$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617fa947-359e-3310-951b-4abf6edf3172.roa File: 617fa947-359e-3310-951b-4abf6edf3172.roa (raw, json) Hash identifier: r6SVdQSTdX2/+XFitxcJSD37HXdJJiBsUdIMwZ+a2z0= Subject key identifier: 03:07:F9:6C:4F:3E:2D:C9:3B:8F:5D:23:8D:0C:C3:73:7A:4F:05:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B8382118C8656E939A8B72980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617fa947-359e-3310-951b-4abf6edf3172.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 397208 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:11:8c:86:56:e9:39:a8:b7:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=a330adb2-10e5-4227-864e-fc241416f1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0d:47:21:bb:cb:85:69:41:5d:20:82:d2:0f: f2:8b:23:90:a0:a5:b8:d3:26:ac:e7:bf:88:73:39: 8c:49:a8:c6:ca:ac:9e:7e:14:81:9b:1c:d8:19:e2: 03:bb:8d:f0:50:d1:f1:0e:be:ee:d5:d2:d4:9a:d1: 50:ce:a7:30:ea:1f:a3:0f:55:e3:c7:4f:32:1e:b9: 34:48:eb:2b:16:6d:97:c0:e1:56:c8:a9:ad:88:4c: 4b:4f:73:f5:ed:a0:e7:46:9a:dc:cc:6e:82:bb:d8: 90:2e:c1:fa:35:ba:0b:34:25:51:ac:f6:9d:95:43: 78:2a:5b:52:97:73:78:a2:26:f0:a8:12:46:61:aa: b3:d3:19:7a:3f:42:19:0b:35:72:c7:2f:11:7a:ff: 95:60:b4:3c:aa:3c:b4:ad:fe:d3:a4:dc:c5:5c:39: 25:73:4d:07:85:75:16:84:27:f7:ad:01:80:dc:6c: 9c:66:39:10:5d:c3:f8:1c:f6:01:53:12:af:99:36: a4:84:bc:68:a9:bf:4c:de:fa:d3:c1:45:74:b8:4e: d3:11:cf:7b:fa:6a:a4:bd:89:34:e4:7d:4e:c2:64: 9e:1e:e7:e5:46:15:33:86:d9:ba:d0:f4:2b:00:f1: 51:c9:9c:bd:71:17:97:47:40:90:3f:66:63:14:d1: 97:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:F9:6C:4F:3E:2D:C9:3B:8F:5D:23:8D:0C:C3:73:7A:4F:05:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617fa947-359e-3310-951b-4abf6edf3172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4e:36:07:36:5f:ec:16:51:5c:35:7c:b5:07:d3:52:97:9a: 12:cb:f5:b8:ec:aa:9e:b1:96:26:86:1a:71:7d:b0:7e:02:a4: 82:84:50:3d:76:1b:d5:43:bd:90:07:5b:1f:33:be:65:cb:68: 6f:57:09:a3:3d:d7:e6:cf:74:f1:84:98:5e:9f:25:be:40:f7: 79:b2:b3:d7:0e:5c:b1:58:39:7e:d8:92:a1:7f:8f:d4:58:02: da:c8:3b:ee:75:40:16:97:10:cb:cc:35:68:d6:5b:05:86:88: e8:06:6f:26:fc:3b:dd:58:ab:ca:09:08:82:5d:9a:a6:7d:fe: 54:c3:eb:a9:37:e6:1a:74:1b:ff:30:2d:99:f5:d0:65:89:dc: 5b:ac:95:c8:5b:f8:6b:68:4c:22:cd:ff:8e:47:ce:ea:22:0e: e2:fd:53:bf:1a:5a:0c:b3:33:5a:01:58:38:2b:4d:fb:f2:5c: f3:9e:dc:54:bb:ce:ab:90:86:f2:a0:fd:75:c7:52:bd:2a:9d: 3e:07:47:7c:f9:fa:46:00:d1:d7:17:02:2c:69:94:e2:5f:f7: 5e:2e:e5:54:10:fe:2e:7a:ea:dc:eb:d9:b5:ef:b0:2b:58:ff: 20:d5:4a:27:95:8f:07:cc:cf:64:af:a4:cf:db:83:b3:c1:78: 78:41:28:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDghGMhlbpOai3KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YTMzMGFkYjItMTBlNS00MjI3LTg2NGUtZmMyNDE0MTZmMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg1HIbvLhWlBXSCC0g/yiyOQoKW40yas57+I czmMSajGyqyefhSBmxzYGeIDu43wUNHxDr7u1dLUmtFQzqcw6h+jD1Xjx08yHrk0 SOsrFm2XwOFWyKmtiExLT3P17aDnRprczG6Cu9iQLsH6NboLNCVRrPadlUN4KltS l3N4oibwqBJGYaqz0xl6P0IZCzVyxy8Rev+VYLQ8qjy0rf7TpNzFXDklc00HhXUW hCf3rQGA3GycZjkQXcP4HPYBUxKvmTakhLxoqb9M3vrTwUV0uE7TEc97+mqkvYk0 5H1OwmSeHuflRhUzhtm60PQrAPFRyZy9cReXR0CQP2ZjFNGX/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAMH+WxPPi3JO49dI40Mw3N6TwUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjE3ZmE5NDctMzU5ZS0z MzEwLTk1MWItNGFiZjZlZGYzMTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVONgc2X+wWUVw1fLUH01KXmhLL9bjsqp6xliaGGnF9sH4CpIKE UD12G9VDvZAHWx8zvmXLaG9XCaM91+bPdPGEmF6fJb5A93mys9cOXLFYOX7YkqF/ j9RYAtrIO+51QBaXEMvMNWjWWwWGiOgGbyb8O91Yq8oJCIJdmqZ9/lTD66k35hp0 G/8wLZn10GWJ3Fuslchb+GtoTCLN/45HzuoiDuL9U78aWgyzM1oBWDgrTfvyXPOe 3FS7zquQhvKg/XXHUr0qnT4HR3z5+kYA0dcXAixplOJf914u5VQQ/i566tzr2bXv sCtY/yDVSieVjwfMz2SvpM/bg7PBeHhBKPM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:00:01 2025 by rpki-client