$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ea1413-c733-329c-8ed4-52565b60bd64.roa File: 32ea1413-c733-329c-8ed4-52565b60bd64.roa (raw, json) Hash identifier: 7Ruu96ybKHISgrwPOZDr+I7SLZ5MHZR0gpQyNdrZFSc= Subject key identifier: 9E:D2:AD:11:A7:84:A3:B9:4F:9E:24:72:D9:63:E1:B1:E9:39:5A:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC05BDE8BBEFB85C7BC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ea1413-c733-329c-8ed4-52565b60bd64.roa Signing time: Tue 26 Aug 2025 12:32:10 +0000 ROA not before: Tue 26 Aug 2025 12:32:10 +0000 ROA not after: Mon 24 Nov 2025 13:32:10 +0000 asID: 397194 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c0:5b:de:8b:be:fb:85:c7:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:10 2025 GMT Not After : Nov 24 13:32:10 2025 GMT Subject: CN=bdf28872-709b-4f31-89ee-b6dc63590b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:dd:92:02:1c:67:0a:0d:e8:27:0a:b7:dd: 77:9e:c4:70:ee:6d:71:17:4a:85:9c:86:ab:1b:fa: 9b:13:11:bc:0e:66:51:4b:97:33:eb:a8:63:42:17: 8e:72:24:a4:86:b4:dd:be:bc:48:e9:10:4a:a9:75: cb:d9:aa:9e:94:07:86:65:d2:c7:5f:f5:fc:01:3d: b5:cf:43:3b:4f:35:a5:49:32:73:86:6d:2a:2d:c5: c7:a7:78:84:4b:78:67:c1:94:f4:5d:1a:f6:aa:7c: 06:a0:9a:4d:c2:1d:47:a9:73:bd:de:8f:af:1b:d6: c4:ca:29:f0:2d:b3:3c:2e:82:93:58:89:a1:d8:c9: 29:8c:9c:e4:ba:7e:e9:00:19:9b:4f:ab:b0:d1:e9: 55:32:ab:a4:fa:b5:bf:69:d5:ea:bd:2c:73:30:24: 78:35:86:47:7e:a8:5e:5a:96:d0:62:65:7d:6a:8d: 2c:83:6d:82:bf:c8:7f:ca:02:18:e5:d0:19:97:ec: e9:f1:6d:d7:ef:29:c1:db:cc:e2:f6:76:1d:fa:5c: 76:bf:6a:8b:52:5a:b4:d4:d8:ca:b4:f6:9e:43:b3: 52:ec:2c:f6:47:e5:48:59:3f:7b:1d:c5:f6:06:e6: 7a:70:52:c5:4a:17:af:23:5c:60:a0:f4:9d:85:81: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D2:AD:11:A7:84:A3:B9:4F:9E:24:72:D9:63:E1:B1:E9:39:5A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ea1413-c733-329c-8ed4-52565b60bd64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:8c:fb:5a:c2:44:45:f0:5f:2c:d1:73:3c:29:b3:98:0b:59: c6:76:8b:fa:da:55:80:49:a0:92:7e:52:f5:0a:b5:e8:d0:bf: 96:e4:1d:93:f2:98:63:50:d9:b5:fa:37:ff:60:54:70:67:2b: d1:82:a9:73:37:54:21:a6:0f:5c:db:8f:59:e3:a1:cb:62:c9: 94:9d:e8:57:e7:51:33:95:7f:5d:06:d8:39:f5:9d:4c:24:4b: b5:fc:f9:51:5a:59:23:04:bd:5b:4c:fa:47:c6:56:b1:8b:ef: 9d:60:3b:1b:95:1d:5c:e6:b7:ee:3b:ad:8c:24:3b:be:cf:e5: e0:c4:a3:96:b9:d7:0e:f4:77:49:7a:9c:e7:f5:c0:a0:a3:a8: 7b:f0:a6:91:b2:2a:f4:95:28:ec:9b:c2:82:1b:16:68:e0:d6: 0f:9f:e0:2b:bd:45:d0:90:08:51:b1:ff:73:5f:1a:4b:c3:50: d4:29:59:89:ec:d3:66:33:98:a6:06:c9:6f:eb:5b:61:c0:64: 52:0d:42:af:6e:ac:f2:fb:0e:c4:32:54:79:c7:c4:5a:76:20: 7d:7c:9e:1e:e7:85:d9:cb:4d:fd:4f:4f:50:ae:2b:26:7e:74: dc:8e:d0:0f:5d:a2:c0:c7:6f:9a:ae:86:cf:c6:ab:ba:52:b8: fd:d9:72:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcBb3ou++4XHvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMFoXDTI1MTEyNDEzMzIxMFowLzEtMCsGA1UEAxMk YmRmMjg4NzItNzA5Yi00ZjMxLTg5ZWUtYjZkYzYzNTkwYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkurdkgIcZwoN6CcKt913nsRw7m1xF0qFnIar G/qbExG8DmZRS5cz66hjQheOciSkhrTdvrxI6RBKqXXL2aqelAeGZdLHX/X8AT21 z0M7TzWlSTJzhm0qLcXHp3iES3hnwZT0XRr2qnwGoJpNwh1HqXO93o+vG9bEyinw LbM8LoKTWImh2MkpjJzkun7pABmbT6uw0elVMquk+rW/adXqvSxzMCR4NYZHfqhe WpbQYmV9ao0sg22Cv8h/ygIY5dAZl+zp8W3X7ynB28zi9nYd+lx2v2qLUlq01NjK tPaeQ7NS7Cz2R+VIWT97HcX2BuZ6cFLFShevI1xgoPSdhYEfIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7SrRGnhKO5T54kctlj4bHpOVqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJlYTE0MTMtYzczMy0z MjljLThlZDQtNTI1NjViNjBiZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6M+1rCREXwXyzRczwps5gLWcZ2i/raVYBJoJJ+UvUKtejQv5bk HZPymGNQ2bX6N/9gVHBnK9GCqXM3VCGmD1zbj1njoctiyZSd6FfnUTOVf10G2Dn1 nUwkS7X8+VFaWSMEvVtM+kfGVrGL751gOxuVHVzmt+47rYwkO77P5eDEo5a51w70 d0l6nOf1wKCjqHvwppGyKvSVKOybwoIbFmjg1g+f4Cu9RdCQCFGx/3NfGkvDUNQp WYns02YzmKYGyW/rW2HAZFINQq9urPL7DsQyVHnHxFp2IH18nh7nhdnLTf1PT1Cu KyZ+dNyO0A9dosDHb5quhs/Gq7pSuP3ZcnI= -----END CERTIFICATE-----Generated at Wed Sep 10 20:31:12 2025 by rpki-client