$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d4cf8b-0bd3-3c01-8b2a-a2f7848e34f1.roa File: e1d4cf8b-0bd3-3c01-8b2a-a2f7848e34f1.roa (raw, json) Hash identifier: 8HKoB1wxb7UcDI8GWg65q1/hwtKTODxD/WdGtJvC/nY= Subject key identifier: CB:A2:9E:C3:56:F7:2C:5E:8C:96:D9:DE:4B:CB:DE:05:27:44:52:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1B6B7EAAF7444A3BEA4E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d4cf8b-0bd3-3c01-8b2a-a2f7848e34f1.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 397193 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b6:b7:ea:af:74:44:a3:be:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=8b96cdbe-6c46-40ba-be30-dad77b3a049a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:93:9e:4a:bc:0f:fe:b5:07:78:71:d3:2b:9a: 1e:2f:75:11:a5:e5:9e:eb:45:3a:82:a3:03:29:f6: 65:5f:4f:03:33:e3:01:a5:96:15:cb:e2:ae:b5:b4: 93:96:a0:4d:a6:fa:95:ba:7c:5e:10:8f:cb:95:f7: ef:0c:da:1e:9f:75:0c:b7:3a:04:88:b7:ee:2b:bb: 1b:0f:d8:5c:5b:b2:f0:37:99:00:18:09:7c:c6:90: 7a:1e:8c:73:40:43:63:27:61:d1:24:18:1e:64:44: c0:5a:4b:fb:63:e1:3f:41:80:66:e1:fe:92:1f:ec: df:d4:e6:a3:93:67:d9:81:ba:61:7c:5e:0d:13:78: 79:2a:b0:71:8a:7d:1f:b1:ce:57:f0:ad:64:d7:49: 7c:3e:14:a5:fe:70:7a:7c:9a:49:6d:7c:04:a4:98: 62:1e:5e:ec:ae:64:50:be:52:fa:02:91:f1:d4:ec: 24:e2:92:9f:6c:f4:01:30:42:37:11:24:ed:63:70: ac:ad:ea:59:80:b4:3c:2e:43:b1:65:fb:49:58:3d: 11:6b:0d:f4:3b:46:b3:31:2c:f0:82:56:83:ad:d7: 1b:b5:c6:c3:2e:8b:41:b1:03:71:a5:ec:52:fd:4e: 42:83:6a:eb:a8:b3:cd:b0:78:d7:0b:99:59:36:39: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A2:9E:C3:56:F7:2C:5E:8C:96:D9:DE:4B:CB:DE:05:27:44:52:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1d4cf8b-0bd3-3c01-8b2a-a2f7848e34f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e4:a2:34:d5:e4:ab:1c:ff:92:f4:70:9e:e4:41:d7:9d:21: 1d:c7:f7:b6:52:2c:32:f9:66:59:78:f5:c0:47:00:92:b4:f7: ea:56:44:8b:82:ce:02:15:03:b0:1b:71:fd:01:2b:4b:0b:3c: f9:9a:e4:3e:10:97:68:ee:31:fe:9a:8a:39:8d:db:b0:0d:fe: a6:38:91:9e:bd:3c:cb:17:c2:37:ee:17:30:e0:ff:70:76:eb: 39:19:c8:02:80:ce:81:da:23:f1:61:51:87:76:17:57:0a:62: bb:e4:10:d1:35:67:6b:74:1c:a6:6b:52:5d:a1:a4:6a:6c:ec: f3:55:b9:6a:d4:ec:84:74:b8:16:2e:a0:d0:2d:f6:3e:58:5c: a5:a5:75:17:af:ec:e4:5e:75:ef:91:26:56:88:72:08:02:00: 78:11:7b:fe:d8:e2:86:97:3b:a3:35:ed:1a:7a:4c:88:df:18: 4a:d4:d7:ba:b6:b3:47:04:ab:8a:94:96:1e:50:63:df:0f:04: 83:db:0c:94:2c:7f:72:9e:e1:0a:97:83:3c:c6:0e:f1:55:17: 9e:cb:5b:d3:fc:f4:ea:78:d6:25:06:4c:a7:8e:ba:55:4b:95: a8:c7:9e:17:29:f0:51:02:6d:9c:1d:f1:ca:65:e5:ac:39:aa: c7:be:06:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0ba36q90RKO+pOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk OGI5NmNkYmUtNmM0Ni00MGJhLWJlMzAtZGFkNzdiM2EwNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5OeSrwP/rUHeHHTK5oeL3URpeWe60U6gqMD KfZlX08DM+MBpZYVy+KutbSTlqBNpvqVunxeEI/LlffvDNoen3UMtzoEiLfuK7sb D9hcW7LwN5kAGAl8xpB6HoxzQENjJ2HRJBgeZETAWkv7Y+E/QYBm4f6SH+zf1Oaj k2fZgbphfF4NE3h5KrBxin0fsc5X8K1k10l8PhSl/nB6fJpJbXwEpJhiHl7srmRQ vlL6ApHx1Owk4pKfbPQBMEI3ESTtY3CsrepZgLQ8LkOxZftJWD0Raw30O0azMSzw glaDrdcbtcbDLotBsQNxpexS/U5Cg2rrqLPNsHjXC5lZNjkNewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMuinsNW9yxejJbZ3kvL3gUnRFKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTFkNGNmOGItMGJkMy0z YzAxLThiMmEtYTJmNzg0OGUzNGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzkojTV5Ksc/5L0cJ7kQdedIR3H97ZSLDL5Zll49cBHAJK09+pW RIuCzgIVA7Abcf0BK0sLPPma5D4Ql2juMf6aijmN27AN/qY4kZ69PMsXwjfuFzDg /3B26zkZyAKAzoHaI/FhUYd2F1cKYrvkENE1Z2t0HKZrUl2hpGps7PNVuWrU7IR0 uBYuoNAt9j5YXKWldRev7ORede+RJlaIcggCAHgRe/7Y4oaXO6M17Rp6TIjfGErU 17q2s0cEq4qUlh5QY98PBIPbDJQsf3Ke4QqXgzzGDvFVF57LW9P89Op41iUGTKeO ulVLlajHnhcp8FECbZwd8cpl5aw5qse+Bno= -----END CERTIFICATE-----Generated at Wed Sep 10 20:25:26 2025 by rpki-client