$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00680403-9fae-3f18-9f4e-6326e44ff68b.roa File: 00680403-9fae-3f18-9f4e-6326e44ff68b.roa (raw, json) Hash identifier: kn2hFzh/2KGBCA/u42GmOZ+WThie89x5Wyp+lTMl1mU= Subject key identifier: 37:39:11:33:A3:C1:6A:91:73:A8:5B:99:80:1A:E4:7B:A0:36:00:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C6784D033B644A6E1EE0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00680403-9fae-3f18-9f4e-6326e44ff68b.roa Signing time: Thu 21 Aug 2025 12:31:03 +0000 ROA not before: Thu 21 Aug 2025 12:31:03 +0000 ROA not after: Wed 19 Nov 2025 13:31:03 +0000 asID: 396611 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c6:78:4d:03:3b:64:4a:6e:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:03 2025 GMT Not After : Nov 19 13:31:03 2025 GMT Subject: CN=0711380a-d9b7-4396-995b-2b1363f986a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:40:eb:6b:45:22:d6:08:f1:e1:a5:2e:97:6f: 3b:d8:35:08:6a:b8:25:da:f1:74:73:49:e1:9e:b7: 0f:f5:a2:60:52:fc:a9:f5:49:64:18:c2:23:36:b3: f5:21:5f:b2:6a:3d:79:5d:c0:db:cb:39:96:72:49: 38:14:2e:cd:b7:a1:d5:bb:9a:ac:8a:a3:5b:41:50: d0:20:ae:45:9d:08:bc:f4:96:c5:44:74:9f:a2:c1: 65:21:02:85:0d:7e:5d:10:ff:65:bc:be:bf:81:9d: ae:d8:2d:3c:57:32:4a:a7:cf:81:86:3f:d7:cb:20: e6:15:75:b2:07:51:b4:77:ff:22:33:af:d1:e9:aa: c0:52:01:ce:87:a7:1c:68:61:af:af:13:70:e8:34: 33:51:f6:94:c6:1b:5f:ad:58:c6:cc:f0:45:7e:6e: ad:ad:d3:ca:f0:90:3f:c2:7b:5d:0d:da:ca:91:ab: 5f:41:de:99:01:3c:98:7a:2e:1f:37:39:9e:4f:19: b4:e1:a1:22:6f:01:dd:16:53:2a:1b:9b:49:2b:55: bc:ac:25:25:87:1c:69:43:07:95:0d:b0:81:1d:82: 1e:ca:aa:5d:e3:f3:e0:26:0d:75:7d:21:24:23:c4: d4:bb:4b:40:a9:74:41:7a:9e:9e:2e:2c:9c:b5:1a: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:39:11:33:A3:C1:6A:91:73:A8:5B:99:80:1A:E4:7B:A0:36:00:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00680403-9fae-3f18-9f4e-6326e44ff68b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4e:3d:6d:96:bc:36:a7:3a:aa:22:10:1e:ba:69:17:c5:a1: 22:b6:81:cd:41:97:5e:9b:46:06:28:03:6d:d0:c5:51:79:60: 1e:07:73:28:7d:99:5f:a9:f5:ae:42:96:86:7d:7b:73:e4:be: 69:64:d5:0b:dd:ff:86:28:f2:47:23:67:6b:47:01:a2:a8:26: 5a:5a:f1:23:d8:d6:9a:8f:e5:71:30:f4:89:e8:9f:ce:fc:32: 70:f5:da:eb:6b:a0:fa:1a:93:7b:b5:bf:12:19:ba:2a:96:c8: 8c:78:9c:83:1f:88:16:9b:55:65:7c:61:bb:6c:57:25:dd:be: b6:24:3b:87:4c:e2:79:33:3d:3b:34:e4:67:0e:aa:f9:c4:1d: 0e:fe:39:1d:9e:41:51:ca:b8:4f:5e:56:44:5a:58:c5:23:80: 42:c8:20:6d:a7:eb:09:8b:b6:29:90:fe:a9:a1:c8:a0:76:c1: 2c:7a:35:78:a3:87:3b:d4:d9:0a:f9:65:22:3e:45:e5:b6:ce: 0b:ac:09:80:b0:2a:b2:64:1a:89:61:fd:fa:54:51:cb:0d:7e: 32:a0:34:c2:f2:3a:f0:10:f8:c4:42:a2:3a:f9:49:49:da:0a: d8:ce:de:a9:55:a4:be:ba:30:e9:7d:15:39:84:e1:71:8c:8f: 3f:7e:21:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8Z4TQM7ZEpuHuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwM1oXDTI1MTExOTEzMzEwM1owLzEtMCsGA1UEAxMk MDcxMTM4MGEtZDliNy00Mzk2LTk5NWItMmIxMzYzZjk4NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EDra0Ui1gjx4aUul2872DUIargl2vF0c0nh nrcP9aJgUvyp9UlkGMIjNrP1IV+yaj15XcDbyzmWckk4FC7Nt6HVu5qsiqNbQVDQ IK5FnQi89JbFRHSfosFlIQKFDX5dEP9lvL6/gZ2u2C08VzJKp8+Bhj/XyyDmFXWy B1G0d/8iM6/R6arAUgHOh6ccaGGvrxNw6DQzUfaUxhtfrVjGzPBFfm6trdPK8JA/ wntdDdrKkatfQd6ZATyYei4fNzmeTxm04aEibwHdFlMqG5tJK1W8rCUlhxxpQweV DbCBHYIeyqpd4/PgJg11fSEkI8TUu0tAqXRBep6eLiyctRrXtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDc5ETOjwWqRc6hbmYAa5HugNgD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDA2ODA0MDMtOWZhZS0z ZjE4LTlmNGUtNjMyNmU0NGZmNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGROPW2WvDanOqoiEB66aRfFoSK2gc1Bl16bRgYoA23QxVF5YB4H cyh9mV+p9a5CloZ9e3Pkvmlk1Qvd/4Yo8kcjZ2tHAaKoJlpa8SPY1pqP5XEw9Ino n878MnD12utroPoak3u1vxIZuiqWyIx4nIMfiBabVWV8YbtsVyXdvrYkO4dM4nkz PTs05GcOqvnEHQ7+OR2eQVHKuE9eVkRaWMUjgELIIG2n6wmLtimQ/qmhyKB2wSx6 NXijhzvU2Qr5ZSI+ReW2zgusCYCwKrJkGolh/fpUUcsNfjKgNMLyOvAQ+MRCojr5 SUnaCtjO3qlVpL66MOl9FTmE4XGMjz9+IVM= -----END CERTIFICATE-----Generated at Sat Aug 23 18:39:10 2025 by rpki-client