$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/084a6b88-f9cc-37d5-a4cd-8a5e20b2e967.roa File: 084a6b88-f9cc-37d5-a4cd-8a5e20b2e967.roa (raw, json) Hash identifier: 4PyVouq6WM7TEHlUBeynIIafJx0FpQfrpnelrUqwypc= Subject key identifier: 8B:20:AA:F9:64:13:76:AD:FC:50:B9:50:97:C3:9B:26:EC:83:67:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A11962A7AB37A3E989A4600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/084a6b88-f9cc-37d5-a4cd-8a5e20b2e967.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396573 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:96:2a:7a:b3:7a:3e:98:9a:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=ae24f868-150d-4b68-9a2f-0387f5d17528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:7f:d2:ec:ed:e3:1e:03:25:48:ed:43:a6: cb:6a:42:b2:d1:24:49:88:68:6a:74:5d:d8:7b:8b: 93:5d:6c:3a:e4:a5:13:47:b3:65:af:0a:6c:1c:d9: 2d:bf:3a:53:12:b8:fc:9b:b2:af:d9:f1:72:b3:60: 8e:05:c3:a2:31:3b:49:cc:96:ea:10:87:ce:71:47: 63:8b:37:a7:f0:d2:f3:1e:2d:b8:6a:d7:42:a2:5d: 27:45:b0:f2:06:a2:f9:8d:6c:5b:97:e8:30:bf:42: 2d:8f:01:74:70:0c:a5:58:0d:2b:5c:b2:34:9a:c8: d6:a9:85:e9:6c:5a:20:44:d2:01:b2:d8:35:34:80: 04:6c:f7:28:38:92:0d:3a:f3:44:d9:54:ad:f6:2d: 38:d5:b5:71:d7:01:f1:28:f9:89:f9:84:6b:39:18: 7e:17:2e:04:82:7b:68:fa:4d:72:cb:59:71:9e:c1: 3b:0b:b8:62:6a:9f:5c:fc:4e:b2:cd:d1:79:6f:58: 85:5f:9f:5d:48:b3:e5:e5:0a:3f:3a:fe:eb:08:a0: 5f:39:1b:96:30:d0:fb:31:b1:a7:fa:38:03:73:ef: a1:9f:12:89:06:f9:9a:b3:fd:48:83:78:5e:5c:a8: 32:e3:bc:fb:e3:63:35:b9:ea:3a:e0:50:ac:ea:f3: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:20:AA:F9:64:13:76:AD:FC:50:B9:50:97:C3:9B:26:EC:83:67:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/084a6b88-f9cc-37d5-a4cd-8a5e20b2e967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:3d:5c:98:5a:df:e0:d4:ee:3b:94:c6:02:b1:8a:19:c7:95: 41:b6:e0:a2:9d:83:c4:d6:64:05:65:6b:38:65:07:e7:0b:80: 92:ba:94:e8:e3:52:3d:a3:5a:f7:54:b4:b5:ff:91:79:8f:a9: ac:43:67:86:78:0c:d6:2d:d2:07:dd:60:c4:54:e4:5c:1c:e5: 0f:9c:51:7d:64:c4:51:5b:f8:92:72:83:38:a5:67:22:5f:4d: fc:30:f1:c5:fd:05:2b:37:8a:ec:49:f1:2d:f8:10:e8:92:6e: a2:3f:29:8b:48:d7:56:28:8b:f6:d8:19:94:6f:04:9b:da:ce: d1:02:ad:7f:21:bb:3d:27:6a:97:ba:be:df:54:42:12:d8:a6: 8d:e9:e8:87:01:aa:8b:b7:91:8e:01:fc:b3:4b:2e:5f:4f:07: cb:0f:cc:67:83:05:e1:69:b2:98:93:8c:44:0a:a6:02:61:3b: b9:5a:58:1e:a2:15:c2:0d:88:a4:62:39:0e:58:b0:f7:93:12: f4:08:dd:5a:dd:1a:44:dc:37:75:9e:3e:ab:41:3b:16:a6:60: 45:0a:73:36:a8:54:be:83:1c:b4:90:52:56:7c:64:af:f6:38: a3:9b:1b:d5:f8:2a:b8:f2:db:3b:67:d9:46:c1:d3:86:1a:19: d5:04:c4:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZYqerN6PpiaRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YWUyNGY4NjgtMTUwZC00YjY4LTlhMmYtMDM4N2Y1ZDE3NTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXp/0uzt4x4DJUjtQ6bLakKy0SRJiGhqdF3Y e4uTXWw65KUTR7NlrwpsHNktvzpTErj8m7Kv2fFys2COBcOiMTtJzJbqEIfOcUdj izen8NLzHi24atdCol0nRbDyBqL5jWxbl+gwv0ItjwF0cAylWA0rXLI0msjWqYXp bFogRNIBstg1NIAEbPcoOJINOvNE2VSt9i041bVx1wHxKPmJ+YRrORh+Fy4Egnto +k1yy1lxnsE7C7hiap9c/E6yzdF5b1iFX59dSLPl5Qo/Ov7rCKBfORuWMND7MbGn +jgDc++hnxKJBvmas/1Ig3heXKgy47z742M1ueo64FCs6vOtqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIsgqvlkE3at/FC5UJfDmybsg2cFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDg0YTZiODgtZjljYy0z N2Q1LWE0Y2QtOGE1ZTIwYjJlOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKo9XJha3+DU7juUxgKxihnHlUG24KKdg8TWZAVlazhlB+cLgJK6 lOjjUj2jWvdUtLX/kXmPqaxDZ4Z4DNYt0gfdYMRU5Fwc5Q+cUX1kxFFb+JJygzil ZyJfTfww8cX9BSs3iuxJ8S34EOiSbqI/KYtI11Yoi/bYGZRvBJvaztECrX8huz0n ape6vt9UQhLYpo3p6IcBqou3kY4B/LNLLl9PB8sPzGeDBeFpspiTjEQKpgJhO7la WB6iFcINiKRiOQ5YsPeTEvQI3VrdGkTcN3WePqtBOxamYEUKczaoVL6DHLSQUlZ8 ZK/2OKObG9X4Krjy2ztn2UbB04YaGdUExCA= -----END CERTIFICATE-----Generated at Wed Sep 10 17:57:14 2025 by rpki-client