$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df3c3e8-3219-3ab2-a4c6-9e9a501ba130.roa File: 4df3c3e8-3219-3ab2-a4c6-9e9a501ba130.roa (raw, json) Hash identifier: uZoLZovbe/1LR/uQDSxo+ZjpAeRwjn4lHEVt1ixnaaI= Subject key identifier: 27:BD:B8:71:9A:5A:E3:FC:7B:EB:46:0B:61:5C:BE:40:01:88:90:51 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA2C63AE28FB9165EF28D7880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df3c3e8-3219-3ab2-a4c6-9e9a501ba130.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 396571 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:3a:e2:8f:b9:16:5e:f2:8d:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=27101f76-0f4f-40d7-a344-1d6e5ecc0b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:13:ca:3e:ee:03:4f:3f:12:29:c5:9c:8d:dc: 11:a8:55:da:78:01:8f:80:e1:ec:62:d2:a5:bc:c5: 55:56:34:03:15:b9:43:54:2f:93:32:df:3c:fe:4d: c0:ff:0f:f2:24:59:95:dd:b9:2a:3a:56:e3:7f:e7: 42:e3:f2:e0:01:01:c5:03:5a:0f:4a:95:f0:c4:87: 98:02:cb:b1:b4:1b:e9:46:a9:01:64:69:19:e2:5e: 74:12:6b:25:bf:ef:d9:af:97:8a:e8:84:26:81:5f: 81:e4:e0:01:c7:88:8d:92:36:15:3d:39:21:ea:88: 11:9c:69:ec:02:dd:98:e6:f6:c9:46:c6:58:84:98: f3:e9:56:16:83:25:59:dc:07:bd:0e:e1:91:2e:12: 4d:26:18:6d:72:30:c3:bc:bc:5e:64:9b:b3:0b:f6: 6e:a2:7f:0d:14:98:4c:9c:81:a3:f7:01:43:f9:ab: 98:19:96:d1:2e:b2:ae:e0:4f:08:5a:8d:26:e6:7a: 84:99:65:67:d0:42:0d:16:9f:bf:30:b5:03:5e:b6: 87:bf:63:1a:94:94:a4:57:ab:b6:a8:44:5b:bf:39: 75:b5:a6:b8:15:0f:97:a3:61:f6:88:94:15:80:a9: a2:e5:7e:4b:f9:d0:ce:1d:67:cd:aa:de:4b:ba:86: 3d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BD:B8:71:9A:5A:E3:FC:7B:EB:46:0B:61:5C:BE:40:01:88:90:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df3c3e8-3219-3ab2-a4c6-9e9a501ba130.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:15:b2:c4:88:82:1f:eb:c3:e1:c8:e4:48:8d:37:6c:13:e3: 58:d2:c8:a6:03:24:c3:a4:f4:be:91:9f:63:43:39:e0:c9:65: 12:e3:8a:6e:cd:97:8b:47:6b:b0:52:71:0f:99:07:fd:f6:97: a2:55:8d:88:91:59:58:0d:28:09:45:92:2b:38:99:12:83:5d: 32:54:ac:32:01:2e:cd:b7:50:b2:e5:ea:69:a8:4a:51:ec:b2: b1:4e:1d:b5:6f:3e:db:24:ac:fb:95:15:eb:04:29:d6:67:fc: 89:ad:32:62:1f:44:b0:d5:e5:40:b4:2b:5d:da:64:69:ac:29: 61:dc:f2:80:2c:3c:73:52:db:65:0d:2b:7b:67:c1:32:8f:99: 2a:08:e3:31:a3:04:10:25:d4:31:93:d4:a1:44:cb:dc:b7:dd: e2:72:b7:8b:09:53:11:b4:18:ad:52:89:af:fd:8f:f7:14:d1: 2b:fb:46:f9:21:98:e1:ba:c3:4e:29:61:fd:67:00:5f:5c:a6: 25:4c:c5:f1:5f:08:0e:c0:29:f0:e7:18:a6:da:31:d7:c1:12: ce:ed:5f:b3:64:1a:af:6e:92:3c:66:88:1d:97:57:24:92:fb: a0:17:58:e6:86:0b:70:23:7f:eb:fc:5c:b6:4c:3f:4f:a9:6f: d6:f6:d9:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqixjrij7kWXvKNeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk MjcxMDFmNzYtMGY0Zi00MGQ3LWEzNDQtMWQ2ZTVlY2MwYjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixPKPu4DTz8SKcWcjdwRqFXaeAGPgOHsYtKl vMVVVjQDFblDVC+TMt88/k3A/w/yJFmV3bkqOlbjf+dC4/LgAQHFA1oPSpXwxIeY AsuxtBvpRqkBZGkZ4l50Emslv+/Zr5eK6IQmgV+B5OABx4iNkjYVPTkh6ogRnGns At2Y5vbJRsZYhJjz6VYWgyVZ3Ae9DuGRLhJNJhhtcjDDvLxeZJuzC/Zuon8NFJhM nIGj9wFD+auYGZbRLrKu4E8IWo0m5nqEmWVn0EINFp+/MLUDXraHv2MalJSkV6u2 qERbvzl1taa4FQ+Xo2H2iJQVgKmi5X5L+dDOHWfNqt5LuoY9ZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCe9uHGaWuP8e+tGC2FcvkABiJBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGRmM2MzZTgtMzIxOS0z YWIyLWE0YzYtOWU5YTUwMWJhMTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF8VssSIgh/rw+HI5EiNN2wT41jSyKYDJMOk9L6Rn2NDOeDJZRLj im7Nl4tHa7BScQ+ZB/32l6JVjYiRWVgNKAlFkis4mRKDXTJUrDIBLs23ULLl6mmo SlHssrFOHbVvPtskrPuVFesEKdZn/ImtMmIfRLDV5UC0K13aZGmsKWHc8oAsPHNS 22UNK3tnwTKPmSoI4zGjBBAl1DGT1KFEy9y33eJyt4sJUxG0GK1Sia/9j/cU0Sv7 RvkhmOG6w04pYf1nAF9cpiVMxfFfCA7AKfDnGKbaMdfBEs7tX7NkGq9ukjxmiB2X VySS+6AXWOaGC3Ajf+v8XLZMP0+pb9b22e8= -----END CERTIFICATE-----Generated at Wed Aug 6 11:06:57 2025 by rpki-client