$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5952b92-7a10-3c63-8b2a-3cfb0a2d373a.roa File: f5952b92-7a10-3c63-8b2a-3cfb0a2d373a.roa (raw, json) Hash identifier: XntMa1WJOoHsyWCVfVXLxu4nnFZ5upc0XkERwuXJnrU= Subject key identifier: 6A:B0:67:44:1C:C9:BC:65:7A:03:2C:C3:50:59:EA:0B:61:FC:19:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A119DB3C50E5E84B8F85860 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5952b92-7a10-3c63-8b2a-3cfb0a2d373a.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396610 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:9d:b3:c5:0e:5e:84:b8:f8:58:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=21c77d09-368a-46b2-9d3e-1b26517739de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:1c:ab:76:06:e3:7d:4c:13:2e:78:53:e2: 15:89:78:36:f0:e2:11:1a:52:af:32:a3:cf:21:d8: 7b:b8:30:e8:c3:ce:0e:e6:60:ac:41:fb:1f:9b:cd: 0c:45:f3:7d:48:26:10:31:53:76:e6:fb:ec:a1:2a: d0:cb:a0:86:28:3a:e4:6c:0f:5f:e1:06:a6:a6:79: 52:39:d2:b0:de:34:c3:ef:43:09:f5:09:94:27:17: 50:ee:f0:7e:ca:d7:4f:b7:8d:95:2b:5a:c6:a2:37: 8f:22:a8:8d:57:72:fc:2c:c8:62:23:5a:c6:f9:bf: 1d:cf:15:c1:ab:10:09:02:3d:09:78:42:4b:ff:f5: fe:fa:ea:3c:52:ae:25:6c:d3:55:d3:31:c4:b0:83: 0b:24:68:cd:7d:18:41:ba:79:08:86:cf:f6:4a:f5: d9:86:1d:10:b7:9a:e7:a3:bf:f3:3a:c0:1d:6b:b2: ae:17:04:38:f9:c0:a8:07:76:4d:c3:ba:03:52:60: b8:8c:ba:2c:d7:6b:bb:b9:d3:02:fd:c4:ee:d6:3e: fe:bf:39:04:e7:31:69:56:31:fb:bf:77:17:f9:7f: 12:7a:05:c7:15:d8:8c:a8:3b:c9:90:ff:41:85:f5: 95:ed:27:ca:d5:b8:73:b5:1b:5e:14:19:a5:5d:f7: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B0:67:44:1C:C9:BC:65:7A:03:2C:C3:50:59:EA:0B:61:FC:19:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5952b92-7a10-3c63-8b2a-3cfb0a2d373a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:c9:74:d3:05:b0:96:2e:00:b2:40:0a:80:fe:96:93:08:4f: 2e:41:a0:6e:f5:7e:67:6d:52:d1:8e:62:f3:d7:7b:e5:c4:bb: db:02:92:17:59:09:aa:b0:71:85:48:82:ee:66:65:7b:5d:ed: 42:e8:a3:d7:60:8a:b2:46:3b:6f:89:10:c9:b7:1f:04:a3:30: 37:a3:e3:b8:0f:4c:85:31:c4:fe:6e:a7:58:ac:50:f9:65:2c: f5:dc:8c:48:e8:e5:79:5e:f6:60:d0:0d:92:0b:0c:28:ef:45: b1:6d:ac:e0:88:7b:54:fe:ce:76:79:09:1a:ae:30:0f:8f:84: 88:74:f9:ca:ad:57:c6:06:76:d6:21:20:bd:bc:82:6d:20:27: ab:b4:d9:c2:ac:b9:43:4b:0b:7e:02:db:87:af:c8:04:68:16: e4:25:05:a6:9f:9e:5f:55:ff:a3:ba:d9:72:36:71:dc:91:6d: 2d:95:15:da:47:c4:9a:6f:b6:d5:0d:a0:06:de:74:5f:0f:43: e3:97:54:fe:14:a9:7e:7a:74:8b:88:e5:e4:35:14:08:1a:bd: cb:3a:b5:76:6a:e2:2a:62:09:9c:7c:5c:22:18:d3:63:98:e5: bd:2c:a6:a7:57:2f:47:30:c1:3f:44:f3:75:b9:4b:f2:e3:08: a3:a9:59:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZ2zxQ5ehLj4WGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MjFjNzdkMDktMzY4YS00NmIyLTlkM2UtMWIyNjUxNzczOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNEcq3YG431MEy54U+IViXg28OIRGlKvMqPP Idh7uDDow84O5mCsQfsfm80MRfN9SCYQMVN25vvsoSrQy6CGKDrkbA9f4QampnlS OdKw3jTD70MJ9QmUJxdQ7vB+ytdPt42VK1rGojePIqiNV3L8LMhiI1rG+b8dzxXB qxAJAj0JeEJL//X++uo8Uq4lbNNV0zHEsIMLJGjNfRhBunkIhs/2SvXZhh0Qt5rn o7/zOsAda7KuFwQ4+cCoB3ZNw7oDUmC4jLos12u7udMC/cTu1j7+vzkE5zFpVjH7 v3cX+X8SegXHFdiMqDvJkP9BhfWV7SfK1bhztRteFBmlXfcWhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGqwZ0QcybxlegMsw1BZ6gth/BktMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjU5NTJiOTItN2ExMC0z YzYzLThiMmEtM2NmYjBhMmQzNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKTJdNMFsJYuALJACoD+lpMITy5BoG71fmdtUtGOYvPXe+XEu9sC khdZCaqwcYVIgu5mZXtd7ULoo9dgirJGO2+JEMm3HwSjMDej47gPTIUxxP5up1is UPllLPXcjEjo5Xle9mDQDZILDCjvRbFtrOCIe1T+znZ5CRquMA+PhIh0+cqtV8YG dtYhIL28gm0gJ6u02cKsuUNLC34C24evyARoFuQlBaafnl9V/6O62XI2cdyRbS2V FdpHxJpvttUNoAbedF8PQ+OXVP4UqX56dIuI5eQ1FAgavcs6tXZq4ipiCZx8XCIY 02OY5b0spqdXL0cwwT9E83W5S/LjCKOpWb8= -----END CERTIFICATE-----Generated at Wed Oct 29 09:20:51 2025 by rpki-client