$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb43f9da-0705-3e47-8855-86121d15a6f8.roa File: fb43f9da-0705-3e47-8855-86121d15a6f8.roa (raw, json) Hash identifier: /Knm2zgv8zRPnH60GG8NPt/3CTZBR4nx4o96kpr2ScU= Subject key identifier: A6:3E:14:85:72:51:88:19:C0:F7:1B:92:9A:0D:3A:53:66:61:17:1F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF25693E587B817C977A6D480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb43f9da-0705-3e47-8855-86121d15a6f8.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396604 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:93:e5:87:b8:17:c9:77:a6:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=37237485-352a-4e87-84d8-a51f32e7367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:05:da:ac:ad:3a:27:51:ae:c8:3f:ca:cd:9b: d3:2e:01:6b:d5:a7:8e:bc:e6:d1:e8:7b:3c:22:98: 68:1e:78:fa:9f:a3:9d:49:7e:62:b3:47:7a:c4:b5: 77:33:82:64:7a:25:c6:2e:80:36:db:17:60:a2:ef: 12:ca:69:e1:a9:ab:d9:5a:47:b7:41:39:04:68:f7: cd:4a:54:46:60:ac:f4:a7:cd:2a:b6:8f:fa:93:53: 5b:52:2e:b4:bf:ce:65:db:ff:70:92:2c:03:ae:34: dd:3a:6b:3d:47:58:0f:68:82:94:cb:72:a3:2b:6d: 2c:4b:b6:c9:85:7c:32:9d:52:eb:0e:fa:d0:d7:f8: 22:d6:8c:1f:6f:ef:db:bb:79:02:5d:89:6f:c5:68: 60:bb:a7:69:19:1c:1b:7b:45:c4:b3:53:a6:0e:34: 54:4d:ba:0e:15:09:15:6f:f0:78:cf:49:80:de:6d: cc:42:f6:39:3e:3b:3c:1d:86:1b:b2:99:24:cd:73: 95:4d:72:a5:09:2e:da:9a:44:6d:dc:ef:0b:35:8a: a4:f6:32:bd:20:90:53:f3:2f:bb:b4:7a:d9:63:6a: 9f:e5:e5:0b:29:ce:05:4c:b5:5a:68:a6:cd:ff:ad: 50:72:98:6b:64:29:d3:bd:20:27:e8:c3:41:64:eb: 83:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3E:14:85:72:51:88:19:C0:F7:1B:92:9A:0D:3A:53:66:61:17:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb43f9da-0705-3e47-8855-86121d15a6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1c:0a:2b:63:f5:ca:c7:3c:8e:55:e6:a6:87:aa:b7:8d:a5: 87:4b:27:b4:20:85:13:82:fb:17:23:45:70:22:f8:3f:d3:0e: e8:ca:f6:a8:25:b1:87:d0:90:ea:51:6f:28:2e:e5:81:ed:2e: 59:97:ee:55:0a:63:2f:8f:2d:15:0c:35:26:79:b8:ee:59:75: 66:20:c5:9e:3d:c9:37:74:0b:6d:9a:6e:9a:dd:7a:a9:b2:4c: 16:73:62:6e:7f:72:ef:2b:67:02:75:ee:0e:be:21:7d:aa:06: 9c:99:bc:ea:2a:ad:d7:e8:d0:aa:f8:95:4a:7b:3a:41:fd:f8: 3f:c2:01:11:2b:ea:86:82:31:81:f3:e0:39:3d:5a:a9:2f:87: 01:84:77:ab:15:4f:3f:2f:d8:d7:f8:40:90:fc:b2:ec:88:b3: dc:e8:db:b8:4a:46:d4:37:46:10:95:90:67:2b:d0:7f:a9:c0: d7:3b:a8:0a:6c:7c:1c:06:19:6c:df:81:1c:e6:94:08:c8:34: 76:6a:c1:18:fb:49:da:9b:5f:c1:78:bb:2e:f5:5c:02:b7:5c: 60:85:f9:82:85:b1:e0:50:29:8d:28:32:23:51:73:25:48:dd: e7:ae:0c:17:0c:24:bb:ca:2e:36:3f:4b:07:05:42:57:ef:1e: 33:fb:b4:c0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpPlh7gXyXem1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzcyMzc0ODUtMzUyYS00ZTg3LTg0ZDgtYTUxZjMyZTczNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAXarK06J1GuyD/KzZvTLgFr1aeOvObR6Hs8 IphoHnj6n6OdSX5is0d6xLV3M4JkeiXGLoA22xdgou8SymnhqavZWke3QTkEaPfN SlRGYKz0p80qto/6k1NbUi60v85l2/9wkiwDrjTdOms9R1gPaIKUy3KjK20sS7bJ hXwynVLrDvrQ1/gi1owfb+/bu3kCXYlvxWhgu6dpGRwbe0XEs1OmDjRUTboOFQkV b/B4z0mA3m3MQvY5Pjs8HYYbspkkzXOVTXKlCS7amkRt3O8LNYqk9jK9IJBT8y+7 tHrZY2qf5eULKc4FTLVaaKbN/61QcphrZCnTvSAn6MNBZOuDdQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKY+FIVyUYgZwPcbkpoNOlNmYRcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmI0M2Y5ZGEtMDcwNS0z ZTQ3LTg4NTUtODYxMjFkMTVhNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBgHAorY/XKxzyOVeamh6q3jaWHSye0IIUTgvsX I0VwIvg/0w7oyvaoJbGH0JDqUW8oLuWB7S5Zl+5VCmMvjy0VDDUmebjuWXVmIMWe Pck3dAttmm6a3XqpskwWc2Juf3LvK2cCde4OviF9qgacmbzqKq3X6NCq+JVKezpB /fg/wgERK+qGgjGB8+A5PVqpL4cBhHerFU8/L9jX+ECQ/LLsiLPc6Nu4SkbUN0YQ lZBnK9B/qcDXO6gKbHwcBhls34Ec5pQIyDR2asEY+0nam1/BeLsu9VwCt1xghfmC hbHgUCmNKDIjUXMlSN3nrgwXDCS7yi42P0sHBUJX7x4z+7TA -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:03 2025 by rpki-client