$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0c3693-f48e-32e1-84ca-bdccddaf17fd.roa File: fa0c3693-f48e-32e1-84ca-bdccddaf17fd.roa (raw, json) Hash identifier: W1YhwAdKm3noEjY8ZtWAZRwL0cT1kmHoO719gQ9b3nU= Subject key identifier: 67:80:F6:11:B9:67:BB:68:2E:A3:DE:72:FF:19:90:C5:3E:88:BB:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DCE6347D9B24C7E3516C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0c3693-f48e-32e1-84ca-bdccddaf17fd.roa Signing time: Tue 26 Aug 2025 12:32:17 +0000 ROA not before: Tue 26 Aug 2025 12:32:17 +0000 ROA not after: Mon 24 Nov 2025 13:32:17 +0000 asID: 396591 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:ce:63:47:d9:b2:4c:7e:35:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:17 2025 GMT Not After : Nov 24 13:32:17 2025 GMT Subject: CN=26d612fa-c2fc-441a-abfe-6c6e7280e9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:66:6e:c5:d5:20:ba:50:a5:08:f9:0a:da: b0:b3:ac:4e:af:1f:d3:13:2b:fc:e6:d0:cf:c7:89: cd:c3:24:2f:f0:49:1c:ab:00:2e:54:0e:1d:67:f4: 30:e0:20:1f:01:6c:8f:ef:98:d5:64:ed:12:7e:9c: b6:2e:e3:2e:4f:05:5e:0a:d2:3a:d0:2b:e9:1c:92: c9:a1:b9:a0:d5:08:2d:4f:24:1c:7c:cc:f0:58:5a: a3:ec:53:47:e6:c5:e6:6a:95:6d:3d:6e:a4:b1:62: 32:7a:19:3f:eb:e5:5c:ff:83:56:4c:0d:f9:09:a8: 6e:4f:32:c6:96:da:28:2b:50:89:74:a7:a6:c7:e3: b4:5b:af:11:42:9f:8e:fd:90:ed:8e:f1:2a:84:a8: 8f:94:f9:c3:f0:9f:64:65:4d:b2:f5:0e:dc:a6:3b: 32:79:54:47:98:13:92:22:a1:ca:3a:f6:8d:7f:52: 15:40:4a:0f:19:e8:06:35:c5:60:ce:99:24:b8:21: b9:da:4e:b1:3f:8a:89:54:9a:37:b5:36:63:2a:d2: 61:e6:44:5b:fd:50:fc:85:9e:b6:60:ed:c0:e9:ec: 73:58:d9:1b:d5:84:0e:4b:20:84:f3:64:1e:e5:46: 8c:29:8c:ee:a1:33:29:a6:ac:35:f9:d6:48:75:19: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:F6:11:B9:67:BB:68:2E:A3:DE:72:FF:19:90:C5:3E:88:BB:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa0c3693-f48e-32e1-84ca-bdccddaf17fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c9:c4:2f:6b:67:7c:93:ca:bd:62:ef:67:50:95:64:29:78: a7:df:d7:00:4d:aa:68:ff:c1:ab:cc:da:fa:ad:fb:a8:2a:13: 1c:92:8a:75:35:4d:b2:2f:df:17:ed:d9:7e:84:77:8a:61:82: b1:c0:83:5b:64:b4:18:98:95:8f:bd:4f:88:44:5f:a9:d2:b0: f7:18:69:77:b4:6d:01:af:f8:65:9e:28:d6:e7:a1:80:f2:40: eb:5f:ae:68:44:05:b4:d3:2f:7e:5e:c3:af:48:fe:4e:f0:fa: 39:1a:c6:70:a2:be:77:38:88:49:5d:97:7f:f1:52:84:b1:4e: 6c:e6:7e:65:6a:a8:7d:fb:30:a9:04:94:58:97:d5:42:60:17: 6d:13:11:44:1d:ba:30:07:b7:9a:36:c7:77:0b:24:00:23:80: ec:7c:4a:f1:f0:52:12:6f:ef:cc:58:86:54:35:8d:65:7d:fe: 18:52:f8:20:e4:38:d0:f1:0a:98:d1:40:4b:9f:8b:75:c2:71: d5:29:8a:78:6f:15:7d:79:46:d1:bd:c5:f3:54:c1:97:c4:bc: 67:fd:eb:14:45:d7:29:a9:11:45:b2:84:e1:ec:43:c8:11:18: 49:a5:aa:eb:e3:2c:f5:89:55:b4:d4:55:e2:ec:15:58:cb:28: ea:25:c0:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8Dc5jR9myTH41FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxN1oXDTI1MTEyNDEzMzIxN1owLzEtMCsGA1UEAxMk MjZkNjEyZmEtYzJmYy00NDFhLWFiZmUtNmM2ZTcyODBlOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQJmbsXVILpQpQj5Ctqws6xOrx/TEyv85tDP x4nNwyQv8EkcqwAuVA4dZ/Qw4CAfAWyP75jVZO0Sfpy2LuMuTwVeCtI60CvpHJLJ obmg1QgtTyQcfMzwWFqj7FNH5sXmapVtPW6ksWIyehk/6+Vc/4NWTA35CahuTzLG ltooK1CJdKemx+O0W68RQp+O/ZDtjvEqhKiPlPnD8J9kZU2y9Q7cpjsyeVRHmBOS IqHKOvaNf1IVQEoPGegGNcVgzpkkuCG52k6xP4qJVJo3tTZjKtJh5kRb/VD8hZ62 YO3A6exzWNkb1YQOSyCE82Qe5UaMKYzuoTMppqw1+dZIdRnMcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGeA9hG5Z7toLqPecv8ZkMU+iLvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmEwYzM2OTMtZjQ4ZS0z MmUxLTg0Y2EtYmRjY2RkYWYxN2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDJxC9rZ3yTyr1i72dQlWQpeKff1wBNqmj/wavM2vqt+6gqExyS inU1TbIv3xft2X6Ed4phgrHAg1tktBiYlY+9T4hEX6nSsPcYaXe0bQGv+GWeKNbn oYDyQOtfrmhEBbTTL35ew69I/k7w+jkaxnCivnc4iEldl3/xUoSxTmzmfmVqqH37 MKkElFiX1UJgF20TEUQdujAHt5o2x3cLJAAjgOx8SvHwUhJv78xYhlQ1jWV9/hhS +CDkONDxCpjRQEufi3XCcdUpinhvFX15RtG9xfNUwZfEvGf96xRF1ympEUWyhOHs Q8gRGEmlquvjLPWJVbTUVeLsFVjLKOolwGQ= -----END CERTIFICATE-----Generated at Wed Sep 10 17:57:41 2025 by rpki-client