$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ce74d24-9f39-3ab8-b030-27fcbeedea77.roa File: 3ce74d24-9f39-3ab8-b030-27fcbeedea77.roa (raw, json) Hash identifier: q/7Lvajlmb68uxzf42AJCUwgjTOK/HvZCdcH/fywISQ= Subject key identifier: 31:3D:43:C5:17:7D:51:4B:81:6A:DA:47:1A:36:7B:D2:05:62:5C:A4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE883F84D0DABFEB4AAA9DD40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ce74d24-9f39-3ab8-b030-27fcbeedea77.roa Signing time: Tue 19 Aug 2025 12:34:12 +0000 ROA not before: Tue 19 Aug 2025 12:34:12 +0000 ROA not after: Mon 17 Nov 2025 13:34:12 +0000 asID: 32651 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:83:f8:4d:0d:ab:fe:b4:aa:a9:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 12:34:12 2025 GMT Not After : Nov 17 13:34:12 2025 GMT Subject: CN=7eecaf53-bed7-4506-a681-8f94aa1300fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:96:38:6e:78:81:1c:d5:f2:df:1f:97:07: a1:c3:88:f8:29:0f:03:2c:0c:ce:98:49:e8:82:c2: 9a:5c:f6:b7:8e:52:f8:28:81:82:42:99:e1:65:d0: 5d:f0:3f:22:87:d4:f2:1e:14:b0:9f:0f:cb:c4:b8: ef:31:fc:a3:fe:04:f0:60:a1:f0:f3:15:1e:64:ed: 52:68:40:31:61:2e:8e:a5:05:ee:1e:06:29:e4:e1: 1e:65:69:b8:86:5b:f3:cf:bc:fe:55:16:14:58:94: 75:f6:90:e0:a7:bd:5f:e4:44:26:79:1d:f2:23:e3: d3:2d:84:10:81:65:f1:f8:db:15:12:2f:6d:1d:6f: 3d:c4:85:06:75:f1:88:61:11:ed:6e:ed:41:0d:83: c8:b5:fe:76:41:88:f2:99:fe:32:c1:2a:69:50:75: 2a:08:c4:ae:16:d2:bd:9f:d1:d1:0f:81:9e:73:dc: 97:db:f5:79:e1:a5:05:c6:d7:58:4f:da:63:2c:b8: 4e:e9:20:7b:cc:7f:fd:9c:a5:ea:8f:1f:df:00:2f: c6:51:8a:3f:ad:66:f6:93:61:1d:b7:17:8e:11:83: cf:db:b9:98:38:30:c5:5c:f6:84:01:e7:db:85:b0: fa:58:de:d3:4e:38:aa:b3:e2:80:58:24:8b:8f:5d: 14:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3D:43:C5:17:7D:51:4B:81:6A:DA:47:1A:36:7B:D2:05:62:5C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ce74d24-9f39-3ab8-b030-27fcbeedea77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:52:a4:20:cf:62:3e:58:b9:58:45:81:cc:ea:b9:a9:63:07: 11:61:10:0e:9e:1f:17:60:84:e7:23:6a:ba:6c:00:2d:c8:37: ea:90:f8:bc:2c:93:e2:19:c3:04:6a:e0:73:f0:3c:ee:10:fa: 26:96:48:00:2e:d1:37:9e:ac:a8:7c:84:d2:93:f7:30:9a:c8: e2:43:ab:a7:1f:16:63:2b:db:57:c2:72:81:7b:37:c2:ed:37: 7a:82:f0:74:96:1f:40:04:c4:90:5e:15:1a:c5:38:8d:13:e8: f9:d7:6c:13:85:dd:e6:e2:60:c0:8b:21:5b:3a:33:2d:e2:94: 71:8e:45:19:4a:f2:48:e1:b1:02:d4:d4:3a:a5:1e:06:09:e0: 32:48:59:e9:52:14:84:ab:d6:93:8e:45:70:74:9e:c2:66:88: aa:fd:13:b2:2e:d4:57:75:24:78:26:26:35:a5:78:3e:60:eb: de:03:7f:9b:12:18:8e:b5:e6:29:a9:a2:cb:37:02:69:4c:c9: 29:f0:bd:f0:6f:89:38:0b:7b:f9:4a:a3:3b:16:3c:cd:04:36: 8a:eb:fd:50:9c:ec:dc:b9:e1:9b:29:9e:db:1c:05:ed:3b:97: 2b:aa:36:b6:12:6e:c2:ca:2e:6b:87:be:4b:38:d8:99:09:e9: ae:06:c3:19 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/hNDav+tKqp3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxOTEyMzQxMloXDTI1MTExNzEzMzQxMlowLzEtMCsGA1UEAxMk N2VlY2FmNTMtYmVkNy00NTA2LWE2ODEtOGY5NGFhMTMwMGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+GWOG54gRzV8t8flwehw4j4KQ8DLAzOmEno gsKaXPa3jlL4KIGCQpnhZdBd8D8ih9TyHhSwnw/LxLjvMfyj/gTwYKHw8xUeZO1S aEAxYS6OpQXuHgYp5OEeZWm4hlvzz7z+VRYUWJR19pDgp71f5EQmeR3yI+PTLYQQ gWXx+NsVEi9tHW89xIUGdfGIYRHtbu1BDYPItf52QYjymf4ywSppUHUqCMSuFtK9 n9HRD4Gec9yX2/V54aUFxtdYT9pjLLhO6SB7zH/9nKXqjx/fAC/GUYo/rWb2k2Ed txeOEYPP27mYODDFXPaEAefbhbD6WN7TTjiqs+KAWCSLj10UaQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDE9Q8UXfVFLgWraRxo2e9IFYlykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2NlNzRkMjQtOWYzOS0z YWI4LWIwMzAtMjdmY2JlZWRlYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCrUqQgz2I+WLlYRYHM6rmpYwcRYRAOnh8XYITn I2q6bAAtyDfqkPi8LJPiGcMEauBz8DzuEPomlkgALtE3nqyofITSk/cwmsjiQ6un HxZjK9tXwnKBezfC7Td6gvB0lh9ABMSQXhUaxTiNE+j512wThd3m4mDAiyFbOjMt 4pRxjkUZSvJI4bEC1NQ6pR4GCeAySFnpUhSEq9aTjkVwdJ7CZoiq/ROyLtRXdSR4 JiY1pXg+YOveA3+bEhiOteYpqaLLNwJpTMkp8L3wb4k4C3v5SqM7FjzNBDaK6/1Q nOzcueGbKZ7bHAXtO5crqja2Em7Cyi5rh75LONiZCemuBsMZ -----END CERTIFICATE-----Generated at Sat Aug 23 13:03:00 2025 by rpki-client