$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fbc14b7-f32a-3f1e-bc4a-d761575c31e0.roa File: 1fbc14b7-f32a-3f1e-bc4a-d761575c31e0.roa (raw, json) Hash identifier: otYSAbmTTeiW6Q4/XbpN2MpU34zUsCLmeEhDoNIaPOg= Subject key identifier: 88:2C:17:A8:D4:B4:7C:39:BC:B3:0B:AF:C3:EE:5D:FC:8C:E0:74:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B838212DCA20525F390E27F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fbc14b7-f32a-3f1e-bc4a-d761575c31e0.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396611 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:12:dc:a2:05:25:f3:90:e2:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=a1cf11e8-7fb5-4f8a-b116-07f9f0a461e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:d8:7e:b7:03:54:be:e7:ab:79:a5:54:93: 06:e5:e2:99:e4:f4:cd:2c:f7:f4:3b:d6:e2:a9:4f: 2d:ff:37:c4:a2:d5:fd:2c:ed:29:a9:bc:0a:a6:a7: eb:b4:32:6e:dc:62:4d:37:7b:e7:2b:ff:20:db:6a: b6:e2:98:67:f0:d8:9a:19:79:0d:92:d4:eb:9b:91: a3:38:76:88:bf:cd:86:52:54:00:fd:d7:81:54:33: 64:3f:68:94:33:d8:08:be:c0:9c:14:60:6c:f6:44: 35:fd:03:6e:99:a1:14:82:0e:02:41:4d:f3:a7:0b: 1f:6d:f8:22:e6:1c:84:86:6e:ac:95:e4:45:d2:c5: 3c:5f:6d:d2:e9:3a:d7:58:b7:79:3c:93:27:92:6a: 8f:38:ca:ef:3c:40:b6:54:89:e3:52:cb:fb:1a:6b: f6:1f:30:c5:5c:93:61:f1:b0:19:4e:27:c3:86:5d: 95:13:fa:fc:bc:09:c0:cd:ac:79:5a:ad:eb:26:1d: e0:42:1c:44:2b:36:32:dc:60:d7:3f:32:94:ef:5f: 85:a0:e9:a0:7b:69:d0:7a:eb:1d:f3:40:d6:a4:6a: d0:ad:f1:c4:f9:81:10:b4:f7:01:9e:cb:c2:ff:18: 90:64:af:c2:03:90:3d:58:ce:04:2b:c6:54:53:bf: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2C:17:A8:D4:B4:7C:39:BC:B3:0B:AF:C3:EE:5D:FC:8C:E0:74:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fbc14b7-f32a-3f1e-bc4a-d761575c31e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:3b:e8:3a:51:bb:ee:b1:72:78:fd:43:0c:07:b1:3b:fb:da: c1:c5:d7:9a:47:42:27:5b:ce:51:fc:d1:26:93:80:9b:2d:49: 18:a4:f2:95:ac:52:8e:0d:e0:4a:ef:40:7f:7d:de:cb:96:c3: 8c:12:10:06:ff:55:20:ca:39:15:d0:f4:34:ae:72:c9:f2:53: 01:2b:20:ab:66:c7:83:4c:a8:07:fe:17:c8:8b:f9:8b:1f:ff: 47:1e:43:c8:ab:53:dc:61:2f:cb:93:c4:3d:f0:aa:ed:5b:20: 87:e2:de:7e:ed:13:6b:42:4f:5c:f6:43:1a:b6:24:be:66:ed: df:35:22:06:e3:ef:4b:22:b1:34:d4:aa:e6:e8:2f:97:38:e2: 8f:ea:37:a3:87:bb:ea:2b:ca:d3:52:8e:17:af:df:86:7e:44: ec:3e:9d:33:86:55:66:49:c0:6d:71:f8:1e:48:4a:1b:d8:14: df:af:2d:f8:c5:9f:59:b3:c4:bf:28:80:08:b9:03:55:2a:f0: 7c:8e:1b:14:80:3b:16:cc:dc:ff:b0:be:23:e3:79:da:59:30: 9d:9d:fd:2a:42:02:36:9b:9b:8f:05:23:3a:5e:08:7a:c2:5d: 1d:22:88:9a:80:d8:a4:3d:a5:cc:31:c7:ee:fd:97:58:8d:83: 15:c4:5e:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDghLcogUl85Dif4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YTFjZjExZTgtN2ZiNS00ZjhhLWIxMTYtMDdmOWYwYTQ2MWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WTYfrcDVL7nq3mlVJMG5eKZ5PTNLPf0O9bi qU8t/zfEotX9LO0pqbwKpqfrtDJu3GJNN3vnK/8g22q24phn8NiaGXkNktTrm5Gj OHaIv82GUlQA/deBVDNkP2iUM9gIvsCcFGBs9kQ1/QNumaEUgg4CQU3zpwsfbfgi 5hyEhm6sleRF0sU8X23S6TrXWLd5PJMnkmqPOMrvPEC2VInjUsv7Gmv2HzDFXJNh 8bAZTifDhl2VE/r8vAnAzax5Wq3rJh3gQhxEKzYy3GDXPzKU71+FoOmge2nQeusd 80DWpGrQrfHE+YEQtPcBnsvC/xiQZK/CA5A9WM4EK8ZUU7+olwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgsF6jUtHw5vLMLr8PuXfyM4HTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWZiYzE0YjctZjMyYS0z ZjFlLWJjNGEtZDc2MTU3NWMzMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQ76DpRu+6xcnj9QwwHsTv72sHF15pHQidbzlH80SaTgJstSRik 8pWsUo4N4ErvQH993suWw4wSEAb/VSDKORXQ9DSucsnyUwErIKtmx4NMqAf+F8iL +Ysf/0ceQ8irU9xhL8uTxD3wqu1bIIfi3n7tE2tCT1z2Qxq2JL5m7d81Igbj70si sTTUquboL5c44o/qN6OHu+orytNSjhev34Z+ROw+nTOGVWZJwG1x+B5IShvYFN+v LfjFn1mzxL8ogAi5A1Uq8HyOGxSAOxbM3P+wviPjedpZMJ2d/SpCAjabm48FIzpe CHrCXR0iiJqA2KQ9pcwxx+79l1iNgxXEXns= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:18 2025 by rpki-client