$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f98fb75e-ea7c-3119-acb5-dee95e24e1c1.roa File: f98fb75e-ea7c-3119-acb5-dee95e24e1c1.roa (raw, json) Hash identifier: 60jIvWVjOn8u7TEw4rumEhknNoQg49LU9IAD13/yTWg= Subject key identifier: F2:39:E6:43:8C:85:65:92:44:18:59:BE:7F:C2:45:52:E3:37:45:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C2E3B4DEC728C5C610B40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f98fb75e-ea7c-3119-acb5-dee95e24e1c1.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 397205 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2e:3b:4d:ec:72:8c:5c:61:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=84754536-c32f-4a76-9612-50cd9a14aeb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e0:b3:fc:a7:c4:60:d4:f3:37:2e:44:10:b9: de:28:35:b2:6e:1c:aa:ed:87:e4:e9:ac:d7:22:77: ae:f2:9e:56:64:2b:06:f5:09:1d:16:48:d1:68:93: 28:c5:55:8e:6b:26:9b:3a:1b:10:d9:39:1a:8e:48: cc:80:32:fd:c9:48:ca:43:78:ac:c3:e4:4d:8a:a9: 65:c4:e6:6e:35:03:a5:90:70:fb:e4:81:b6:96:36: 39:c3:29:de:97:40:13:3a:ac:2f:8e:c3:91:2c:da: d2:e8:8b:ac:9a:97:5c:31:e1:23:b1:65:d6:d9:74: 9a:ad:7a:a0:1d:22:8e:27:39:59:e5:2e:42:d9:7c: 2f:9e:57:b9:c4:96:ad:6e:e1:be:bb:30:2c:08:44: ad:da:6d:8b:bf:0d:70:a7:63:f4:a0:a1:c7:3f:ec: 22:ec:ec:98:66:87:5a:47:1e:54:e7:42:2a:7d:e3: 7d:4c:0d:7c:ae:fd:f5:e8:37:a5:d0:f9:1b:10:27: ec:5b:9c:c6:d7:27:72:26:94:13:2d:a8:1f:1d:cf: 5a:5f:f2:94:e9:15:2e:ab:7c:96:0d:45:cb:17:63: f0:2e:82:38:62:0a:eb:96:4e:79:8c:fd:68:86:e4: 72:99:02:a0:09:8f:53:39:ee:c9:43:a9:ca:94:49: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:39:E6:43:8C:85:65:92:44:18:59:BE:7F:C2:45:52:E3:37:45:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f98fb75e-ea7c-3119-acb5-dee95e24e1c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:8b:5b:7e:85:59:e8:44:8e:f2:47:cc:04:2d:19:e6:b4:20: 87:50:81:cd:c3:8e:98:b4:cb:dd:83:4a:bd:32:8e:2c:b8:cc: fa:c1:15:33:d6:00:5b:1e:3c:46:3f:3d:12:f8:4a:30:7d:52: f7:7c:12:27:b3:eb:f0:cb:3d:b6:f2:6d:fd:cb:b3:f9:2d:70: 64:f7:3c:ab:9b:db:a6:e7:49:f5:af:d8:a8:31:7a:64:f5:22: d4:3a:a4:39:c5:10:0f:c8:83:b1:7f:bf:39:eb:68:59:b1:b2: 75:c4:0a:06:26:67:1a:f2:0c:90:ab:48:4c:9a:6e:e1:c9:74: a3:69:2a:1b:70:fd:d6:f1:13:10:64:ea:44:67:7e:8d:e8:59: 91:15:6f:68:46:c1:cb:a9:08:6d:53:e2:87:a3:23:54:5a:e3: 8a:a3:21:03:39:da:2b:ab:68:34:83:e6:aa:e4:36:e2:5d:a8: 85:b7:63:6b:5a:8a:80:62:4e:25:c8:82:64:e8:14:0e:15:11: 42:cb:a3:ce:85:1a:89:51:5f:0a:5f:51:31:97:b9:ae:9f:32: 24:29:fd:25:dc:45:14:57:0e:b0:8d:c7:a9:74:d0:71:16:e7: 78:1a:8c:c0:00:fe:fc:61:33:4b:f7:89:bb:7d:ef:b3:ea:c6: 12:05:f2:c2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATC47TexyjFxhC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk ODQ3NTQ1MzYtYzMyZi00YTc2LTk2MTItNTBjZDlhMTRhZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+Cz/KfEYNTzNy5EELneKDWybhyq7Yfk6azX Ineu8p5WZCsG9QkdFkjRaJMoxVWOayabOhsQ2TkajkjMgDL9yUjKQ3isw+RNiqll xOZuNQOlkHD75IG2ljY5wynel0ATOqwvjsORLNrS6IusmpdcMeEjsWXW2XSarXqg HSKOJzlZ5S5C2Xwvnle5xJatbuG+uzAsCESt2m2Lvw1wp2P0oKHHP+wi7OyYZoda Rx5U50IqfeN9TA18rv316Del0PkbECfsW5zG1ydyJpQTLagfHc9aX/KU6RUuq3yW DUXLF2PwLoI4Ygrrlk55jP1ohuRymQKgCY9TOe7JQ6nKlEmPMQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPI55kOMhWWSRBhZvn/CRVLjN0UsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk4ZmI3NWUtZWE3Yy0z MTE5LWFjYjUtZGVlOTVlMjRlMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCii1t+hVnoRI7yR8wELRnmtCCHUIHNw46YtMvd g0q9Mo4suMz6wRUz1gBbHjxGPz0S+EowfVL3fBIns+vwyz228m39y7P5LXBk9zyr m9um50n1r9ioMXpk9SLUOqQ5xRAPyIOxf78562hZsbJ1xAoGJmca8gyQq0hMmm7h yXSjaSobcP3W8RMQZOpEZ36N6FmRFW9oRsHLqQhtU+KHoyNUWuOKoyEDOdorq2g0 g+aq5DbiXaiFt2NrWoqAYk4lyIJk6BQOFRFCy6POhRqJUV8KX1Exl7munzIkKf0l 3EUUVw6wjcepdNBxFud4GozAAP78YTNL94m7fe+z6sYSBfLC -----END CERTIFICATE-----Generated at Wed Sep 10 17:48:11 2025 by rpki-client