$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d153f3a9-2e14-3a94-b81e-df85ad73db20.roa File: d153f3a9-2e14-3a94-b81e-df85ad73db20.roa (raw, json) Hash identifier: S6tdICUkfiOd6s8ZAmcbicz7SXA/uttjDBgxTsd7k3A= Subject key identifier: F8:AA:AF:8A:B2:3F:88:DD:BD:9A:45:35:8F:33:97:F8:49:C9:29:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2CF71214C52DBECBE98341C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d153f3a9-2e14-3a94-b81e-df85ad73db20.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 396827 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:12:14:c5:2d:be:cb:e9:83:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=fb8cf7f8-5754-494d-ae97-ff235e396246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:f8:2b:77:39:50:00:7e:05:a7:8b:80:26: 6c:63:cf:4e:84:a9:54:ec:ed:f3:c4:0d:62:b3:e0: 86:22:ea:10:0a:a4:4c:c2:e8:0a:91:4b:e6:4d:15: fa:5a:41:1b:9f:f6:47:b7:df:94:51:a6:04:ab:69: 72:74:49:43:21:35:70:90:e3:3b:c0:91:ae:ed:4e: 33:05:23:90:dc:bb:b4:49:86:2f:63:69:15:ee:2b: de:4a:3d:15:99:63:f0:cb:0e:41:d7:71:71:e4:bf: 42:78:39:c6:8b:d4:c3:82:fc:bf:52:ea:01:f7:53: f0:a2:cd:36:ca:49:5f:75:f5:8b:78:ec:09:90:f0: 06:b5:23:fc:43:84:3a:c1:d4:3d:2e:e3:59:05:d9: 72:9e:55:f5:8a:f4:6d:35:52:4a:a7:45:a1:90:cc: 84:33:7d:14:8b:e9:47:bc:bc:f6:45:11:40:f5:5b: 74:ea:2f:a4:00:df:04:a0:13:e5:b8:85:65:30:fb: d1:ef:35:20:e0:a2:81:9d:5b:2c:03:0a:00:e4:49: f1:b9:66:e6:c2:40:aa:8d:e5:47:44:6b:60:68:fb: d4:c1:8b:81:e3:4b:a6:17:72:82:85:25:11:b2:4b: 20:08:a9:97:13:19:c5:3b:36:a9:df:ce:c7:c1:68: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AA:AF:8A:B2:3F:88:DD:BD:9A:45:35:8F:33:97:F8:49:C9:29:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d153f3a9-2e14-3a94-b81e-df85ad73db20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f5:27:94:0b:5e:c8:c0:4b:f3:6d:13:cf:cf:b1:29:a5:4a: c6:02:de:d1:b9:51:86:d0:ea:a0:65:26:4d:7a:10:9b:7f:1a: 26:92:1d:90:2c:c4:7a:f9:56:af:69:b3:0d:33:d9:2a:a1:87: ba:8c:ca:0f:ed:44:70:6c:c6:75:bf:2d:1e:69:2d:8b:d7:80: f9:fa:01:a8:68:7e:e8:b0:11:34:c4:f5:a8:1a:3d:8a:b1:76: 0e:df:f5:4e:30:ca:a1:3b:a7:d0:91:27:b9:2f:0f:b4:d2:ea: fd:98:39:ce:77:3c:67:46:8d:99:ca:ee:18:9b:c0:06:7d:1e: 22:c1:79:a9:7a:41:a3:4b:c5:7d:06:3f:58:29:5e:9f:ea:ff: 90:28:87:43:6f:2f:74:12:40:a2:89:8b:48:3c:b7:d2:5f:25: cf:92:2a:5a:d8:31:31:f8:7c:a9:9c:e5:ba:3f:5c:bc:22:f7: 7c:e2:12:ca:31:fd:d4:78:3a:1d:7e:62:48:92:b4:35:1f:47: d7:76:9b:72:cf:f0:0e:11:c2:a5:0a:2c:e8:2e:1d:53:d5:f9: 0b:ab:2f:ea:50:f8:08:c7:f5:da:96:c1:6b:4e:ef:d2:73:ba: 90:b2:bd:1f:97:28:36:23:b2:62:e8:03:46:d2:a5:8d:46:07: a2:29:9b:96 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEss9xIUxS2+y+mDQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmI4Y2Y3ZjgtNTc1NC00OTRkLWFlOTctZmYyMzVlMzk2MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR34K3c5UAB+BaeLgCZsY89OhKlU7O3zxA1i s+CGIuoQCqRMwugKkUvmTRX6WkEbn/ZHt9+UUaYEq2lydElDITVwkOM7wJGu7U4z BSOQ3Lu0SYYvY2kV7iveSj0VmWPwyw5B13Fx5L9CeDnGi9TDgvy/UuoB91Pwos02 yklfdfWLeOwJkPAGtSP8Q4Q6wdQ9LuNZBdlynlX1ivRtNVJKp0WhkMyEM30Ui+lH vLz2RRFA9Vt06i+kAN8EoBPluIVlMPvR7zUg4KKBnVssAwoA5EnxuWbmwkCqjeVH RGtgaPvUwYuB40umF3KChSURsksgCKmXExnFOzap387HwWiKpwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPiqr4qyP4jdvZpFNY8zl/hJySksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDE1M2YzYTktMmUxNC0z YTk0LWI4MWUtZGY4NWFkNzNkYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA79SeUC17IwEvzbRPPz7EppUrGAt7RuVGG0Oqg ZSZNehCbfxomkh2QLMR6+VavabMNM9kqoYe6jMoP7URwbMZ1vy0eaS2L14D5+gGo aH7osBE0xPWoGj2KsXYO3/VOMMqhO6fQkSe5Lw+00ur9mDnOdzxnRo2Zyu4Ym8AG fR4iwXmpekGjS8V9Bj9YKV6f6v+QKIdDby90EkCiiYtIPLfSXyXPkipa2DEx+Hyp nOW6P1y8Ivd84hLKMf3UeDodfmJIkrQ1H0fXdptyz/AOEcKlCizoLh1T1fkLqy/q UPgIx/XalsFrTu/Sc7qQsr0flyg2I7Ji6ANG0qWNRgeiKZuW -----END CERTIFICATE-----Generated at Wed Oct 29 07:00:51 2025 by rpki-client