$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cd1d939-076a-3d15-966b-5dc179434c24.roa File: 1cd1d939-076a-3d15-966b-5dc179434c24.roa (raw, json) Hash identifier: t5GHH/zbYnnhkYme5VQtzM2AySlpQohNiVwCA0aBcSU= Subject key identifier: 96:AD:37:25:3F:71:BB:40:57:AB:58:D7:F0:D8:61:F0:7B:3F:23:C6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686A0A1D6ACC9BA76379B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cd1d939-076a-3d15-966b-5dc179434c24.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 36629 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:a0:a1:d6:ac:c9:ba:76:37:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=f13d5517-bd1b-426e-b4f9-c095a37fcb71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0c:bd:a0:9a:be:c1:af:31:45:e7:d2:90:ad: 3f:ec:81:43:8b:49:0d:d5:e0:52:2f:0e:52:cc:ba: 40:b7:84:40:a4:39:f9:16:03:14:a3:59:aa:00:26: 3a:c4:5f:d5:0a:bb:b7:2c:dc:36:19:85:83:42:14: df:7b:81:81:19:0e:5a:df:2d:ac:c6:a9:b4:19:49: de:89:ff:7e:88:08:21:4e:56:f1:18:30:d8:54:05: 43:cc:46:3e:99:67:d3:bb:11:0a:74:ed:d5:da:b5: 0a:f5:e6:f3:1f:b5:44:8d:5f:26:dc:5d:ef:bc:04: 79:60:38:12:00:02:4d:db:c5:2a:59:2b:19:83:09: 75:c4:8a:38:5c:68:0f:3b:11:b6:80:08:e2:2f:3b: 3f:4a:c0:35:6d:16:2e:38:f0:48:b7:42:44:c9:e2: 17:4f:d0:16:a0:48:fc:bf:91:88:e6:93:66:e0:fa: e0:1a:88:09:eb:45:06:2b:50:99:0e:c0:40:1f:79: 71:d6:7e:02:76:1e:74:af:cc:ff:5f:de:db:08:62: a1:3f:ea:20:d1:e9:6b:9f:ae:d0:a0:2e:d9:1a:e3: 54:c7:d7:b2:7c:1b:19:0a:9e:72:92:c3:81:89:db: 17:d2:57:79:b3:16:e6:98:f7:a9:9f:07:76:e6:bd: 5e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:AD:37:25:3F:71:BB:40:57:AB:58:D7:F0:D8:61:F0:7B:3F:23:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cd1d939-076a-3d15-966b-5dc179434c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:d2:31:06:91:3e:b5:b7:dd:dd:28:b7:b3:8d:c8:e6:76:22: c9:0a:34:5a:c9:a9:89:10:cf:a2:3c:80:4a:c6:63:0c:4f:37: 70:11:02:27:b4:f0:11:a7:1a:df:5d:dd:df:95:45:61:ef:a6: 5c:ce:e1:15:ae:ad:74:95:4a:4f:f5:09:86:9b:49:d0:e0:85: a8:a5:88:3f:13:4b:b6:59:c0:02:1e:68:49:6c:73:44:d7:7f: a1:c4:0e:2c:a6:9e:d1:e2:32:4d:23:6d:d7:34:3a:a8:a2:f3: a6:9f:c9:d8:63:12:35:1e:0c:76:9c:57:79:6a:2a:86:84:27: 14:dd:e3:1b:3a:8e:63:96:9a:f4:a6:a0:31:51:df:86:33:26: 2b:9c:f6:12:d9:35:39:76:98:ee:92:3b:c8:98:f8:04:bf:fe: 40:82:1d:9a:1d:69:3a:7f:9f:bb:42:ee:bc:7c:33:35:51:f0: 76:8d:5f:fe:9a:f4:86:ac:2e:56:09:0c:59:f3:70:0b:c2:b1: da:6a:ed:8d:79:0c:48:c9:04:92:a1:be:51:46:82:8a:57:db: af:1c:b6:4a:fa:88:f9:92:20:eb:1d:65:a9:61:ea:ec:7a:b0: 5c:b3:60:f2:54:2c:62:76:e4:eb:e6:d9:22:b3:85:b8:03:c4: af:c1:17:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hqCh1qzJunY3m4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZjEzZDU1MTctYmQxYi00MjZlLWI0ZjktYzA5NWEzN2ZjYjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgy9oJq+wa8xRefSkK0/7IFDi0kN1eBSLw5S zLpAt4RApDn5FgMUo1mqACY6xF/VCru3LNw2GYWDQhTfe4GBGQ5a3y2sxqm0GUne if9+iAghTlbxGDDYVAVDzEY+mWfTuxEKdO3V2rUK9ebzH7VEjV8m3F3vvAR5YDgS AAJN28UqWSsZgwl1xIo4XGgPOxG2gAjiLzs/SsA1bRYuOPBIt0JEyeIXT9AWoEj8 v5GI5pNm4PrgGogJ60UGK1CZDsBAH3lx1n4Cdh50r8z/X97bCGKhP+og0elrn67Q oC7ZGuNUx9eyfBsZCp5yksOBidsX0ld5sxbmmPepnwd25r1eAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJatNyU/cbtAV6tY1/DYYfB7PyPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNkMWQ5MzktMDc2YS0z ZDE1LTk2NmItNWRjMTc5NDM0YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3SMQaRPrW33d0ot7ONyOZ2IskKNFrJqYkQz6I8gErGYwxPN3AR Aie08BGnGt9d3d+VRWHvplzO4RWurXSVSk/1CYabSdDghailiD8TS7ZZwAIeaEls c0TXf6HEDiymntHiMk0jbdc0Oqii86afydhjEjUeDHacV3lqKoaEJxTd4xs6jmOW mvSmoDFR34YzJiuc9hLZNTl2mO6SO8iY+AS//kCCHZodaTp/n7tC7rx8MzVR8HaN X/6a9IasLlYJDFnzcAvCsdpq7Y15DEjJBJKhvlFGgopX268ctkr6iPmSIOsdZalh 6ux6sFyzYPJULGJ25Ovm2SKzhbgDxK/BF/Q= -----END CERTIFICATE-----Generated at Wed Sep 10 17:54:31 2025 by rpki-client