$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa File: b3230797-9752-3a16-a896-808d3a6c520b.roa (raw, json) Hash identifier: 9iYp4IPR5iihfciVJ+tpL53p5QR/H6n6Tea8FOfOat4= Subject key identifier: 9C:BD:32:F5:5E:17:FA:22:D0:9D:4F:DA:8F:A9:B1:E8:91:92:4C:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686A540B0887A68D2D44200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 20362 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:a5:40:b0:88:7a:68:d2:d4:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=f0e3ff4f-7003-4519-9eef-46088ec3bf94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b2:80:6d:7f:d2:c4:27:a5:91:37:26:1f:50: ce:fc:51:00:49:90:a1:82:0e:fb:70:00:53:5f:a5: 86:63:6e:ac:3f:e3:48:ad:ae:ab:1d:03:54:63:47: 11:63:47:d0:6f:34:5b:7a:d1:68:24:f1:9f:fc:84: 69:3d:7f:cf:39:88:ff:e4:35:84:c2:96:70:6a:8a: cb:a4:5f:b8:da:65:29:ea:6a:ec:a2:cf:c8:67:d6: 5f:99:e9:5a:ac:04:27:47:c6:3d:4f:18:05:3a:05: bf:26:e5:81:25:2a:46:b7:c8:0e:41:54:a4:61:f9: 16:39:44:89:f2:12:8b:5e:36:97:23:52:41:49:24: d0:42:84:62:f1:54:15:ec:bb:fb:4d:24:3c:5e:47: fc:2d:22:8b:39:48:ba:40:8e:00:85:a9:2d:af:22: aa:d0:28:84:e4:2c:f2:48:6c:bb:e2:c6:11:0b:a0: 99:e8:cb:95:4c:49:a4:92:ca:b2:b9:d1:07:7a:c6: 9d:27:2d:28:83:12:f1:d2:dd:54:f2:4c:f2:76:a5: b4:2d:2e:05:ba:88:31:3f:79:cf:85:52:97:ae:57: ff:59:14:07:c8:d8:8a:a1:32:a1:3e:4f:68:c1:6d: 1f:f4:56:96:93:c3:7f:67:93:69:93:d1:9b:4e:a6: 09:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BD:32:F5:5E:17:FA:22:D0:9D:4F:DA:8F:A9:B1:E8:91:92:4C:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3230797-9752-3a16-a896-808d3a6c520b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:90:44:cf:f8:d4:21:e5:d6:b7:1a:44:0d:6d:df:2b:ff:0f: 07:32:ab:1f:d6:57:a1:4c:7e:3e:63:4c:c1:e9:ef:59:14:15: 46:6c:47:4f:8e:77:cd:4f:d4:6c:00:99:32:c2:6f:70:0c:cd: ce:79:d6:ac:29:43:00:46:06:f8:08:a9:5a:fa:51:0a:e6:48: 56:a8:a0:2a:a5:e9:12:81:b9:00:7d:4e:8b:96:92:44:7c:01: e7:fe:21:57:1d:e8:03:67:e3:4a:4e:fe:cf:d1:95:fb:a3:15: 08:63:6e:ee:41:f3:f0:d8:71:8a:5e:56:8f:23:71:38:36:50: f3:41:10:1a:b6:80:43:f0:a9:f6:3c:f9:5c:52:14:a9:0a:f9: 5e:6a:89:0d:a6:de:07:e5:e2:de:ee:11:ca:cc:38:3e:c5:c1: 11:d3:78:8f:9c:b3:c9:4b:d6:51:09:ed:f6:1f:12:e3:e7:2f: 8a:2b:6f:27:a5:28:4b:53:df:73:7a:b8:83:06:89:db:da:70: 4a:82:60:e9:cf:bf:40:cf:a5:58:a7:29:05:b2:42:8f:4a:10: 3e:96:d0:5d:8c:77:79:58:89:bc:b1:88:7a:e2:62:36:4a:03: 2b:cc:8c:b3:07:42:15:77:5f:09:ff:1b:63:7f:6b:3b:e5:23: 2f:25:7a:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hqVAsIh6aNLUQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZjBlM2ZmNGYtNzAwMy00NTE5LTllZWYtNDYwODhlYzNiZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbKAbX/SxCelkTcmH1DO/FEASZChgg77cABT X6WGY26sP+NIra6rHQNUY0cRY0fQbzRbetFoJPGf/IRpPX/POYj/5DWEwpZwaorL pF+42mUp6mrsos/IZ9ZfmelarAQnR8Y9TxgFOgW/JuWBJSpGt8gOQVSkYfkWOUSJ 8hKLXjaXI1JBSSTQQoRi8VQV7Lv7TSQ8Xkf8LSKLOUi6QI4AhaktryKq0CiE5Czy SGy74sYRC6CZ6MuVTEmkksqyudEHesadJy0ogxLx0t1U8kzydqW0LS4FuogxP3nP hVKXrlf/WRQHyNiKoTKhPk9owW0f9FaWk8N/Z5Npk9GbTqYJSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJy9MvVeF/oi0J1P2o+pseiRkkzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjMyMzA3OTctOTc1Mi0z YTE2LWE4OTYtODA4ZDNhNmM1MjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCQRM/41CHl1rcaRA1t3yv/Dwcyqx/WV6FMfj5jTMHp71kUFUZs R0+Od81P1GwAmTLCb3AMzc551qwpQwBGBvgIqVr6UQrmSFaooCql6RKBuQB9TouW kkR8Aef+IVcd6ANn40pO/s/RlfujFQhjbu5B8/DYcYpeVo8jcTg2UPNBEBq2gEPw qfY8+VxSFKkK+V5qiQ2m3gfl4t7uEcrMOD7FwRHTeI+cs8lL1lEJ7fYfEuPnL4or byelKEtT33N6uIMGidvacEqCYOnPv0DPpVinKQWyQo9KED6W0F2Md3lYibyxiHri YjZKAyvMjLMHQhV3Xwn/G2N/azvlIy8lev0= -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:11 2025 by rpki-client