$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a7b893f-8ee4-3f6a-946c-14e934f71552.roa File: 7a7b893f-8ee4-3f6a-946c-14e934f71552.roa (raw, json) Hash identifier: YdlkxqNRP//MNYiUh8u4EEEspZoYD5HhojRwt4YxMUQ= Subject key identifier: D9:96:89:64:AB:EB:6E:05:DF:1E:48:01:BE:C2:81:7F:70:AB:58:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B434C5303BB7994567D188900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a7b893f-8ee4-3f6a-946c-14e934f71552.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 396610 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:53:03:bb:79:94:56:7d:18:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=22ebdb67-6fd8-4d1c-ba29-bf6ad3433f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:3c:fd:8f:2a:d7:e4:8c:da:24:99:99:3c: 75:e8:d4:7d:40:5f:23:28:a6:9a:5b:ed:63:22:42: 9e:72:38:f7:a4:d6:11:24:41:4f:68:e2:23:23:62: a7:0a:24:cb:28:65:95:d2:bc:bc:1b:6e:df:2f:3e: e9:58:1f:25:c5:34:bd:78:29:63:5e:bc:c7:72:59: 8d:c8:f3:e4:6e:9c:6f:01:30:09:70:dc:68:a0:4a: b0:52:33:86:72:e2:7b:83:42:09:bd:1d:32:92:75: eb:95:a0:16:cc:c3:05:0e:a9:08:fb:c3:e2:8b:d5: 7a:64:93:72:2f:bd:bf:22:9b:01:f5:4c:01:d9:71: 62:f7:f2:f8:7f:97:e7:6a:12:e9:2c:b4:a7:c2:e3: a9:8c:32:64:9d:d4:d3:69:dc:d6:d1:e9:2d:f8:fb: 4d:d2:fc:0c:5c:27:7f:31:05:40:24:54:e7:4b:5d: d5:04:e5:67:6a:78:bc:cc:38:e7:62:42:ff:a1:91: d1:4f:a9:ec:c2:ed:95:72:f0:2f:f1:9c:33:99:57: 7d:5f:08:07:8b:d9:e5:f1:fd:5a:66:bf:1c:b9:24: 94:28:6f:3f:21:1c:22:90:08:3b:5e:74:48:83:07: 3e:9b:70:65:a0:8a:9f:be:fe:6b:ff:f5:05:a9:1e: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:96:89:64:AB:EB:6E:05:DF:1E:48:01:BE:C2:81:7F:70:AB:58:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a7b893f-8ee4-3f6a-946c-14e934f71552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:aa:8f:8f:cb:c6:2d:2b:3a:cc:d7:c0:f1:03:12:06:95:e4: dc:95:64:44:cd:c4:6d:02:20:26:b0:30:fc:83:8a:11:9e:97: 82:78:eb:3f:d1:92:df:1b:20:35:b6:8a:d7:30:d8:52:7e:60: cd:43:95:4f:ae:1b:23:1b:c3:b1:c6:a9:a8:73:bf:07:c2:1e: c9:9a:72:ab:0c:b0:51:62:5e:1c:3a:d0:65:a4:3f:f5:b2:08: 96:f4:a4:66:68:02:b0:a3:a8:5a:87:18:6c:1d:89:94:d7:22: 17:ec:31:98:39:dc:33:3f:86:dd:39:dc:07:b8:3c:c6:48:e7: 4a:a8:dc:71:55:61:0b:43:31:6f:19:49:81:0e:60:1f:4d:12: 05:ba:aa:70:b6:6b:b7:42:c1:6d:73:da:b9:91:bf:f4:03:c5: 56:e3:c4:0f:c0:0e:f5:1d:a7:ec:26:11:a8:ad:c0:64:ed:20: c3:3e:a8:a5:37:92:2d:6c:5c:60:2e:13:0f:9a:90:67:7d:4a: d5:85:15:cf:e5:ba:83:a1:41:bc:0b:51:4a:64:2a:56:45:5a: 9a:43:97:e7:02:dc:48:6a:59:ea:e5:01:28:95:87:2f:ea:d7: 58:61:eb:03:ae:ed:89:cc:42:40:15:13:bb:11:9e:9f:2f:d3: e8:70:4f:a7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtDTFMDu3mUVn0YiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MjJlYmRiNjctNmZkOC00ZDFjLWJhMjktYmY2YWQzNDMzZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkY8/Y8q1+SM2iSZmTx16NR9QF8jKKaaW+1j IkKecjj3pNYRJEFPaOIjI2KnCiTLKGWV0ry8G27fLz7pWB8lxTS9eCljXrzHclmN yPPkbpxvATAJcNxooEqwUjOGcuJ7g0IJvR0yknXrlaAWzMMFDqkI+8Pii9V6ZJNy L72/IpsB9UwB2XFi9/L4f5fnahLpLLSnwuOpjDJkndTTadzW0ekt+PtN0vwMXCd/ MQVAJFTnS13VBOVnani8zDjnYkL/oZHRT6nswu2VcvAv8ZwzmVd9XwgHi9nl8f1a Zr8cuSSUKG8/IRwikAg7XnRIgwc+m3BloIqfvv5r//UFqR4jqwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNmWiWSr624F3x5IAb7CgX9wq1igMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2E3Yjg5M2YtOGVlNC0z ZjZhLTk0NmMtMTRlOTM0ZjcxNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC3qo+Py8YtKzrM18DxAxIGleTclWREzcRtAiAm sDD8g4oRnpeCeOs/0ZLfGyA1torXMNhSfmDNQ5VPrhsjG8Oxxqmoc78Hwh7JmnKr DLBRYl4cOtBlpD/1sgiW9KRmaAKwo6hahxhsHYmU1yIX7DGYOdwzP4bdOdwHuDzG SOdKqNxxVWELQzFvGUmBDmAfTRIFuqpwtmu3QsFtc9q5kb/0A8VW48QPwA71Hafs JhGorcBk7SDDPqilN5ItbFxgLhMPmpBnfUrVhRXP5bqDoUG8C1FKZCpWRVqaQ5fn AtxIalnq5QEolYcv6tdYYesDru2JzEJAFRO7EZ6fL9PocE+n -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:26 2025 by rpki-client