$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c801df5-003e-34fd-b57b-0c53e0c21c84.roa File: 1c801df5-003e-34fd-b57b-0c53e0c21c84.roa (raw, json) Hash identifier: CFhDPJS51f6cPqQeIbsUqEMgs0FnHCyGhG5Kv5C8sn8= Subject key identifier: DC:AB:C8:1B:30:FF:24:83:5A:55:3D:F3:A0:6A:1D:DC:FF:A5:8D:27 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF6869C59278B6F21DA580080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c801df5-003e-34fd-b57b-0c53e0c21c84.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 40647 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:9c:59:27:8b:6f:21:da:58:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=d0edcb6d-77b6-4b84-89a2-24816bd30f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:87:6d:5a:9c:ee:3b:18:f3:6f:96:b6:de:b1: 28:ea:04:6f:a7:8a:5b:23:c5:4c:c8:29:d8:62:96: 8b:39:2e:d7:01:01:f4:13:fe:67:30:b2:43:46:04: 54:53:e2:73:11:eb:8c:f1:c5:0e:46:73:22:7c:f3: 5e:e6:87:e2:f6:cf:a9:56:44:77:ce:6f:02:9a:79: 34:59:2b:74:37:be:d8:d2:43:bf:19:82:2d:80:82: af:f4:52:ae:ac:ef:15:81:0e:38:c0:78:85:07:89: 0a:73:c9:2d:6f:21:3d:fa:b2:b2:51:70:ff:1e:a9: cf:83:e5:94:4c:be:c2:5e:8b:40:99:7d:3f:37:c4: 2a:aa:1b:57:b1:eb:d7:af:b8:66:05:87:c4:aa:70: 84:26:04:f9:24:d4:e5:85:95:72:20:56:55:4e:2b: 01:8f:42:2a:a7:3c:d9:71:1f:18:9c:48:bf:20:df: 48:44:ec:fa:ca:ce:cf:63:6d:e9:36:bc:f2:6c:75: 85:4b:88:0e:27:04:72:b0:9c:f8:0f:33:a2:63:ab: 48:36:a5:76:c5:b7:ef:77:20:b1:bd:e2:d2:5e:5f: a7:01:f2:e2:13:0b:bd:5b:4c:99:45:7f:34:70:54: de:28:90:a3:d7:31:d4:63:49:5f:7b:3c:da:5c:7c: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AB:C8:1B:30:FF:24:83:5A:55:3D:F3:A0:6A:1D:DC:FF:A5:8D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c801df5-003e-34fd-b57b-0c53e0c21c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:db:7f:3b:05:9f:e6:32:37:63:c4:ed:64:3c:09:6a:bc:ff: 98:7d:c8:d1:fa:b4:44:7d:73:01:54:22:7d:bd:df:33:ba:bc: c5:94:71:5e:9b:93:86:1d:92:46:50:9e:31:17:99:0f:d5:cf: 78:d3:5a:e5:a7:66:84:99:7f:c5:15:5d:d7:1f:bd:8e:12:50: dc:d5:8c:8a:db:88:43:8e:f0:3b:64:65:55:9d:5a:9a:2f:fd: ad:15:84:04:c1:9c:84:22:12:5e:81:99:0c:f5:97:dd:0b:83: a8:9c:e0:3b:c8:16:24:e0:a9:3a:40:d1:40:b7:88:29:56:aa: 35:3f:6b:b6:f0:ca:a8:25:3a:50:0f:94:9a:7f:38:33:95:04: 23:a2:8e:ab:0f:fc:98:40:fe:42:04:59:d8:9a:cb:d9:8a:20: ca:f0:18:c4:06:7e:58:1c:04:e2:b0:27:2e:f5:b6:ba:9d:e4: df:f2:a8:b0:cc:00:4a:e4:b3:1e:30:7b:32:59:21:71:7f:ed: 06:f3:76:d0:8f:c7:4c:1b:47:4c:6c:1b:fa:f2:95:02:73:53: cc:e8:5a:7e:89:91:6c:2c:1c:8b:32:b0:b6:cf:2c:15:ec:56: ab:a6:78:90:4c:27:44:68:cd:7d:53:8e:6d:53:76:fb:60:b3: b8:a3:cc:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hpxZJ4tvIdpYAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZDBlZGNiNmQtNzdiNi00Yjg0LTg5YTItMjQ4MTZiZDMwZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4dtWpzuOxjzb5a23rEo6gRvp4pbI8VMyCnY YpaLOS7XAQH0E/5nMLJDRgRUU+JzEeuM8cUORnMifPNe5ofi9s+pVkR3zm8Cmnk0 WSt0N77Y0kO/GYItgIKv9FKurO8VgQ44wHiFB4kKc8ktbyE9+rKyUXD/HqnPg+WU TL7CXotAmX0/N8QqqhtXsevXr7hmBYfEqnCEJgT5JNTlhZVyIFZVTisBj0IqpzzZ cR8YnEi/IN9IROz6ys7PY23pNrzybHWFS4gOJwRysJz4DzOiY6tINqV2xbfvdyCx veLSXl+nAfLiEwu9W0yZRX80cFTeKJCj1zHUY0lfezzaXHxmPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNyryBsw/ySDWlU986BqHdz/pY0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWM4MDFkZjUtMDAzZS0z NGZkLWI1N2ItMGM1M2UwYzIxYzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABXbfzsFn+YyN2PE7WQ8CWq8/5h9yNH6tER9cwFUIn293zO6vMWU cV6bk4YdkkZQnjEXmQ/Vz3jTWuWnZoSZf8UVXdcfvY4SUNzVjIrbiEOO8DtkZVWd Wpov/a0VhATBnIQiEl6BmQz1l90Lg6ic4DvIFiTgqTpA0UC3iClWqjU/a7bwyqgl OlAPlJp/ODOVBCOijqsP/JhA/kIEWdiay9mKIMrwGMQGflgcBOKwJy71trqd5N/y qLDMAErksx4wezJZIXF/7QbzdtCPx0wbR0xsG/rylQJzU8zoWn6JkWwsHIsysLbP LBXsVqumeJBMJ0RozX1Tjm1Tdvtgs7ijzLM= -----END CERTIFICATE-----Generated at Wed Sep 10 17:49:34 2025 by rpki-client