$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f33e127b-5b36-324b-8a15-ff8d831c002d.roa File: f33e127b-5b36-324b-8a15-ff8d831c002d.roa (raw, json) Hash identifier: 2al5MP2fcxd+bc0xIisYgoIKvVd/U0KUidIQkyyalx4= Subject key identifier: 47:A3:7C:EB:65:BF:7A:35:32:A5:AA:AD:D7:5F:B3:FC:5F:83:A9:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C2DA5AB3B70DFA5B84580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f33e127b-5b36-324b-8a15-ff8d831c002d.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 396600 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2d:a5:ab:3b:70:df:a5:b8:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=ffda6966-b3dc-45ae-9f19-b0c20b27c3d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4d:83:eb:40:8f:b8:0d:55:d7:80:31:45:30: 96:8b:92:d4:08:2e:72:b2:26:36:43:d1:92:a1:f5: 19:1f:57:c3:88:b0:54:67:a9:bf:7d:4f:b4:6b:e6: 10:78:90:e7:ae:9d:3f:85:79:cc:e4:24:8c:3f:3f: 04:04:4b:55:21:8a:e0:02:99:aa:46:e6:5c:78:d4: e1:65:dc:c0:82:7a:6b:76:b3:2c:3f:43:f4:46:ee: fc:2e:e4:15:e6:83:3d:ed:a0:c9:38:da:e2:d7:89: cb:5e:bd:eb:19:4b:9c:01:14:e5:85:7c:65:69:85: e4:60:5c:73:f7:82:e0:4a:39:bc:ba:96:9f:98:07: 6b:a0:2c:bb:a3:54:3a:5d:21:46:28:f6:2f:cb:f9: 66:80:e9:0b:b2:e6:4f:9d:4e:95:31:05:a4:1d:d5: 64:3a:a7:a6:64:5a:25:42:af:c0:5d:b2:d2:4b:c8: 1b:77:2f:d6:eb:e6:78:22:64:db:91:39:ca:66:b7: a1:8c:9d:a6:b3:25:d5:78:54:07:81:dc:7c:6b:6f: c3:ef:7d:01:a0:a3:d6:28:05:4c:d8:1a:8c:5d:eb: df:78:12:d2:d3:d3:37:c5:5e:c4:2c:91:d2:ce:f3: 4b:c0:a1:8d:57:b5:21:f4:e2:50:4b:0d:43:ad:89: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A3:7C:EB:65:BF:7A:35:32:A5:AA:AD:D7:5F:B3:FC:5F:83:A9:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f33e127b-5b36-324b-8a15-ff8d831c002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:71:ca:a6:05:f4:57:8c:fa:2a:2f:f4:6e:0f:16:f5:57:73: 76:2a:8f:00:0c:a2:80:2c:ce:50:94:ee:88:21:d2:93:75:67: 8e:cc:1c:07:16:db:9f:3c:4a:7b:f6:87:26:73:55:87:93:32: 5f:95:fb:49:2a:03:75:bc:5a:22:48:7d:88:23:3a:34:2a:a9: 30:49:b8:7b:34:d4:ff:b0:52:2a:e8:dd:cb:b5:a6:72:9f:72: f3:7c:f8:4a:62:18:e8:5b:b9:bb:59:04:56:c0:75:a1:46:b2: e9:f1:61:dc:50:1d:89:37:b7:4a:c4:45:f5:17:0e:09:4b:de: e5:3f:e9:7b:a2:fc:8d:fe:b8:1e:16:85:53:9b:06:2e:ba:8b: 63:56:1c:59:99:1f:e3:ad:b3:24:84:18:7a:47:b0:ac:8f:e8: a5:6c:91:d1:56:c5:57:59:84:21:cf:17:aa:11:39:28:72:de: 9e:9e:a6:b8:99:d1:f9:69:d4:9f:a0:38:94:72:9c:f1:65:eb: b5:39:10:7a:10:a7:43:60:fd:a0:ac:6a:ae:76:ec:45:eb:8d: 68:ce:8c:c5:fd:a3:7a:8f:02:65:54:e5:df:ed:83:2c:c9:8b: 29:7d:b9:d4:8e:5b:7d:4d:08:7e:b1:5d:c8:cd:78:31:52:a4: ad:8e:d4:09 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATC2lqztw36W4RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZmZkYTY5NjYtYjNkYy00NWFlLTlmMTktYjBjMjBiMjdjM2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE2D60CPuA1V14AxRTCWi5LUCC5ysiY2Q9GS ofUZH1fDiLBUZ6m/fU+0a+YQeJDnrp0/hXnM5CSMPz8EBEtVIYrgApmqRuZceNTh ZdzAgnprdrMsP0P0Ru78LuQV5oM97aDJONri14nLXr3rGUucARTlhXxlaYXkYFxz 94LgSjm8upafmAdroCy7o1Q6XSFGKPYvy/lmgOkLsuZPnU6VMQWkHdVkOqemZFol Qq/AXbLSS8gbdy/W6+Z4ImTbkTnKZrehjJ2msyXVeFQHgdx8a2/D730BoKPWKAVM 2BqMXevfeBLS09M3xV7ELJHSzvNLwKGNV7Uh9OJQSw1DrYnfnQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEejfOtlv3o1MqWqrddfs/xfg6nWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjMzZTEyN2ItNWIzNi0z MjRiLThhMTUtZmY4ZDgzMWMwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCqccqmBfRXjPoqL/RuDxb1V3N2Ko8ADKKALM5Q lO6IIdKTdWeOzBwHFtufPEp79ocmc1WHkzJflftJKgN1vFoiSH2IIzo0KqkwSbh7 NNT/sFIq6N3LtaZyn3LzfPhKYhjoW7m7WQRWwHWhRrLp8WHcUB2JN7dKxEX1Fw4J S97lP+l7ovyN/rgeFoVTmwYuuotjVhxZmR/jrbMkhBh6R7Csj+ilbJHRVsVXWYQh zxeqETkoct6enqa4mdH5adSfoDiUcpzxZeu1ORB6EKdDYP2grGquduxF641ozozF /aN6jwJlVOXf7YMsyYspfbnUjlt9TQh+sV3IzXgxUqStjtQJ -----END CERTIFICATE-----Generated at Wed Sep 10 17:54:13 2025 by rpki-client