$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d1a4f4a-992a-3e0a-a865-7ef1a723f883.roa File: 2d1a4f4a-992a-3e0a-a865-7ef1a723f883.roa (raw, json) Hash identifier: wvrrttgJIi55WZqCgnhHm82bep4jda+wE5TIn+DPWf0= Subject key identifier: AF:3A:85:B7:C9:67:E5:7B:A7:60:1A:7D:97:3E:BE:BF:32:73:EF:5C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1B4428DF42371DD28A0C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d1a4f4a-992a-3e0a-a865-7ef1a723f883.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 396564 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:b4:42:8d:f4:23:71:dd:28:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=b5476b14-584c-4851-b484-122729219316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1e:16:49:8e:ae:d5:dd:b4:d6:3a:b7:aa:b9: 11:73:da:36:88:65:75:5c:ae:74:a4:8c:61:f8:aa: 3a:fb:c2:1f:b0:65:3f:91:c0:7b:43:d8:b9:4a:60: 7d:81:15:00:27:9d:c7:8d:4d:45:16:c6:44:da:3e: 29:ea:c2:a4:fc:7b:84:13:4c:bd:de:22:d4:76:88: 06:4f:91:c0:e5:18:cf:1f:3d:45:be:a6:8a:d4:1e: b8:3d:de:63:34:8f:60:7a:26:f8:26:0c:ae:78:85: 6f:46:02:a7:f5:21:c5:35:c1:96:d5:55:14:6d:e5: 26:5a:f9:45:a3:f2:70:15:26:e2:b4:e3:d8:53:77: 5d:48:d0:57:a4:7b:1c:66:fe:25:ba:a3:bf:37:f8: 52:ce:18:16:e7:ca:e5:cd:8f:03:47:d7:47:64:c2: 99:3e:03:d8:8f:89:05:46:90:dc:e6:78:20:cc:e7: b4:0c:8e:c4:01:ef:11:54:a6:31:d6:a8:e6:36:de: 5f:35:88:0c:b4:9a:5c:ee:67:8b:b6:42:1b:98:6d: 61:c1:17:f5:32:82:98:bf:18:b8:f3:36:59:39:93: 87:b5:da:72:a3:a0:9d:87:69:3c:67:15:0b:9f:f1: 00:4d:30:15:84:a2:b1:e2:eb:59:24:51:ac:1f:07: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3A:85:B7:C9:67:E5:7B:A7:60:1A:7D:97:3E:BE:BF:32:73:EF:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d1a4f4a-992a-3e0a-a865-7ef1a723f883.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c9:89:fe:f2:09:3a:f5:a2:7e:ad:38:a2:8a:26:ff:ba:35: 9e:56:c8:39:6f:d1:8e:cd:f3:48:77:32:69:85:91:cc:9e:bd: 57:97:53:8b:fd:b5:95:69:aa:51:77:42:20:eb:fa:00:9a:8a: da:22:7b:8f:fc:66:ba:cc:26:1e:55:72:9a:e8:6a:8e:0c:81: 54:77:ff:69:f4:0a:c5:62:41:f4:6c:1b:2d:88:26:db:97:29: 7f:30:f1:6a:e7:1c:21:52:9a:75:a5:27:99:b7:3e:5c:ff:ad: da:36:8a:43:79:6c:16:77:c1:3f:a7:63:e7:1d:78:82:3e:45: 70:b0:80:b6:20:60:8e:1d:0e:44:a6:f6:a1:bb:08:79:35:1e: 3d:7f:59:ea:b1:e3:d8:15:f9:40:df:a6:8c:ef:bb:0a:af:06: bf:14:78:d2:04:42:84:b2:f3:a0:ea:a1:c9:d7:ad:09:54:17: 94:17:75:6e:7d:35:82:7c:3f:89:8a:9f:4d:07:36:ba:46:b6: 89:7a:dd:5d:19:93:ec:ba:0c:00:66:5c:46:fc:20:79:a6:8f: c1:f5:32:09:14:24:ad:91:0e:62:d3:58:7c:02:70:32:11:d2: 76:f6:93:f5:64:65:9b:65:13:b1:c4:6b:ea:a1:c6:91:4a:ca: 0f:ff:2d:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bRCjfQjcd0ooMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk YjU0NzZiMTQtNTg0Yy00ODUxLWI0ODQtMTIyNzI5MjE5MzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx4WSY6u1d201jq3qrkRc9o2iGV1XK50pIxh +Ko6+8IfsGU/kcB7Q9i5SmB9gRUAJ53HjU1FFsZE2j4p6sKk/HuEE0y93iLUdogG T5HA5RjPHz1FvqaK1B64Pd5jNI9geib4JgyueIVvRgKn9SHFNcGW1VUUbeUmWvlF o/JwFSbitOPYU3ddSNBXpHscZv4luqO/N/hSzhgW58rlzY8DR9dHZMKZPgPYj4kF RpDc5nggzOe0DI7EAe8RVKYx1qjmNt5fNYgMtJpc7meLtkIbmG1hwRf1MoKYvxi4 8zZZOZOHtdpyo6Cdh2k8ZxULn/EATTAVhKKx4utZJFGsHwfn0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK86hbfJZ+V7p2AafZc+vr8yc+9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQxYTRmNGEtOTkyYS0z ZTBhLWE4NjUtN2VmMWE3MjNmODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABHJif7yCTr1on6tOKKKJv+6NZ5WyDlv0Y7N80h3MmmFkcyevVeX U4v9tZVpqlF3QiDr+gCaitoie4/8ZrrMJh5Vcproao4MgVR3/2n0CsViQfRsGy2I JtuXKX8w8WrnHCFSmnWlJ5m3Plz/rdo2ikN5bBZ3wT+nY+cdeII+RXCwgLYgYI4d DkSm9qG7CHk1Hj1/Weqx49gV+UDfpozvuwqvBr8UeNIEQoSy86DqocnXrQlUF5QX dW59NYJ8P4mKn00HNrpGtol63V0Zk+y6DABmXEb8IHmmj8H1MgkUJK2RDmLTWHwC cDIR0nb2k/VkZZtlE7HEa+qhxpFKyg//LYE= -----END CERTIFICATE-----Generated at Wed Sep 10 17:52:01 2025 by rpki-client