$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afc170c-a22c-3982-a2d0-d25992a9f77c.roa File: 3afc170c-a22c-3982-a2d0-d25992a9f77c.roa (raw, json) Hash identifier: hjdvSz9NwX7b0pjjPdnQpZ9My4Yw590sM2yBIi/+8I8= Subject key identifier: 6E:C2:6D:04:62:EC:FE:86:A8:02:F4:F1:D1:9B:FD:8B:72:13:1E:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC7FF3204ADB4E8CEF6B8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afc170c-a22c-3982-a2d0-d25992a9f77c.roa Signing time: Tue 26 Aug 2025 12:32:14 +0000 ROA not before: Tue 26 Aug 2025 12:32:14 +0000 ROA not after: Mon 24 Nov 2025 13:32:14 +0000 asID: 396572 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c7:ff:32:04:ad:b4:e8:ce:f6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:14 2025 GMT Not After : Nov 24 13:32:14 2025 GMT Subject: CN=93a3d77a-8dda-420b-a692-c52adc984a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5c:24:48:6b:c1:7f:25:d7:8a:9a:ae:b3:ca: c4:81:a5:41:d9:1e:68:5a:51:b8:2c:19:95:55:8e: 3e:7a:6c:09:3a:33:98:a3:a5:a5:c1:eb:f9:f8:9a: 47:3d:3b:12:e7:59:8f:d8:bc:b0:1e:72:75:1c:01: 89:3c:1a:b8:36:50:2b:44:fc:ce:37:8f:99:e9:12: 33:a3:ea:25:06:8d:66:8d:f2:fa:14:46:7a:5a:29: 5e:f6:72:4b:b3:04:0f:11:87:68:d6:05:b7:24:91: 8b:84:74:ee:3c:5a:ca:ef:e7:e3:cd:39:79:85:ab: de:58:7c:95:8b:db:c5:bf:6e:11:98:89:81:57:55: 89:10:0d:cb:dd:71:ab:e8:8e:14:2e:6b:c9:72:6e: a1:3d:4e:bf:d1:e1:32:b3:95:f7:84:d9:43:31:18: 6e:03:ed:76:3c:52:44:44:11:48:41:c4:17:81:41: 91:49:63:79:62:a7:c0:44:00:bc:f1:03:6e:5f:45: 48:22:03:5e:a6:c2:23:de:05:fc:81:8c:18:56:07: 23:73:0d:f1:f8:a4:dd:0b:90:71:e6:2a:cb:c4:39: 44:aa:02:19:80:12:b9:b3:32:1c:f7:80:cf:55:86: 4c:63:e1:5b:85:dd:70:54:83:68:5e:79:ee:7c:2c: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C2:6D:04:62:EC:FE:86:A8:02:F4:F1:D1:9B:FD:8B:72:13:1E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3afc170c-a22c-3982-a2d0-d25992a9f77c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:57:7a:06:15:36:2c:79:9a:7d:ec:34:81:65:85:c0:f7:28: 13:82:8e:cf:6b:f8:2c:38:b3:ce:93:ee:2d:ea:55:cd:f6:99: b4:bb:00:c8:34:de:a1:36:40:12:29:a5:39:4e:00:a1:3e:d3: b9:0c:19:5d:af:e3:0e:e0:3f:1f:1b:9c:a4:ac:e1:09:24:e3: 14:4d:7c:2c:35:c4:50:5e:39:b8:78:c8:18:24:03:a1:5b:b4: 56:a8:ea:d1:8c:30:d8:1a:23:1c:e1:f8:62:fc:fb:2b:f0:37: e9:67:5f:80:b1:1f:76:75:bd:6c:78:e9:82:ca:87:23:ea:ac: 70:15:4e:9a:1d:b1:36:50:27:da:df:63:6c:fe:3e:b1:93:f5: 1f:ae:1f:3d:f1:43:92:06:b8:fc:31:07:69:f6:28:d5:17:da: 56:d0:0e:3e:80:b7:32:47:61:88:78:6c:59:73:67:41:bb:78: 91:96:ff:21:93:d0:e4:0c:82:34:d1:a1:cc:85:8a:b2:75:54: 1c:ed:7d:9a:ba:59:b0:7d:eb:4b:14:91:4c:de:93:69:fd:ad: 82:a8:9b:0d:17:f5:dd:cc:a2:e6:e2:70:14:42:e6:95:e3:4f: b5:49:1d:d7:a7:63:f8:a4:68:3f:bb:ff:3a:c6:3d:cd:f8:c4: df:bd:6d:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8Dcf/MgSttOjO9rgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNFoXDTI1MTEyNDEzMzIxNFowLzEtMCsGA1UEAxMk OTNhM2Q3N2EtOGRkYS00MjBiLWE2OTItYzUyYWRjOTg0YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVwkSGvBfyXXipqus8rEgaVB2R5oWlG4LBmV VY4+emwJOjOYo6Wlwev5+JpHPTsS51mP2LywHnJ1HAGJPBq4NlArRPzON4+Z6RIz o+olBo1mjfL6FEZ6Wile9nJLswQPEYdo1gW3JJGLhHTuPFrK7+fjzTl5haveWHyV i9vFv24RmImBV1WJEA3L3XGr6I4ULmvJcm6hPU6/0eEys5X3hNlDMRhuA+12PFJE RBFIQcQXgUGRSWN5YqfARAC88QNuX0VIIgNepsIj3gX8gYwYVgcjcw3x+KTdC5Bx 5irLxDlEqgIZgBK5szIc94DPVYZMY+Fbhd1wVINoXnnufCwAiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG7CbQRi7P6GqAL08dGb/YtyEx7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FmYzE3MGMtYTIyYy0z OTgyLWEyZDAtZDI1OTkyYTlmNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKtXegYVNix5mn3sNIFlhcD3KBOCjs9r+Cw4s86T7i3qVc32mbS7 AMg03qE2QBIppTlOAKE+07kMGV2v4w7gPx8bnKSs4Qkk4xRNfCw1xFBeObh4yBgk A6FbtFao6tGMMNgaIxzh+GL8+yvwN+lnX4CxH3Z1vWx46YLKhyPqrHAVTpodsTZQ J9rfY2z+PrGT9R+uHz3xQ5IGuPwxB2n2KNUX2lbQDj6AtzJHYYh4bFlzZ0G7eJGW /yGT0OQMgjTRocyFirJ1VBztfZq6WbB960sUkUzek2n9rYKomw0X9d3MoubicBRC 5pXjT7VJHdenY/ikaD+7/zrGPc34xN+9bfs= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:28 2025 by rpki-client