$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a34d31d3-82b3-33ea-97a0-425648132ebf.roa File: a34d31d3-82b3-33ea-97a0-425648132ebf.roa (raw, json) Hash identifier: +3j+tXRaIvtV2O63ULa3WGxmxAyuKXzuvv221+1jUO8= Subject key identifier: 8C:38:65:9B:A9:63:B3:42:9A:8B:CA:DC:7E:2D:8C:72:D5:5C:C8:73 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2FC18065CD8648AD149DC500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a34d31d3-82b3-33ea-97a0-425648132ebf.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 396586 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:80:65:cd:86:48:ad:14:9d:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=10de1eb4-63ad-4507-b554-56f265ebc333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:79:20:10:12:07:17:13:9c:17:ae:aa:22: 1b:8b:6a:0e:8e:03:9f:45:6b:ff:2a:34:61:d5:75: 2c:1f:b3:15:09:ae:72:96:5f:f7:30:36:fb:e5:e2: ae:26:6e:25:9d:2f:3f:4f:c4:c3:6b:31:b1:df:91: 98:ce:ae:be:d9:e7:e3:4c:41:82:98:a1:31:c7:a7: 3d:eb:7b:74:3e:9b:fc:ba:fb:6c:72:60:cb:26:5a: af:ff:c0:25:28:2c:07:87:88:9e:35:7d:08:1b:16: 28:fa:9b:0d:eb:ad:76:57:73:84:7b:ea:df:bf:20: ea:29:ef:cc:67:fd:de:55:8d:94:ce:7a:94:e1:5c: dd:2f:5a:3f:10:cc:b0:b2:07:02:8c:69:7e:29:23: 24:e9:7e:9d:fa:5c:35:ef:10:ae:b1:06:16:01:6c: be:df:6f:cb:68:cf:e5:46:7d:0e:49:0b:d7:df:09: 67:66:fc:11:cf:c1:d5:6d:de:28:23:04:a8:35:47: 5d:65:31:b8:cd:93:44:dc:68:29:3d:8c:de:eb:74: 2d:2a:00:83:cc:61:ae:1b:2d:93:b4:ff:6e:9c:86: 01:1c:6d:f9:66:49:86:8e:3d:00:df:67:34:75:e3: af:77:66:cd:6d:36:5d:c8:93:76:dd:f4:2c:07:0b: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:38:65:9B:A9:63:B3:42:9A:8B:CA:DC:7E:2D:8C:72:D5:5C:C8:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a34d31d3-82b3-33ea-97a0-425648132ebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e1:8f:d5:3c:64:d1:28:ff:4c:a7:ba:44:b9:e4:74:16:6e: 7a:c9:d5:71:fb:02:b9:a8:bc:3f:80:fc:11:5c:32:97:0e:2a: 2e:f4:c8:6d:29:c7:e4:4f:d6:f0:8d:6f:fc:4b:a2:7d:d7:a3: 67:db:e0:a4:72:68:0b:52:8b:5f:94:89:22:69:e4:67:0d:f8: f8:b7:3e:1d:6e:04:f8:30:c0:7a:35:e3:92:40:7a:a4:22:e0: 41:a9:05:1a:ea:87:38:ac:8e:cc:34:ee:c1:c3:2f:6b:e3:3c: 70:e0:d3:bd:90:5c:66:0b:fd:32:e6:ce:06:74:2c:af:dd:2f: bc:11:22:ff:5b:32:9a:44:c9:e1:86:79:9e:6a:6f:4a:f2:26: 80:26:eb:6e:dc:7c:8e:33:90:b3:f7:6b:e2:a3:0c:92:be:54: 7f:f0:11:78:3d:53:f4:4e:53:01:23:3f:3b:a0:57:89:ff:71: 1a:e2:51:2b:49:7c:48:32:b3:c9:4a:89:f7:a5:6c:16:21:01: a6:56:d9:fe:54:a6:65:0c:96:9c:b9:cb:03:1a:b3:20:33:f7: 51:df:19:4f:8c:6d:6e:9f:5a:4b:31:79:a0:66:47:aa:e7:fc: 9b:1e:63:6a:d6:38:67:8a:a4:f1:fe:8e:50:71:ac:75:24:e1: 35:6b:fa:e8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsvwYBlzYZIrRSdxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk MTBkZTFlYjQtNjNhZC00NTA3LWI1NTQtNTZmMjY1ZWJjMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7cd5IBASBxcTnBeuqiIbi2oOjgOfRWv/KjRh 1XUsH7MVCa5yll/3MDb75eKuJm4lnS8/T8TDazGx35GYzq6+2efjTEGCmKExx6c9 63t0Ppv8uvtscmDLJlqv/8AlKCwHh4ieNX0IGxYo+psN6612V3OEe+rfvyDqKe/M Z/3eVY2UznqU4VzdL1o/EMywsgcCjGl+KSMk6X6d+lw17xCusQYWAWy+32/LaM/l Rn0OSQvX3wlnZvwRz8HVbd4oIwSoNUddZTG4zZNE3GgpPYze63QtKgCDzGGuGy2T tP9unIYBHG35ZkmGjj0A32c0deOvd2bNbTZdyJN23fQsBwuERwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIw4ZZupY7NCmovK3H4tjHLVXMhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTM0ZDMxZDMtODJiMy0z M2VhLTk3YTAtNDI1NjQ4MTMyZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAX4Y/VPGTRKP9Mp7pEueR0Fm56ydVx+wK5qLw/ gPwRXDKXDiou9MhtKcfkT9bwjW/8S6J916Nn2+CkcmgLUotflIkiaeRnDfj4tz4d bgT4MMB6NeOSQHqkIuBBqQUa6oc4rI7MNO7Bwy9r4zxw4NO9kFxmC/0y5s4GdCyv 3S+8ESL/WzKaRMnhhnmeam9K8iaAJutu3HyOM5Cz92viowySvlR/8BF4PVP0TlMB Iz87oFeJ/3Ea4lErSXxIMrPJSon3pWwWIQGmVtn+VKZlDJacucsDGrMgM/dR3xlP jG1un1pLMXmgZkeq5/ybHmNq1jhniqTx/o5Qcax1JOE1a/ro -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:29 2025 by rpki-client