$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa File: bbd38cda-7d43-361b-8ee3-dab3e0487112.roa (raw, json) Hash identifier: Jc0yn9c7L4Pg/CM6pTclqWn+kwGzWsOh2/hegPkcGE0= Subject key identifier: 70:F2:9D:10:F0:45:58:EA:62:CF:8B:24:D2:D5:AE:20:B2:98:D5:CF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF25690600B2EEC8BE282C300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 397196 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:90:60:0b:2e:ec:8b:e2:82:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=70fe17eb-b5e2-407b-b584-58696157133a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4a:d8:b1:d0:8d:f1:7f:d0:5f:49:6b:1d:e4: 78:19:bf:32:ec:b1:bd:a4:6b:84:5e:80:ca:bd:53: dc:53:45:a7:37:13:9e:a7:db:31:68:6e:a9:aa:42: a4:62:89:aa:84:63:5f:49:6a:c2:45:36:39:dd:ef: 9f:de:e9:db:04:4d:da:77:72:e2:8a:df:05:d2:93: 73:ed:bb:15:2a:c1:c5:ef:5a:5e:25:a7:3f:e3:78: af:1a:1e:fc:b2:f8:69:9b:4e:b1:c1:05:84:03:d0: d8:ed:13:a9:d2:00:a0:60:68:43:52:a5:03:05:80: 47:89:d6:37:85:2c:ea:df:13:15:ea:c8:89:8c:61: d4:d6:a3:8d:e4:3a:30:4f:25:3d:ba:17:80:38:e3: 7b:71:c9:1b:2d:14:09:f7:6b:15:03:9a:89:15:8e: 84:14:91:98:bf:d2:36:99:37:49:fd:f7:ac:76:83: b4:03:c0:5f:30:fd:3d:6b:6b:f4:ce:51:23:29:4a: 12:f2:41:a5:d8:5a:50:b1:23:ef:c1:12:bb:d4:a3: d8:d4:33:d1:79:59:4a:7c:ab:c1:6c:5c:94:68:71: fa:5c:e6:d8:a0:ab:3e:63:42:0b:7b:e4:30:68:71: 56:66:67:b7:d5:e8:04:98:f9:1a:d4:7e:68:2a:1a: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F2:9D:10:F0:45:58:EA:62:CF:8B:24:D2:D5:AE:20:B2:98:D5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:d4:5c:84:e4:aa:1e:30:35:d9:13:22:fd:cc:fb:b2:6d:43: 0d:5d:7c:12:70:af:3a:05:1c:b6:b5:4c:5c:86:bb:e6:54:d3: 40:20:99:cf:49:fc:0c:62:c1:93:f2:84:6d:56:b3:00:0c:e2: 86:aa:ec:78:5a:0c:9e:a0:aa:b6:8d:12:de:c0:12:76:e5:e4: 26:18:3c:60:4c:4c:a9:bb:90:20:cc:22:73:54:17:79:a5:ec: 68:32:2a:a8:e9:6f:5a:97:ba:91:21:0a:21:5b:7d:21:a6:ea: 4e:f3:dc:e3:90:52:3f:fa:97:de:3b:ef:c4:fb:8f:6f:70:19: 15:52:e6:bb:32:d9:86:57:ae:69:f8:42:2b:26:31:7b:6e:f9: 2f:a3:96:ae:93:86:8c:e3:63:d7:c1:a8:6e:65:ba:64:f6:6c: 39:04:1d:64:be:6c:26:68:e7:11:68:25:ae:88:a4:9d:3f:df: 49:3c:20:08:84:f4:39:47:3d:4c:d9:28:b6:fa:bf:8c:5e:22: 04:ea:63:cd:b7:b9:7f:1d:da:64:fc:8c:45:0f:28:29:b8:f9: ac:67:4b:33:df:a4:64:e0:b8:a5:ab:17:46:5c:f5:50:2c:1d: 93:d2:d0:e6:0a:ed:84:72:94:31:7e:1a:23:3b:b5:6e:2c:eb: c4:d3:ef:d0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpBgCy7si+KCwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NzBmZTE3ZWItYjVlMi00MDdiLWI1ODQtNTg2OTYxNTcxMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkrYsdCN8X/QX0lrHeR4Gb8y7LG9pGuEXoDK vVPcU0WnNxOep9sxaG6pqkKkYomqhGNfSWrCRTY53e+f3unbBE3ad3Liit8F0pNz 7bsVKsHF71peJac/43ivGh78svhpm06xwQWEA9DY7ROp0gCgYGhDUqUDBYBHidY3 hSzq3xMV6siJjGHU1qON5DowTyU9uheAOON7cckbLRQJ92sVA5qJFY6EFJGYv9I2 mTdJ/fesdoO0A8BfMP09a2v0zlEjKUoS8kGl2FpQsSPvwRK71KPY1DPReVlKfKvB bFyUaHH6XObYoKs+Y0ILe+QwaHFWZme31egEmPka1H5oKhrQ8wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHDynRDwRVjqYs+LJNLVriCymNXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkMzhjZGEtN2Q0My0z NjFiLThlZTMtZGFiM2UwNDg3MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+1FyE5KoeMDXZEyL9zPuybUMNXXwScK86BRy2 tUxchrvmVNNAIJnPSfwMYsGT8oRtVrMADOKGqux4WgyeoKq2jRLewBJ25eQmGDxg TEypu5AgzCJzVBd5pexoMiqo6W9al7qRIQohW30hpupO89zjkFI/+pfeO+/E+49v cBkVUua7MtmGV65p+EIrJjF7bvkvo5auk4aM42PXwahuZbpk9mw5BB1kvmwmaOcR aCWuiKSdP99JPCAIhPQ5Rz1M2Si2+r+MXiIE6mPNt7l/Hdpk/IxFDygpuPmsZ0sz 36Rk4LilqxdGXPVQLB2T0tDmCu2EcpQxfhojO7VuLOvE0+/Q -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:41 2025 by rpki-client