$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca33fb33-e2ee-359c-a65b-4848b8466322.roa File: ca33fb33-e2ee-359c-a65b-4848b8466322.roa (raw, json) Hash identifier: GL6JCIWot/+m5SfzfJqTgAowt1w6v8kD6y4obQFuSTg= Subject key identifier: D0:80:ED:88:7F:CB:CA:89:9A:F5:2B:75:B7:9C:9A:A4:A4:FE:50:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C2E25A5B787C5A08B7A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca33fb33-e2ee-359c-a65b-4848b8466322.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 396547 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2e:25:a5:b7:87:c5:a0:8b:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=481889e5-9b56-43a1-a54e-dfa72d1173c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:61:2e:52:f2:83:54:df:0d:7e:e2:f6:46:da: e4:4d:c4:25:fb:1b:e7:de:74:2d:a2:8d:40:38:d9: 9d:a6:a9:8e:91:ae:f2:31:e0:19:21:4b:e4:0f:e1: cc:44:d0:60:0d:28:9f:83:8b:79:b1:85:a1:e7:d2: 2b:1c:cf:0d:65:9d:1a:6e:d0:18:bc:bb:18:45:ac: 8f:82:20:88:d1:f9:cf:82:aa:38:24:46:65:8b:ec: 43:97:7d:7e:8c:42:fd:51:aa:55:85:c5:61:bf:2e: c8:c4:29:be:c1:c6:27:6b:f1:77:ae:f2:30:2a:65: 30:06:ab:2d:73:88:63:32:bd:68:53:b9:f4:86:73: 9a:a4:a1:e9:f1:e1:4e:ce:9f:4c:dd:d1:6b:3a:0b: 64:47:28:93:b9:af:39:ea:73:e1:69:38:d7:77:a7: 48:93:01:b3:3e:0c:93:76:c7:83:4b:0c:31:23:25: b5:f4:54:d5:b2:a5:33:31:3f:6a:55:0b:fa:73:b7: 3c:b8:44:23:23:f8:99:e8:b5:16:80:f9:a5:f3:23: 76:91:c7:33:15:44:f7:d3:bc:2c:0f:d5:b5:61:b2: 0a:b0:7c:41:90:5b:10:52:c3:5f:9d:00:06:0c:4f: ce:5e:91:3c:ad:13:7f:86:c1:11:8d:3d:99:11:1d: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:80:ED:88:7F:CB:CA:89:9A:F5:2B:75:B7:9C:9A:A4:A4:FE:50:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca33fb33-e2ee-359c-a65b-4848b8466322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:82:d9:ca:4c:c2:54:b6:5c:40:de:c4:bd:ff:05:30:9a:2e: 99:c3:33:40:6a:74:6f:48:63:25:ef:71:b2:6d:f4:17:d8:cb: 3b:b4:ce:f1:59:9b:56:32:04:b3:4f:f3:9c:a2:d6:1e:b5:b5: dd:da:7d:3d:27:24:2b:b2:dd:7c:a8:be:f6:81:9d:00:b6:cf: ce:62:a2:4e:60:17:36:86:c9:ef:47:c7:07:36:60:a4:a6:20: 5a:a5:e1:79:2c:d6:e0:1e:3e:2d:32:27:49:3d:97:9b:3b:2b: 9f:f5:42:24:3a:2b:74:01:c6:ec:dd:be:38:2d:75:1c:d4:1f: 8c:2f:96:40:2b:e5:b9:4c:8e:06:8f:49:30:de:e9:43:9e:ec: 0f:44:27:c9:fd:39:4d:6c:4b:b2:e1:bb:ee:46:06:7a:ff:9f: ef:c5:a7:41:75:23:c9:3f:5a:c7:e8:1b:55:00:0c:82:c3:d8: 7b:be:09:42:bf:05:92:cc:53:b6:b3:2e:62:26:56:58:f3:e4: bc:41:91:c2:d2:df:fe:fd:ae:2a:2d:5e:d9:3e:45:c3:0b:69: c6:80:d9:54:b4:fb:05:01:91:61:34:89:0c:18:0c:1a:fa:44: 40:5c:3b:cd:fe:b4:cd:75:65:83:91:05:75:b8:96:70:17:6a: fb:4f:c5:e8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATC4lpbeHxaCLegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NDgxODg5ZTUtOWI1Ni00M2ExLWE1NGUtZGZhNzJkMTE3M2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGEuUvKDVN8NfuL2RtrkTcQl+xvn3nQtoo1A ONmdpqmOka7yMeAZIUvkD+HMRNBgDSifg4t5sYWh59IrHM8NZZ0abtAYvLsYRayP giCI0fnPgqo4JEZli+xDl31+jEL9UapVhcVhvy7IxCm+wcYna/F3rvIwKmUwBqst c4hjMr1oU7n0hnOapKHp8eFOzp9M3dFrOgtkRyiTua856nPhaTjXd6dIkwGzPgyT dseDSwwxIyW19FTVsqUzMT9qVQv6c7c8uEQjI/iZ6LUWgPml8yN2kcczFUT307ws D9W1YbIKsHxBkFsQUsNfnQAGDE/OXpE8rRN/hsERjT2ZER2LLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNCA7Yh/y8qJmvUrdbecmqSk/lAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2EzM2ZiMzMtZTJlZS0z NTljLWE2NWItNDg0OGI4NDY2MzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhgtnKTMJUtlxA3sS9/wUwmi6ZwzNAanRvSGMl 73GybfQX2Ms7tM7xWZtWMgSzT/OcotYetbXd2n09JyQrst18qL72gZ0Ats/OYqJO YBc2hsnvR8cHNmCkpiBapeF5LNbgHj4tMidJPZebOyuf9UIkOit0Acbs3b44LXUc 1B+ML5ZAK+W5TI4Gj0kw3ulDnuwPRCfJ/TlNbEuy4bvuRgZ6/5/vxadBdSPJP1rH 6BtVAAyCw9h7vglCvwWSzFO2sy5iJlZY8+S8QZHC0t/+/a4qLV7ZPkXDC2nGgNlU tPsFAZFhNIkMGAwa+kRAXDvN/rTNdWWDkQV1uJZwF2r7T8Xo -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:52 2025 by rpki-client