$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa File: 1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa (raw, json) Hash identifier: pzSWLiXgt4Uve3IprzMjdh8jSQqc8QDy9eS2InqVKjA= Subject key identifier: 97:95:D7:24:43:6D:47:22:53:16:E0:5E:E0:4F:33:1C:25:1B:BA:6C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF25695A3ACCDC8CFF473A230 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396586 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:95:a3:ac:cd:c8:cf:f4:73:a2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=069893cb-45d7-4d02-b79d-4ace274f3344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:f5:99:c1:c4:14:d3:88:a8:9c:e6:a2:4d: 2c:14:68:5e:5e:18:4c:ef:83:4c:0c:b6:c1:8c:41: cf:a8:56:52:20:ba:67:45:44:15:90:63:d7:90:b8: ff:9a:63:94:0e:59:c9:2d:74:e1:ea:27:c5:41:3c: 5b:9a:76:97:1f:aa:2c:60:23:0a:d0:5a:3f:c5:bb: d5:b3:b2:6d:95:e3:68:01:55:b7:e3:0c:3f:26:75: 27:b6:b2:05:ee:a3:45:89:52:82:0a:c3:49:f0:c2: 81:07:d2:81:58:57:7f:98:c8:d2:cd:0f:46:76:1a: c7:04:c4:08:65:39:bf:80:5a:6d:31:27:9e:f3:ad: 2b:cd:1f:04:83:7b:fe:a4:54:23:66:e8:47:7a:0e: f0:cc:a8:a3:79:81:3c:f9:e1:ad:cd:dc:1c:8e:59: 91:e7:2e:09:b0:f2:2b:70:90:e6:83:39:4c:be:c1: 98:bf:86:e3:f1:1a:fe:07:78:ae:d5:22:f8:ba:54: 79:1e:62:3f:72:cf:ff:5a:6e:3f:97:d2:a9:ae:dc: 80:8f:3a:e0:6c:77:da:d1:c4:2f:22:50:bf:f4:d8: ec:bb:79:1f:36:87:fb:e1:72:57:06:55:73:ca:e8: db:50:4a:27:2a:a7:29:0b:09:fa:cf:8c:ac:bd:4a: c1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:95:D7:24:43:6D:47:22:53:16:E0:5E:E0:4F:33:1C:25:1B:BA:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c2dfe13-0d11-3fc3-b1a9-a4e446cfb473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:0d:1b:ee:55:7e:e2:22:c1:12:e1:2a:d2:d4:6c:50:10:77: fb:8b:92:b9:21:3b:30:a1:12:36:21:5e:72:6e:78:08:d8:0c: 12:55:a8:f1:19:d3:3a:c2:33:11:35:ff:ae:3f:ea:38:49:bd: e5:51:ee:0b:e7:98:0c:f1:37:41:1f:05:3d:a6:0a:06:9f:06: 0f:fb:76:d0:da:bd:d1:2c:e2:1a:06:29:c4:75:a6:51:3f:95: 91:cc:8e:af:dc:f8:5d:90:0d:e8:74:18:43:09:19:77:8f:42: 8f:ae:d3:44:99:52:1c:e5:49:e6:a3:55:5f:f6:35:d5:d2:8f: 77:19:91:2c:43:56:34:b3:c8:f6:e6:6c:95:35:59:4d:78:06: e0:e6:e3:04:96:eb:cf:e1:6a:13:84:8e:5d:f9:47:64:b1:96: 3c:ec:40:d8:4d:00:b9:47:66:7e:7e:33:ac:9e:c7:48:71:7b: c7:81:94:a6:c1:d5:e8:32:36:20:35:f4:6e:23:b9:1f:8f:4f: 26:1c:84:18:01:df:88:79:30:2c:d0:f1:c6:f1:77:63:9e:85: 06:c7:6c:61:c6:82:04:4e:66:1d:ec:74:67:42:40:d8:7d:06: 82:8f:f1:90:6b:ba:be:47:34:09:4a:8f:b8:79:da:b2:b4:2b: 1a:11:5f:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpWjrM3Iz/RzojAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MDY5ODkzY2ItNDVkNy00ZDAyLWI3OWQtNGFjZTI3NGYzMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpP1mcHEFNOIqJzmok0sFGheXhhM74NMDLbB jEHPqFZSILpnRUQVkGPXkLj/mmOUDlnJLXTh6ifFQTxbmnaXH6osYCMK0Fo/xbvV s7JtleNoAVW34ww/JnUntrIF7qNFiVKCCsNJ8MKBB9KBWFd/mMjSzQ9GdhrHBMQI ZTm/gFptMSee860rzR8Eg3v+pFQjZuhHeg7wzKijeYE8+eGtzdwcjlmR5y4JsPIr cJDmgzlMvsGYv4bj8Rr+B3iu1SL4ulR5HmI/cs//Wm4/l9KprtyAjzrgbHfa0cQv IlC/9Njsu3kfNof74XJXBlVzyujbUEonKqcpCwn6z4ysvUrB3QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJeV1yRDbUciUxbgXuBPMxwlG7psMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWMyZGZlMTMtMGQxMS0z ZmMzLWIxYTktYTRlNDQ2Y2ZiNDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCODRvuVX7iIsES4SrS1GxQEHf7i5K5ITswoRI2 IV5ybngI2AwSVajxGdM6wjMRNf+uP+o4Sb3lUe4L55gM8TdBHwU9pgoGnwYP+3bQ 2r3RLOIaBinEdaZRP5WRzI6v3PhdkA3odBhDCRl3j0KPrtNEmVIc5Unmo1Vf9jXV 0o93GZEsQ1Y0s8j25myVNVlNeAbg5uMEluvP4WoThI5d+UdksZY87EDYTQC5R2Z+ fjOsnsdIcXvHgZSmwdXoMjYgNfRuI7kfj08mHIQYAd+IeTAs0PHG8XdjnoUGx2xh xoIETmYd7HRnQkDYfQaCj/GQa7q+RzQJSo+4edqytCsaEV+2 -----END CERTIFICATE-----Generated at Wed Oct 29 07:22:59 2025 by rpki-client