$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa File: 54b09de8-f12c-3e32-8666-1505aecbce63.roa (raw, json) Hash identifier: ifxCNU0/LwnnuIjYOON/gQM505t3JF0MSlcAbHlPv4E= Subject key identifier: 03:23:3A:3D:4B:14:E3:AC:C5:88:59:B5:86:CC:EC:42:3C:E5:EF:77 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584ADA9BCCA9E2B2D9E5EE441580 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 8075 IP address blocks: 2602:f8d5:a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:cc:a9:e2:b2:d9:e5:ee:44:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=8cce4574-ad89-40e4-8ad3-1481379683cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:98:be:de:b8:8c:87:a5:67:0d:11:16:d9: 95:85:c0:36:2c:33:3a:65:e4:18:99:0c:a5:61:bf: 98:56:b2:ae:45:ca:e2:75:26:81:b7:02:e9:87:45: f4:67:1e:12:6f:5f:c5:25:87:23:fa:08:71:9f:57: f9:02:55:40:87:83:a4:36:69:1b:b9:a3:2f:14:fd: 04:85:77:a8:c4:8a:6d:20:26:13:c4:3e:27:3a:a2: 17:fa:e2:ed:68:0e:8f:c6:c3:f1:5b:b5:b7:5c:ab: 14:6b:d8:b6:c9:ec:c9:24:a7:d0:ef:0f:f3:de:91: d5:48:da:68:be:c9:a8:fb:d9:1f:cf:3c:ef:bb:e6: 4b:e9:ca:fc:09:84:10:37:2b:da:90:9c:59:4d:da: 27:b7:3d:87:ff:e3:db:44:56:d8:fd:e6:c9:6e:b9: c1:d0:8d:6d:b2:ad:4b:8b:43:b9:21:2e:20:72:a8: e5:4e:11:a3:4d:da:40:e8:93:96:fe:91:7e:16:bc: 46:2d:f2:aa:da:9c:56:87:f6:07:6d:a0:65:2a:06: ff:e1:34:0b:1b:d6:1d:75:48:9f:9d:a1:23:36:d7: ac:64:0e:9e:6b:7c:7f:fb:56:0c:56:7f:6b:c0:7b: db:5d:ac:aa:6f:bd:77:32:d0:65:16:f4:b7:0b:00: 99:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:23:3A:3D:4B:14:E3:AC:C5:88:59:B5:86:CC:EC:42:3C:E5:EF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/54b09de8-f12c-3e32-8666-1505aecbce63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv6: 2602:f8d5:a0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ea:f8:d4:4b:11:94:d6:0b:ff:f5:eb:98:44:dd:68:b6:b8: d4:e9:c6:34:82:73:03:e9:cc:1c:ac:88:8d:7f:f1:4c:9a:1c: 88:d3:bb:64:db:30:03:a8:fb:ba:00:7e:7f:1a:8b:9e:bf:c1: dd:09:e9:0a:09:68:5a:63:ab:87:49:c7:d4:19:b9:63:4e:01: 9f:91:e3:8e:16:51:ec:dc:fa:d1:03:33:3b:c4:0f:bd:05:13: e9:e5:df:06:0f:5d:1a:55:aa:0e:e7:43:56:9a:ce:fe:79:ab: c5:07:ea:59:c3:31:bd:54:59:de:2b:72:d4:19:73:98:c9:d4: 34:9e:69:a0:19:90:d3:3e:45:76:c8:1f:bd:a5:da:1e:88:56: fd:63:0b:4e:d3:30:e4:c1:a9:1d:cd:5f:b8:44:ec:67:8c:75: d6:bd:18:2d:ee:48:04:3c:54:e9:79:f1:79:6b:2b:fd:08:36: 85:fd:01:27:72:b7:6a:48:b8:16:d5:6a:31:35:7e:4d:4b:ac: c7:5b:a0:af:1c:b7:f4:8f:4d:e2:c3:29:44:a6:86:60:83:dc: 1e:e5:63:d8:08:a0:6c:54:96:c4:e4:93:20:f4:d0:09:d9:e1: 54:34:85:ac:e8:1a:58:e6:a0:be:ae:23:32:9e:e9:01:98:e7: 61:40:d5:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEram8yp4rLZ5e5EFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk OGNjZTQ1NzQtYWQ4OS00MGU0LThhZDMtMTQ4MTM3OTY4M2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAGYvt64jIelZw0RFtmVhcA2LDM6ZeQYmQyl Yb+YVrKuRcridSaBtwLph0X0Zx4Sb1/FJYcj+ghxn1f5AlVAh4OkNmkbuaMvFP0E hXeoxIptICYTxD4nOqIX+uLtaA6PxsPxW7W3XKsUa9i2yezJJKfQ7w/z3pHVSNpo vsmo+9kfzzzvu+ZL6cr8CYQQNyvakJxZTdontz2H/+PbRFbY/ebJbrnB0I1tsq1L i0O5IS4gcqjlThGjTdpA6JOW/pF+FrxGLfKq2pxWh/YHbaBlKgb/4TQLG9YddUif naEjNtesZA6ea3x/+1YMVn9rwHvbXayqb713MtBlFvS3CwCZCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAMjOj1LFOOsxYhZtYbM7EI85e93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvNTRiMDlkZTgtZjEyYy0z ZTMyLTg2NjYtMTUwNWFlY2JjZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL41QCg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGvq+NRLEZTWC//165hE3Wi2uNTpxjSCcwPpzBysiI1/8UyaHIjT u2TbMAOo+7oAfn8ai56/wd0J6QoJaFpjq4dJx9QZuWNOAZ+R444WUezc+tEDMzvE D70FE+nl3wYPXRpVqg7nQ1aazv55q8UH6lnDMb1UWd4rctQZc5jJ1DSeaaAZkNM+ RXbIH72l2h6IVv1jC07TMOTBqR3NX7hE7GeMdda9GC3uSAQ8VOl58XlrK/0INoX9 ASdyt2pIuBbVajE1fk1LrMdboK8ct/SPTeLDKUSmhmCD3B7lY9gIoGxUlsTkkyD0 0AnZ4VQ0hazoGljmoL6uIzKe6QGY52FA1TM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:58:47 2025 by rpki-client