$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f50df46-814a-3b10-bacc-82df2d8cff10.roa File: 9f50df46-814a-3b10-bacc-82df2d8cff10.roa (raw, json) Hash identifier: yTKw5p1w98ILlsfVH1mV9Ojmw5B8Uo9yXGypv4rzjvo= Subject key identifier: 77:97:1F:A1:13:36:BE:F2:20:A0:E0:61:78:28:A6:E9:FF:F7:C3:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE883F8AEA075805CDB7FCDF0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f50df46-814a-3b10-bacc-82df2d8cff10.roa Signing time: Tue 19 Aug 2025 12:34:12 +0000 ROA not before: Tue 19 Aug 2025 12:34:12 +0000 ROA not after: Mon 17 Nov 2025 13:34:12 +0000 asID: 397195 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:83:f8:ae:a0:75:80:5c:db:7f:cd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 12:34:12 2025 GMT Not After : Nov 17 13:34:12 2025 GMT Subject: CN=29f70b40-2e76-4fb3-9ec4-8484ccdba83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:98:4c:3b:2c:8e:56:a5:9f:c7:03:dd:49: d1:c6:90:e8:9b:06:63:52:e9:7c:9b:77:ee:ed:01: 33:16:75:41:cb:ea:3f:e0:7f:8f:fa:fd:86:c4:bb: 27:71:f2:bb:47:ee:cf:42:d6:3a:cc:c8:ba:e2:78: d6:ca:18:32:33:22:84:67:fa:85:8e:d6:85:5a:25: 56:de:30:42:05:6e:68:49:54:34:79:68:6c:5d:24: 8a:81:52:47:0c:a0:7f:69:8e:ec:78:93:5c:09:c3: ff:81:11:7e:df:fd:63:4b:4b:1d:ee:52:d0:41:97: 7f:f5:fc:d5:ed:99:38:c2:50:8d:5a:bf:ef:90:02: 46:d6:32:45:b5:01:94:1b:48:90:8b:e5:a7:a8:6e: 0f:51:a9:a5:37:3d:56:18:23:61:92:fa:e6:d0:d2: bb:ce:16:a7:ff:0c:c1:d7:04:e4:55:85:2c:74:b8: d6:5c:8d:05:9a:4d:55:e4:fb:39:54:c1:e4:40:95: 20:9d:7e:82:c3:76:e8:ba:10:8d:4c:06:ce:13:1d: 4e:dc:d8:97:a9:c4:b6:ce:98:c3:a2:0f:7b:87:b3: 8a:da:d4:30:66:32:7b:88:31:52:30:35:92:64:08: 44:20:31:77:35:9b:1a:af:01:1d:5c:f5:35:6f:05: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:97:1F:A1:13:36:BE:F2:20:A0:E0:61:78:28:A6:E9:FF:F7:C3:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f50df46-814a-3b10-bacc-82df2d8cff10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:40:2e:c9:3e:7d:95:67:44:28:ff:6a:58:6c:76:97:86:2f: 9c:eb:fc:4b:1a:64:cd:49:32:aa:e2:78:f2:d3:a5:03:7c:b0: 82:c4:99:55:0e:23:b9:8f:44:96:29:5a:6c:9e:32:74:4e:01: dd:78:ad:5b:e2:67:70:ad:37:6d:9c:f2:fe:d2:bb:27:e6:6a: 20:e4:e2:f1:ed:2c:fa:b8:83:8c:92:0f:6b:47:7b:7c:93:6c: 19:75:1a:ea:b9:c7:ee:3d:35:a2:dd:46:0f:93:00:f7:15:61: e2:b3:7f:23:3d:81:53:f8:c5:71:5d:e1:97:0d:fa:9c:a6:ce: e1:18:3f:14:f2:84:a7:bd:be:e7:38:03:90:a8:34:c5:d6:dd: 07:31:41:2c:df:2f:70:37:2d:96:e4:e5:57:4d:e4:63:0e:42: 75:53:ea:86:85:44:26:f2:79:7d:d9:f5:f5:37:36:02:a1:b3: 1e:f8:03:47:53:1d:f4:c3:f0:66:91:6f:61:d1:f0:4e:68:bd: dc:eb:36:ef:6e:47:aa:8d:7d:81:2d:43:1e:c1:61:e8:66:17: 93:fe:14:81:70:07:8b:b1:ed:28:75:d5:a3:81:2c:14:0a:e1: 98:b0:79:83:41:b4:8c:39:62:eb:4d:40:30:1b:7f:f4:b7:d4: fc:fc:73:b9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/iuoHWAXNt/zfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxOTEyMzQxMloXDTI1MTExNzEzMzQxMlowLzEtMCsGA1UEAxMk MjlmNzBiNDAtMmU3Ni00ZmIzLTllYzQtODQ4NGNjZGJhODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU+YTDssjlaln8cD3UnRxpDomwZjUul8m3fu 7QEzFnVBy+o/4H+P+v2GxLsncfK7R+7PQtY6zMi64njWyhgyMyKEZ/qFjtaFWiVW 3jBCBW5oSVQ0eWhsXSSKgVJHDKB/aY7seJNcCcP/gRF+3/1jS0sd7lLQQZd/9fzV 7Zk4wlCNWr/vkAJG1jJFtQGUG0iQi+WnqG4PUamlNz1WGCNhkvrm0NK7zhan/wzB 1wTkVYUsdLjWXI0Fmk1V5Ps5VMHkQJUgnX6Cw3bouhCNTAbOEx1O3NiXqcS2zpjD og97h7OK2tQwZjJ7iDFSMDWSZAhEIDF3NZsarwEdXPU1bwWN7QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHeXH6ETNr7yIKDgYXgopun/98PuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWY1MGRmNDYtODE0YS0z YjEwLWJhY2MtODJkZjJkOGNmZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCBQC7JPn2VZ0Qo/2pYbHaXhi+c6/xLGmTNSTKq 4njy06UDfLCCxJlVDiO5j0SWKVpsnjJ0TgHdeK1b4mdwrTdtnPL+0rsn5mog5OLx 7Sz6uIOMkg9rR3t8k2wZdRrqucfuPTWi3UYPkwD3FWHis38jPYFT+MVxXeGXDfqc ps7hGD8U8oSnvb7nOAOQqDTF1t0HMUEs3y9wNy2W5OVXTeRjDkJ1U+qGhUQm8nl9 2fX1NzYCobMe+ANHUx30w/BmkW9h0fBOaL3c6zbvbkeqjX2BLUMewWHoZheT/hSB cAeLse0oddWjgSwUCuGYsHmDQbSMOWLrTUAwG3/0t9T8/HO5 -----END CERTIFICATE-----Generated at Sat Aug 23 13:13:06 2025 by rpki-client