ba:a5:9a:b0: 4e:67:5f:36:23:63:66:b3:6c:60:1a:55:cf:9e:60:99:bc:c4: 49:6f:47:34:e2:33:25:be:fa:a3:c0:17:99:1d:cf:17:a0:45: be:8c:1d:dd:70:a3:cf:b6:e3:81:97:ee:fc:b3:dd:0c:2d:a3: 46:4b:2a:3e:53:41:fa:29:06:45:60:64:b0:66:42:27:79:f4: b8:47:87:59:fa:bc:8c:fd:85:3a:0a:84:50:63:e4:ba:8a:9b: 10:07:8e:47:7c:eb:0e:a4:4e:80:22:64:b3:2a:e1:62:a6:ec: 11:ef:d5:18 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATCzxug0wDMOdq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk N2JhNWJjMWYtYjQ4Yy00ZTJkLWE5NWMtNmRiMzg1OTAzNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXFt77QGZzTpnURqN5/Kyrh0ahlrEK/MlAax DuCjvNn7R/KEiw3MU4jDWnQ2c6NfDZGyiMNS16bU7hqnSEVenoj3a9E5aTx6D1MQ ooNu6KPHnvdUjzM4L9/huW+hzCe+6oZhXjznp7FHn764EFA2fA4ZBqYFyA5tuiD/ pY078pvDcQ9p/MeqjT0q9lB52mB+TsEpsJZpAlV+AIwWDMDOhfpnVM7LcBOhjZVH Rd59YpuyjJcKCf9zqzBDrRuH2eODJY4QADtiGyDi6saECCtoRWRChh52gYZXPb5f uXt7rEE5xSyCOMJiJKcxXu2sZFCLe+T2SHKEUaic/O7tEeTFFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFORgssYpXAQjHczwVgfElYCZ4znQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWJmZjQzODktYThhMS0z NmIwLThmMjUtMjE3M2ViY2UxOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC7Tk9hVXSKBqGKaUb2xeezqnA/lU8UrVDwIHp7 Xlt9qqRfyyOjC37HLx3mKmL/7krYeUrZ2+qXJwfZQW1Wu54rPI6wylgcLkp+Etty CFYPRXk2tTQZ+wOfwZ+Wbk5qneXiUh9jA1Oa6sbb/sUdsFPXBybRGB+TlYqdYImO BqRCpyh3AsrgXvAc4luc3bqlmrBOZ182I2Nms2xgGlXPnmCZvMRJb0c04jMlvvqj wBeZHc8XoEW+jB3dcKPPtuOBl+78s90MLaNGSyo+U0H6KQZFYGSwZkInefS4R4dZ +ryM/YU6CoRQY+S6ipsQB45HfOsOpE6AImSzKuFipuwR79UY -----END CERTIFICATE-----Generated at Wed Sep 10 20:51:46 2025 by rpki-client