$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa File: 23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa (raw, json) Hash identifier: FkmZrnwSYRntsJcQ2DJLF1+oaegduY6hDmk+a/Qrmh8= Subject key identifier: 75:AB:00:8C:AA:39:63:5B:5C:A3:18:86:94:2E:1F:6C:E1:1C:CA:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2CF714FF42E67C69526FFC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 396565 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:14:ff:42:e6:7c:69:52:6f:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=faa0b90f-1558-429c-b5a4-c04c93f06440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:18:5a:23:e8:65:01:f1:e2:20:90:04:0c:c9: ad:57:dc:2a:64:9e:03:9a:61:64:31:38:da:bd:cc: 6f:90:6b:31:51:f4:71:39:9f:c5:f1:a1:1d:60:bf: c9:de:30:42:89:eb:97:81:99:e3:07:13:9a:87:0d: 84:63:80:30:b2:81:17:c7:7b:f9:0d:3a:98:90:82: 95:87:84:a5:25:e2:54:12:d8:a6:ea:23:34:8d:11: 69:b3:97:e3:a6:ff:3c:0a:7e:13:e7:ba:81:65:e1: 9a:e1:5a:ec:76:84:19:e6:ff:e6:bc:02:31:ac:06: 13:9f:12:08:12:f0:44:6d:13:f8:28:b7:4b:be:5f: b8:57:0c:e3:cc:ba:f4:22:04:a5:81:eb:08:ce:a1: 4d:62:26:9c:96:22:38:1e:5a:60:70:ba:b1:d1:85: 0d:0b:31:c9:83:c5:2a:7e:4d:37:18:1a:5f:02:8e: 8c:a0:be:b4:d3:1b:26:01:87:6f:34:4f:db:eb:bb: 9e:86:ba:b5:87:52:9e:b1:2c:40:ac:5c:ce:4e:c8: 11:8b:08:48:42:33:80:60:a9:4f:41:b5:39:ae:6b: 5c:41:9d:64:7b:f3:08:37:33:d0:5a:ab:6f:7c:6a: 33:18:9d:51:96:11:ff:f5:cb:ac:e5:5c:26:1a:45: 5e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AB:00:8C:AA:39:63:5B:5C:A3:18:86:94:2E:1F:6C:E1:1C:CA:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ada0bf-d49e-3d2b-8dca-4af0fdfb5698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:8c:5e:4a:75:a6:eb:dd:60:73:0a:79:9c:bb:e3:ba:fa:0c: 03:35:99:37:5b:d6:37:aa:05:fd:e3:17:12:dc:d7:0d:44:82: 7a:46:b8:af:e7:ed:70:1f:4c:67:0c:d6:51:32:f9:7f:2c:43: 8a:5a:f3:69:f2:c7:38:d8:9b:bf:ca:3e:b2:8a:c7:c1:5d:14: cf:26:cc:fe:f6:36:93:a2:61:11:14:46:61:3e:d8:3a:da:97: 4c:f7:92:5a:0d:ba:27:19:26:cb:9e:e7:74:ee:60:60:01:ce: 92:6b:c2:31:77:2f:ce:cd:d8:b1:17:a6:b6:63:76:10:38:20: 68:26:fa:7c:f8:4a:77:50:99:4c:a9:c1:ed:db:78:bf:a1:fd: 04:5b:eb:ac:c7:24:55:ed:3f:bc:0c:67:67:93:f4:9b:b5:af: 24:15:18:86:62:e8:c6:00:fa:44:92:12:9a:64:b5:9b:c1:bf: 81:6b:72:6b:05:20:33:a6:a1:08:46:18:bd:a5:9f:c0:a0:e2: dc:0c:d2:f5:c5:45:56:3e:c3:fa:e5:6c:64:4d:80:c4:8b:bc: 42:13:e9:6c:e1:d1:57:89:d0:d0:f4:1b:aa:30:c4:7f:b3:26: 69:12:f6:5f:7c:e7:f7:3e:39:98:92:75:82:ea:29:5d:54:2c: 15:bd:86:b2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEss9xT/QuZ8aVJv/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmFhMGI5MGYtMTU1OC00MjljLWI1YTQtYzA0YzkzZjA2NDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBhaI+hlAfHiIJAEDMmtV9wqZJ4DmmFkMTja vcxvkGsxUfRxOZ/F8aEdYL/J3jBCieuXgZnjBxOahw2EY4AwsoEXx3v5DTqYkIKV h4SlJeJUEtim6iM0jRFps5fjpv88Cn4T57qBZeGa4VrsdoQZ5v/mvAIxrAYTnxII EvBEbRP4KLdLvl+4VwzjzLr0IgSlgesIzqFNYiacliI4HlpgcLqx0YUNCzHJg8Uq fk03GBpfAo6MoL600xsmAYdvNE/b67uehrq1h1KesSxArFzOTsgRiwhIQjOAYKlP QbU5rmtcQZ1ke/MINzPQWqtvfGozGJ1RlhH/9cus5VwmGkVeFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHWrAIyqOWNbXKMYhpQuH2zhHMpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNhZGEwYmYtZDQ5ZS0z ZDJiLThkY2EtNGFmMGZkZmI1Njk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCqjF5Kdabr3WBzCnmcu+O6+gwDNZk3W9Y3qgX9 4xcS3NcNRIJ6Rriv5+1wH0xnDNZRMvl/LEOKWvNp8sc42Ju/yj6yisfBXRTPJsz+ 9jaTomERFEZhPtg62pdM95JaDbonGSbLnud07mBgAc6Sa8Ixdy/OzdixF6a2Y3YQ OCBoJvp8+Ep3UJlMqcHt23i/of0EW+usxyRV7T+8DGdnk/Sbta8kFRiGYujGAPpE khKaZLWbwb+Ba3JrBSAzpqEIRhi9pZ/AoOLcDNL1xUVWPsP65WxkTYDEi7xCE+ls 4dFXidDQ9BuqMMR/syZpEvZffOf3PjmYknWC6ildVCwVvYay -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:41 2025 by rpki-client