$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27b587d2-5128-3f13-a833-a59fe1bc217e.roa File: 27b587d2-5128-3f13-a833-a59fe1bc217e.roa (raw, json) Hash identifier: ggnimQ72cHFCbzSN9JKnY85yUioEsHJ6Vb5/rjLL+bk= Subject key identifier: 25:4C:44:90:06:5A:C1:D8:C4:CB:73:CE:37:E6:6E:45:F2:BD:02:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A119CE4B19C3DCBB9F28540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27b587d2-5128-3f13-a833-a59fe1bc217e.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396567 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:9c:e4:b1:9c:3d:cb:b9:f2:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=80ee0d0a-5115-4362-8750-04174b74586c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:6b:eb:a4:01:fe:db:ac:34:b6:ad:e1:74: c3:72:7a:8e:3a:5a:52:d8:a7:bd:38:6c:e5:59:fd: 7d:ef:9c:ee:cd:c4:86:00:98:9b:2a:56:34:06:e9: ad:bc:5b:1b:11:f3:bc:15:fd:5f:f4:fa:bb:d5:dd: 07:75:70:35:7e:da:05:0c:47:80:d3:b2:5b:ee:c0: 57:de:2b:af:91:9a:57:3e:0f:6d:44:48:14:e0:90: 69:b9:f9:7d:c0:3e:58:25:3c:f9:29:d6:63:cf:c9: 31:d9:8a:dc:4c:a5:30:a9:08:d7:a1:94:93:03:70: 98:b3:9f:09:3f:87:35:e3:8d:e3:08:0f:ea:01:9c: db:07:8d:47:75:28:94:6b:e5:27:82:34:fa:68:1e: 24:b5:b9:d8:c2:25:70:e6:0c:0f:8a:00:58:a2:1d: e9:23:69:a4:26:37:ca:5b:bf:5b:f4:d1:33:5b:2b: 7e:7b:59:f7:64:d3:75:c9:94:42:d5:74:c1:c4:ac: 56:00:ac:79:06:fa:c4:d0:1c:d5:b0:60:0f:8c:fe: 04:6a:68:8b:cb:7f:46:fd:38:fe:25:b1:1a:25:6f: e9:3a:de:08:08:1d:d1:06:b5:d7:30:8f:7b:97:cf: f7:4a:26:fa:9e:51:0c:6b:b7:2d:ae:74:e8:a5:4a: 0d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4C:44:90:06:5A:C1:D8:C4:CB:73:CE:37:E6:6E:45:F2:BD:02:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27b587d2-5128-3f13-a833-a59fe1bc217e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:83:1c:04:0e:1a:d2:3c:66:03:a5:e3:59:d4:5a:65:93:3d: 91:e9:f8:3e:81:be:80:2e:29:47:30:bc:80:fe:58:e7:a4:a9: 43:54:cf:7a:55:c6:c0:08:5d:2a:76:b6:cb:5e:74:3f:b3:dc: d4:32:a3:a6:4f:2d:73:9b:5d:0a:af:0d:c7:78:63:50:0a:6c: 3d:35:2f:16:87:87:c7:14:e9:b7:35:16:56:0b:d8:75:72:0d: 69:1c:db:fe:1c:e9:16:cd:82:3e:8f:17:29:eb:a6:c9:22:c1: 93:46:b7:c7:1f:e1:c8:67:2e:a5:da:e6:e0:06:8d:e6:e1:90: 10:a9:02:8b:ca:34:e2:9d:aa:44:0b:ae:94:e6:b3:b4:32:77: c0:db:59:11:d4:87:fd:d3:a8:4d:2f:09:fa:c1:b0:5e:88:12: 5a:7c:8e:f0:e7:94:e5:90:b3:32:a8:91:59:32:c4:cc:31:3a: a3:c2:99:45:9a:57:23:26:40:a2:b0:2e:6f:a0:8d:8a:8c:d1: 66:92:b1:cc:f0:c2:e4:19:92:25:52:24:d1:4f:1d:e8:58:f1: fe:6a:50:cf:0a:10:ed:91:16:29:7e:6b:9a:c9:eb:6d:2a:88: a9:cb:18:8d:33:f1:c8:48:e2:7a:75:26:e8:4b:b1:af:b4:ab: 25:93:c3:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZzksZw9y7nyhUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ODBlZTBkMGEtNTExNS00MzYyLTg3NTAtMDQxNzRiNzQ1ODZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumJr66QB/tusNLat4XTDcnqOOlpS2Ke9OGzl Wf1975zuzcSGAJibKlY0BumtvFsbEfO8Ff1f9Pq71d0HdXA1ftoFDEeA07Jb7sBX 3iuvkZpXPg9tREgU4JBpufl9wD5YJTz5KdZjz8kx2YrcTKUwqQjXoZSTA3CYs58J P4c1443jCA/qAZzbB41HdSiUa+UngjT6aB4ktbnYwiVw5gwPigBYoh3pI2mkJjfK W79b9NEzWyt+e1n3ZNN1yZRC1XTBxKxWAKx5BvrE0BzVsGAPjP4EamiLy39G/Tj+ JbEaJW/pOt4ICB3RBrXXMI97l8/3Sib6nlEMa7ctrnTopUoNBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVMRJAGWsHYxMtzzjfmbkXyvQJ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjdiNTg3ZDItNTEyOC0z ZjEzLWE4MzMtYTU5ZmUxYmMyMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6DHAQOGtI8ZgOl41nUWmWTPZHp+D6BvoAuKUcwvID+WOekqUNU z3pVxsAIXSp2tstedD+z3NQyo6ZPLXObXQqvDcd4Y1AKbD01LxaHh8cU6bc1FlYL 2HVyDWkc2/4c6RbNgj6PFynrpskiwZNGt8cf4chnLqXa5uAGjebhkBCpAovKNOKd qkQLrpTms7Qyd8DbWRHUh/3TqE0vCfrBsF6IElp8jvDnlOWQszKokVkyxMwxOqPC mUWaVyMmQKKwLm+gjYqM0WaSsczwwuQZkiVSJNFPHehY8f5qUM8KEO2RFil+a5rJ 620qiKnLGI0z8chI4np1JuhLsa+0qyWTwws= -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:18 2025 by rpki-client