$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344f65ef-c2f9-37a7-abd5-c18a92d7e543.roa File: 344f65ef-c2f9-37a7-abd5-c18a92d7e543.roa (raw, json) Hash identifier: FBeVMAJKl+qjLIYhYq1Emmnls19EmS5NZWaiIkIBhOc= Subject key identifier: 79:1D:C9:87:B9:55:BB:E5:E8:46:17:71:17:22:DB:E5:3D:B7:43:C1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D22D7CF7FBF55F7C9300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344f65ef-c2f9-37a7-abd5-c18a92d7e543.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 396614 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d2:2d:7c:f7:fb:f5:5f:7c:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=6c538fa8-06a4-4d05-9fca-9a0c8cd01728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ff:18:bb:1c:37:0d:87:bc:27:33:25:e4:c8: c9:0b:f1:9e:1d:aa:09:6e:5b:84:02:7a:48:8d:3d: 15:d7:2f:79:18:66:50:50:78:19:11:a5:9a:34:57: df:b6:41:34:5c:01:86:a5:02:e8:0b:83:eb:90:9a: 31:29:2d:b0:96:55:46:c0:1f:5b:71:30:92:89:01: 36:c1:c6:f5:18:01:61:11:80:18:47:9f:2a:d9:91: 35:07:cb:86:4f:9e:b7:09:66:83:a5:d3:b1:b9:c9: 6c:b3:de:c4:0e:d0:6b:1b:8f:7b:b7:bf:cc:cd:84: 6b:62:59:4b:7d:af:0d:55:fe:6e:74:15:c1:e6:47: 2c:1e:68:30:6c:b8:5e:7a:49:50:f3:ac:7b:84:da: 23:6b:55:b1:00:02:59:f4:75:09:22:13:77:45:8c: 13:dd:27:f9:f4:79:84:9e:13:0e:ee:5c:bd:0f:18: fa:49:c8:e3:c4:a7:cd:f2:56:ba:be:b4:f9:64:91: a2:a0:c0:c2:87:70:16:f2:ac:c7:5c:eb:88:ec:ba: 3c:13:eb:cd:0f:e6:40:67:54:d9:24:c3:df:44:cd: 74:f7:16:76:0b:cf:97:87:7c:5d:22:1f:74:94:15: c1:a9:6c:f8:6b:90:9c:39:83:ac:2c:25:47:7e:8d: c9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1D:C9:87:B9:55:BB:E5:E8:46:17:71:17:22:DB:E5:3D:B7:43:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344f65ef-c2f9-37a7-abd5-c18a92d7e543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:21:4c:25:10:86:db:c5:ea:a1:2a:86:99:d2:b3:29:2e:98: 78:14:fe:70:5a:56:c9:d4:ba:fc:2e:d8:18:9d:13:c7:17:e0: 4f:7e:42:8b:e1:9d:24:9e:75:b5:74:14:2f:bc:02:0b:12:21: 92:f0:54:c2:ff:79:28:e4:a2:30:8f:c7:d3:22:21:bc:d2:aa: da:83:e9:53:3c:9a:b2:84:62:d2:27:6c:f1:50:da:ae:5c:15: 2f:71:ad:c5:40:13:28:21:dc:85:92:99:e0:bc:82:49:e2:8a: d1:b2:26:00:89:bf:eb:36:43:4b:80:9b:c4:48:0c:98:2e:14: 08:e3:59:3b:97:7f:b6:41:09:9c:9a:8b:6a:f4:11:6c:1c:38: 16:42:3a:ea:d2:4a:ef:49:f3:ba:b7:10:ae:4b:92:84:60:88: 5f:1f:19:3d:4c:71:b4:15:c1:33:b1:fb:d9:0b:e8:76:e1:ac: b9:43:f3:9e:d0:59:17:a2:b6:d6:c6:37:ef:fa:ea:2a:cb:ca: c5:9d:01:38:a9:06:c1:2d:b9:12:fb:75:85:d2:f5:e2:c7:d5: 76:32:05:69:2b:63:18:99:47:64:bc:ad:91:1b:50:85:52:d0: fc:f7:c7:94:11:72:1f:66:2f:9a:3b:29:f6:04:e7:e3:b8:54: d8:43:cb:24 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtAgdItfPf79V98kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NmM1MzhmYTgtMDZhNC00ZDA1LTlmY2EtOWEwYzhjZDAxNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv8Yuxw3DYe8JzMl5MjJC/GeHaoJbluEAnpI jT0V1y95GGZQUHgZEaWaNFfftkE0XAGGpQLoC4PrkJoxKS2wllVGwB9bcTCSiQE2 wcb1GAFhEYAYR58q2ZE1B8uGT563CWaDpdOxuclss97EDtBrG497t7/MzYRrYllL fa8NVf5udBXB5kcsHmgwbLheeklQ86x7hNoja1WxAAJZ9HUJIhN3RYwT3Sf59HmE nhMO7ly9Dxj6ScjjxKfN8la6vrT5ZJGioMDCh3AW8qzHXOuI7Lo8E+vND+ZAZ1TZ JMPfRM109xZ2C8+Xh3xdIh90lBXBqWz4a5CcOYOsLCVHfo3JuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHkdyYe5Vbvl6EYXcRci2+U9t0PBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQ0ZjY1ZWYtYzJmOS0z N2E3LWFiZDUtYzE4YTkyZDdlNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBaIUwlEIbbxeqhKoaZ0rMpLph4FP5wWlbJ1Lr8 LtgYnRPHF+BPfkKL4Z0knnW1dBQvvAILEiGS8FTC/3ko5KIwj8fTIiG80qrag+lT PJqyhGLSJ2zxUNquXBUvca3FQBMoIdyFkpngvIJJ4orRsiYAib/rNkNLgJvESAyY LhQI41k7l3+2QQmcmotq9BFsHDgWQjrq0krvSfO6txCuS5KEYIhfHxk9THG0FcEz sfvZC+h24ay5Q/Oe0FkXorbWxjfv+uoqy8rFnQE4qQbBLbkS+3WF0vXix9V2MgVp K2MYmUdkvK2RG1CFUtD898eUEXIfZi+aOyn2BOfjuFTYQ8sk -----END CERTIFICATE-----Generated at Mon Oct 20 03:19:36 2025 by rpki-client