$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a66e384-b604-3fa2-a1a9-7ded49eee580.roa File: 2a66e384-b604-3fa2-a1a9-7ded49eee580.roa (raw, json) Hash identifier: bkVuzRNf09DNfIbxPzo7n+GFOF0I3NrsBEU3RJ79/tg= Subject key identifier: E4:CE:11:DF:70:2C:1D:42:68:49:C0:F0:C2:4E:70:49:BA:DE:E4:14 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A119DC2FCAE6146C8536D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a66e384-b604-3fa2-a1a9-7ded49eee580.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 21313 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:9d:c2:fc:ae:61:46:c8:53:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=4f4bd0fe-e99d-4c94-8693-2c45af1bd9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ff:21:28:1b:fa:31:0e:8d:98:a6:c8:c8:74: 5f:85:4d:54:74:5c:13:1d:26:72:3d:3e:b7:2a:4e: bf:71:4c:03:a5:92:54:93:ff:85:4a:77:c8:00:9f: 30:7e:06:c3:b6:e7:42:f5:fe:2c:c4:b5:17:0f:d3: d8:0a:e7:5b:88:32:63:68:27:3f:cd:24:1e:4d:67: 10:c5:74:3d:93:f0:eb:a6:8a:5c:9c:e9:a0:ca:e7: 8e:5f:37:65:80:1c:64:ad:68:35:ed:0d:ce:3a:89: d4:de:b2:58:98:bf:2d:98:fd:76:a2:2f:07:d0:7c: 90:a3:39:42:00:61:23:cc:49:4b:d7:43:a1:ab:5b: b0:a8:87:08:6b:ce:6d:96:01:d6:e8:95:a8:a7:90: 7e:7b:5e:94:91:c2:ea:67:58:d2:c2:bb:d7:22:e8: 46:03:3a:d9:74:45:9d:f9:2c:ec:e9:c4:e7:c5:e2: 50:68:4b:d3:71:5d:fc:2e:62:87:ba:1f:70:2d:ea: f1:55:1b:79:d9:89:08:73:2c:cd:9f:d0:f3:5f:56: 24:24:04:bb:9d:84:62:0e:f8:b1:40:81:eb:28:d8: e8:04:47:78:e3:c5:d3:df:fb:fb:27:16:5f:64:f9: 03:50:9f:59:82:48:d6:4b:59:e3:17:b1:22:d6:c3: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CE:11:DF:70:2C:1D:42:68:49:C0:F0:C2:4E:70:49:BA:DE:E4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a66e384-b604-3fa2-a1a9-7ded49eee580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:69:f3:2e:53:da:e9:0e:ee:97:1a:c3:1f:90:f8:11:a2:97: 3e:3f:ab:b8:f8:dd:0e:a8:8a:45:07:14:02:a9:cc:5e:22:1e: b8:26:6f:cf:24:03:40:14:5b:d1:0b:ea:07:fe:48:5a:65:e4: 21:c1:b1:84:b9:a8:0d:7c:48:94:a8:bf:16:8e:83:ec:9d:1d: 4d:bd:fb:9a:07:24:4d:2f:bc:58:1c:85:d3:80:86:91:25:ac: dd:10:2f:ab:0a:52:5a:86:69:d8:d0:38:6e:0d:40:2d:0f:c9: 95:d0:16:67:16:9b:26:41:a2:d4:2d:8b:50:e9:b9:76:40:be: 07:e7:b9:ca:f4:d8:6f:7c:bd:60:75:68:9e:d2:72:41:9b:ae: 60:70:d7:0a:61:45:28:29:33:f9:c1:55:33:85:d3:a6:39:8b: 7a:82:2f:86:cc:fa:25:c2:d4:9c:21:39:24:ae:0c:06:a2:8a: 77:51:85:37:b2:7c:10:bb:f6:6e:53:01:36:83:79:3c:50:c3: b0:4f:c2:d1:c2:e1:f0:35:26:60:5c:ad:a1:47:e3:28:c1:ec: 2f:71:1c:17:b8:ec:1c:24:6f:ce:88:e5:a7:cd:8a:27:77:a5: ed:1d:a4:7e:17:13:8d:0f:37:ac:07:7b:e1:56:e1:74:6c:d0: 1b:a7:3f:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZ3C/K5hRshTbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NGY0YmQwZmUtZTk5ZC00Yzk0LTg2OTMtMmM0NWFmMWJkOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf8hKBv6MQ6NmKbIyHRfhU1UdFwTHSZyPT63 Kk6/cUwDpZJUk/+FSnfIAJ8wfgbDtudC9f4sxLUXD9PYCudbiDJjaCc/zSQeTWcQ xXQ9k/DrpopcnOmgyueOXzdlgBxkrWg17Q3OOonU3rJYmL8tmP12oi8H0HyQozlC AGEjzElL10Ohq1uwqIcIa85tlgHW6JWop5B+e16UkcLqZ1jSwrvXIuhGAzrZdEWd +Szs6cTnxeJQaEvTcV38LmKHuh9wLerxVRt52YkIcyzNn9DzX1YkJAS7nYRiDvix QIHrKNjoBEd448XT3/v7JxZfZPkDUJ9ZgkjWS1njF7Ei1sMkOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOTOEd9wLB1CaEnA8MJOcEm63uQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmE2NmUzODQtYjYwNC0z ZmEyLWExYTktN2RlZDQ5ZWVlNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJp8y5T2ukO7pcawx+Q+BGilz4/q7j43Q6oikUHFAKpzF4iHrgm b88kA0AUW9EL6gf+SFpl5CHBsYS5qA18SJSovxaOg+ydHU29+5oHJE0vvFgchdOA hpElrN0QL6sKUlqGadjQOG4NQC0PyZXQFmcWmyZBotQti1DpuXZAvgfnucr02G98 vWB1aJ7SckGbrmBw1wphRSgpM/nBVTOF06Y5i3qCL4bM+iXC1JwhOSSuDAaiindR hTeyfBC79m5TATaDeTxQw7BPwtHC4fA1JmBcraFH4yjB7C9xHBe47Bwkb86I5afN iid3pe0dpH4XE40PN6wHe+FW4XRs0BunP+w= -----END CERTIFICATE-----Generated at Wed Sep 10 17:52:02 2025 by rpki-client