$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb816bad-9f5b-3dcb-82ac-7fd5200c8f9a.roa File: cb816bad-9f5b-3dcb-82ac-7fd5200c8f9a.roa (raw, json) Hash identifier: fgl7rMPmqFgjuB4v++X81cB1DzSahfJVULe5gCOoVto= Subject key identifier: AA:2D:14:08:46:21:F9:E3:80:FF:12:43:FD:F5:35:65:8C:2C:5B:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B434C5E6D131F30E64E958580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb816bad-9f5b-3dcb-82ac-7fd5200c8f9a.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 396611 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5e:6d:13:1f:30:e6:4e:95:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=0bfb6de0-36c9-4832-a57a-5d024ec9cf32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:15:d9:82:89:22:c1:66:59:8d:27:8b:82:6e: 62:36:4a:31:24:de:2d:c2:dd:d7:18:04:62:30:59: 15:7d:14:79:3a:32:c2:87:92:c5:0b:13:a6:04:5a: 01:b5:1a:38:47:03:6f:90:dd:52:42:8c:ba:28:03: bd:e0:0d:1b:24:40:2b:06:df:5b:95:09:fd:87:11: 4b:e5:b7:5f:8b:7e:fb:a0:04:d5:e5:79:3f:5d:24: d7:66:ec:11:e4:0e:98:94:4f:60:db:fe:0c:a7:36: 63:d8:dc:8a:9e:08:2f:99:b3:ca:f3:db:76:4b:83: bf:74:a4:71:3f:c0:15:87:eb:97:e0:c1:6b:aa:b1: 10:6d:ec:8a:e1:47:fa:74:2c:31:d1:a8:10:4b:d1: 8e:91:c4:b4:fc:17:16:14:b2:eb:68:b2:ed:bf:18: 12:b9:be:21:2f:fd:9c:b9:0f:6e:17:7e:c5:27:b3: d2:32:3b:da:a3:64:6a:66:d8:aa:10:27:c9:ad:89: 2f:06:42:65:27:d1:df:33:a4:91:4f:71:1b:31:f0: ec:7f:dd:26:d6:7c:f7:6b:e4:a3:d0:a6:22:4a:53: 2e:ca:fa:d4:66:c5:64:b4:d2:09:e3:29:cc:cd:91: 1c:f3:d5:1b:bf:63:ff:89:52:ba:9c:c0:0e:cd:2d: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:14:08:46:21:F9:E3:80:FF:12:43:FD:F5:35:65:8C:2C:5B:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb816bad-9f5b-3dcb-82ac-7fd5200c8f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:76:75:2f:ff:ef:e4:b1:45:89:68:af:04:9b:3a:ae:22:d7: fc:a1:7c:e1:1c:d5:a2:1e:f2:db:b8:dd:03:a5:78:27:62:b8: 09:37:1f:8f:69:af:fa:76:12:75:03:b5:97:07:66:56:0d:52: d9:33:ca:32:f1:d8:7c:fb:5a:85:b0:c4:9d:5f:2e:7a:b5:63: e9:2c:c4:d2:78:2c:ac:64:b7:77:3c:81:04:85:95:fc:5e:7f: 0f:46:b2:3e:ea:45:77:8a:b2:27:46:52:c8:d3:41:7a:95:29: 20:6f:1d:b8:2f:bd:b9:17:d5:91:ae:d7:57:dc:92:e8:e5:91: 82:ee:03:7e:2b:31:d4:3b:cd:7e:5e:80:21:1d:e2:90:0c:70: 6b:57:30:c8:03:47:7a:aa:0a:d5:df:7c:11:6a:8f:f6:06:a2: e6:86:69:95:29:5d:b1:0a:3a:80:1b:25:9c:85:0e:05:f2:ce: 1d:18:36:cf:43:23:2a:ee:57:d7:67:7d:1c:40:64:10:94:70: e6:a8:85:c1:76:c4:cb:03:5d:3d:95:44:3a:df:44:01:50:87: 64:eb:e9:07:9d:d1:bd:ba:d4:68:c3:59:71:cd:ef:e0:19:67: 7e:77:6b:af:c8:4c:a3:1f:70:3d:07:ed:5a:c0:53:20:12:42: b4:e0:78:95 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtDTF5tEx8w5k6VhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MGJmYjZkZTAtMzZjOS00ODMyLWE1N2EtNWQwMjRlYzljZjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxXZgokiwWZZjSeLgm5iNkoxJN4twt3XGARi MFkVfRR5OjLCh5LFCxOmBFoBtRo4RwNvkN1SQoy6KAO94A0bJEArBt9blQn9hxFL 5bdfi377oATV5Xk/XSTXZuwR5A6YlE9g2/4MpzZj2NyKnggvmbPK89t2S4O/dKRx P8AVh+uX4MFrqrEQbeyK4Uf6dCwx0agQS9GOkcS0/BcWFLLraLLtvxgSub4hL/2c uQ9uF37FJ7PSMjvao2RqZtiqECfJrYkvBkJlJ9HfM6SRT3EbMfDsf90m1nz3a+Sj 0KYiSlMuyvrUZsVktNIJ4ynMzZEc89Ubv2P/iVK6nMAOzS0fGQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKotFAhGIfnjgP8SQ/31NWWMLFuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I4MTZiYWQtOWY1Yi0z ZGNiLTgyYWMtN2ZkNTIwMGM4ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBddnUv/+/ksUWJaK8EmzquItf8oXzhHNWiHvLb uN0DpXgnYrgJNx+Paa/6dhJ1A7WXB2ZWDVLZM8oy8dh8+1qFsMSdXy56tWPpLMTS eCysZLd3PIEEhZX8Xn8PRrI+6kV3irInRlLI00F6lSkgbx24L725F9WRrtdX3JLo 5ZGC7gN+KzHUO81+XoAhHeKQDHBrVzDIA0d6qgrV33wRao/2BqLmhmmVKV2xCjqA GyWchQ4F8s4dGDbPQyMq7lfXZ30cQGQQlHDmqIXBdsTLA109lUQ630QBUIdk6+kH ndG9utRow1lxze/gGWd+d2uvyEyjH3A9B+1awFMgEkK04HiV -----END CERTIFICATE-----Generated at Wed Oct 29 09:04:47 2025 by rpki-client