$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb4b37-39de-30af-ab05-2e2e4c6c9463.roa File: 02eb4b37-39de-30af-ab05-2e2e4c6c9463.roa (raw, json) Hash identifier: ZdNSEVODJ+XO2sMU/vC7HjIy6ebVEgshQySJwlCgrCw= Subject key identifier: 11:89:E1:D0:36:41:35:15:8E:13:71:C7:F7:CA:84:E2:42:46:67:29 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A11987EC4F8FBCA41680940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb4b37-39de-30af-ab05-2e2e4c6c9463.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396585 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:98:7e:c4:f8:fb:ca:41:68:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=b81d5dd9-5bbd-4b20-8ca5-fde0bfe41a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:54:79:ef:9a:7f:a8:40:33:d5:cd:91:44: 05:36:44:7d:84:c4:04:55:f5:cf:7d:24:c6:3b:87: 75:59:4d:47:29:52:42:ff:c7:6c:80:fe:59:0d:e2: cb:82:2e:75:16:8a:b9:3c:94:c5:27:10:35:c6:7f: 32:65:f6:a1:bc:db:39:e5:69:2a:d8:1e:8f:e2:e3: e6:36:08:ab:c3:5f:c5:0b:dd:2f:a9:b8:7e:6c:23: 73:76:d9:fd:e4:16:af:e5:76:6c:a0:77:ca:50:80: 98:99:10:42:ec:23:b4:e8:15:8b:0d:cf:2a:13:ed: ef:18:cb:ff:57:d1:23:fe:c2:ec:d5:b0:19:e3:07: 09:9f:33:6b:b1:1a:6a:e2:3a:a2:a0:c9:7b:ed:27: 5d:57:2e:b8:a6:5b:9f:12:30:ec:10:8c:6e:d4:6c: a3:5e:45:46:10:a2:fb:07:d6:53:6a:d0:ec:fe:8b: 38:c8:46:a3:cb:3e:dd:f8:aa:87:8f:31:cb:e0:59: 10:89:eb:ac:46:af:cb:1f:3f:f4:b1:f7:3f:27:7d: 85:84:24:2c:87:97:6c:0b:e8:ae:6c:fa:85:c6:53: e0:ec:ca:5d:92:b0:48:5f:8d:02:75:d0:b6:31:7d: 6e:b8:b6:57:e2:8b:76:ff:ce:35:42:61:27:d8:d4: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:89:E1:D0:36:41:35:15:8E:13:71:C7:F7:CA:84:E2:42:46:67:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02eb4b37-39de-30af-ab05-2e2e4c6c9463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:1a:d6:01:cf:fb:eb:82:11:3b:1d:67:20:54:4a:a0:27:be: fe:92:93:b4:3c:5b:42:64:52:91:4b:dc:40:ee:99:43:ea:57: 2f:2e:93:e7:c0:b9:6d:4c:56:b6:1c:30:9a:94:3e:67:78:41: e9:85:18:e5:17:f3:7d:bc:16:fd:d5:53:74:71:3c:d0:c8:42: 49:e3:b4:b9:8d:65:fd:89:71:03:32:fb:d8:0c:a0:a7:08:20: cf:1b:c3:17:87:70:5b:4a:7f:e6:43:92:c7:86:f8:a1:92:03: 0e:84:3c:2a:7d:49:0d:b0:a7:9e:76:e9:2d:ab:ee:bc:64:c3: ba:dc:93:12:e4:64:01:7a:2d:a7:df:65:4e:2e:14:cb:b2:44: aa:e5:5c:d6:10:14:69:bb:e7:d0:6a:95:01:77:71:27:89:87: d6:d7:d6:ea:a5:92:eb:ad:9a:26:fe:f9:d6:61:87:e0:4c:98: 13:2e:03:45:8e:95:e5:53:58:38:51:5a:ac:42:70:a6:22:32: b9:40:24:d6:c2:5e:a9:1f:64:de:76:0f:c9:e3:c1:bd:20:38: b1:3d:7b:33:3b:e0:a2:b7:99:df:e8:91:31:4b:72:af:ff:32: af:68:ee:dd:0f:01:20:26:e2:39:db:a7:c3:6b:06:7f:b8:54: ed:83:76:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZh+xPj7ykFoCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YjgxZDVkZDktNWJiZC00YjIwLThjYTUtZmRlMGJmZTQxYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHtUee+af6hAM9XNkUQFNkR9hMQEVfXPfSTG O4d1WU1HKVJC/8dsgP5ZDeLLgi51Foq5PJTFJxA1xn8yZfahvNs55Wkq2B6P4uPm Ngirw1/FC90vqbh+bCNzdtn95Bav5XZsoHfKUICYmRBC7CO06BWLDc8qE+3vGMv/ V9Ej/sLs1bAZ4wcJnzNrsRpq4jqioMl77SddVy64plufEjDsEIxu1GyjXkVGEKL7 B9ZTatDs/os4yEajyz7d+KqHjzHL4FkQieusRq/LHz/0sfc/J32FhCQsh5dsC+iu bPqFxlPg7MpdkrBIX40CddC2MX1uuLZX4ot2/841QmEn2NRzCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBGJ4dA2QTUVjhNxx/fKhOJCRmcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDJlYjRiMzctMzlkZS0z MGFmLWFiMDUtMmUyZTRjNmM5NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL8a1gHP++uCETsdZyBUSqAnvv6Sk7Q8W0JkUpFL3EDumUPqVy8u k+fAuW1MVrYcMJqUPmd4QemFGOUX8328Fv3VU3RxPNDIQknjtLmNZf2JcQMy+9gM oKcIIM8bwxeHcFtKf+ZDkseG+KGSAw6EPCp9SQ2wp5526S2r7rxkw7rckxLkZAF6 LaffZU4uFMuyRKrlXNYQFGm759BqlQF3cSeJh9bX1uqlkuutmib++dZhh+BMmBMu A0WOleVTWDhRWqxCcKYiMrlAJNbCXqkfZN52D8njwb0gOLE9ezM74KK3md/okTFL cq//Mq9o7t0PASAm4jnbp8NrBn+4VO2DdtA= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:34 2025 by rpki-client