$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09d3379a-0cb7-3f68-8749-e174f7116679.roa File: 09d3379a-0cb7-3f68-8749-e174f7116679.roa (raw, json) Hash identifier: uvSBCJfWpmxcsDxZj2VC5ve22hLaGt4Ly+1e5PtTyJs= Subject key identifier: 49:EC:15:86:DF:A3:D2:C1:E4:5A:2C:A8:26:4B:70:9E:4A:00:0E:A3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEB8B944AEFFE97724D6F2B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09d3379a-0cb7-3f68-8749-e174f7116679.roa Signing time: Wed 20 Aug 2025 14:36:58 +0000 ROA not before: Wed 20 Aug 2025 14:36:58 +0000 ROA not after: Tue 18 Nov 2025 15:36:58 +0000 asID: 397205 IP address blocks: 2001:502:7094::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:8b:94:4a:ef:fe:97:72:4d:6f:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 14:36:58 2025 GMT Not After : Nov 18 15:36:58 2025 GMT Subject: CN=cfefd401-cc9e-4ccf-ac19-f65fac04f57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:10:91:65:44:5e:11:0e:45:66:ae:58:42: 1d:a3:36:2c:b9:ef:62:6f:da:ab:62:1d:eb:4c:eb: e3:3a:87:ca:a6:a8:96:3e:62:f7:15:a3:7b:dd:27: 13:fa:50:4b:b1:4e:4e:da:18:fe:03:74:92:87:cc: ed:df:b1:47:5e:dc:9f:ee:bf:02:dc:56:cc:15:82: 01:7f:1c:50:27:bd:11:3c:7c:fb:0f:7c:3e:de:4f: 02:d3:6c:9d:be:c5:c9:15:80:70:37:4c:74:ca:eb: 19:ec:88:a5:13:ea:16:f1:af:7d:dd:cc:49:b9:33: 34:34:ca:77:c0:c9:5f:e8:98:c2:d9:a2:ab:17:cc: 04:95:3b:17:40:53:0b:13:a9:43:16:05:3a:24:38: ea:07:87:86:74:14:6a:a4:53:92:37:7c:98:68:77: f0:a7:26:56:fe:f0:e5:a5:26:2d:8c:4e:13:f4:cc: c5:e5:ea:9b:b8:11:af:7b:e9:f3:e7:15:e1:8d:43: ed:83:67:b9:32:41:05:f7:a6:da:57:6c:3b:d2:ed: e5:27:1e:97:1c:82:28:10:c8:c1:a8:2a:d6:f2:7a: 2b:86:f4:6a:4b:34:7c:86:fd:53:a8:0e:60:72:9e: 7e:48:78:9c:d0:d1:1c:8d:ec:a0:4d:2b:e2:0c:24: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EC:15:86:DF:A3:D2:C1:E4:5A:2C:A8:26:4B:70:9E:4A:00:0E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09d3379a-0cb7-3f68-8749-e174f7116679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1a:b0:d9:65:a5:36:b4:89:39:86:d7:e3:d4:83:a1:f6:9e: c6:ed:72:00:c4:70:e5:ba:e4:4e:d6:6c:88:7d:68:6a:ac:53: e6:2a:51:ab:78:bf:af:d5:99:a4:2d:d0:ce:67:ab:b1:5c:ae: 7c:ff:cf:93:fb:5d:4c:34:90:2e:f6:d3:f7:2e:ac:55:2c:e0: d9:05:db:15:31:72:e4:77:bf:67:84:3b:f5:94:2d:8c:0b:f1: ae:b1:7a:12:ab:f4:62:91:ba:15:89:e5:1b:f0:71:9b:0c:e4: 47:87:5d:3c:12:f3:67:72:9d:05:15:80:9e:86:55:d2:bf:e0: ce:a3:67:fe:82:42:98:93:a6:d5:ff:2e:66:0d:13:42:d2:ac: d6:69:73:7b:d0:3b:09:65:bf:be:51:97:62:81:6d:3c:79:ed: f4:92:e8:76:ae:bd:1a:e7:9b:8e:1c:cf:e3:50:34:e3:1b:1b: 6a:d4:00:90:21:d8:05:3c:8d:f9:df:97:e1:32:71:5d:c7:c9: e7:ff:e2:a7:0b:95:34:ab:aa:ed:b1:ff:15:73:1f:80:75:5b: 95:a1:70:4e:5a:38:b0:73:20:b1:ed:89:2e:0c:a9:81:f7:e7: 35:3c:34:0a:46:4e:84:2d:c7:04:19:58:1d:d4:56:ff:85:f4: a4:d2:d1:3e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErri5RK7/6Xck1vKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDE0MzY1OFoXDTI1MTExODE1MzY1OFowLzEtMCsGA1UEAxMk Y2ZlZmQ0MDEtY2M5ZS00Y2NmLWFjMTktZjY1ZmFjMDRmNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD8QkWVEXhEORWauWEIdozYsue9ib9qrYh3r TOvjOofKpqiWPmL3FaN73ScT+lBLsU5O2hj+A3SSh8zt37FHXtyf7r8C3FbMFYIB fxxQJ70RPHz7D3w+3k8C02ydvsXJFYBwN0x0yusZ7IilE+oW8a993cxJuTM0NMp3 wMlf6JjC2aKrF8wElTsXQFMLE6lDFgU6JDjqB4eGdBRqpFOSN3yYaHfwpyZW/vDl pSYtjE4T9MzF5eqbuBGve+nz5xXhjUPtg2e5MkEF96baV2w70u3lJx6XHIIoEMjB qCrW8norhvRqSzR8hv1TqA5gcp5+SHic0NEcjeygTSviDCQ6dwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEnsFYbfo9LB5FosqCZLcJ5KAA6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDlkMzM3OWEtMGNiNy0z ZjY4LTg3NDktZTE3NGY3MTE2Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBEGrDZZaU2tIk5htfj1IOh9p7G7XIAxHDluuRO 1myIfWhqrFPmKlGreL+v1ZmkLdDOZ6uxXK58/8+T+11MNJAu9tP3LqxVLODZBdsV MXLkd79nhDv1lC2MC/GusXoSq/RikboVieUb8HGbDORHh108EvNncp0FFYCehlXS v+DOo2f+gkKYk6bV/y5mDRNC0qzWaXN70DsJZb++UZdigW08ee30kuh2rr0a55uO HM/jUDTjGxtq1ACQIdgFPI3535fhMnFdx8nn/+KnC5U0q6rtsf8Vcx+AdVuVoXBO WjiwcyCx7YkuDKmB9+c1PDQKRk6ELccEGVgd1Fb/hfSk0tE+ -----END CERTIFICATE-----Generated at Sat Aug 23 13:15:40 2025 by rpki-client