$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa File: 3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa (raw, json) Hash identifier: 5hZo9PdjWOxlHPF4J9PnE2V2TDfn3ZgAsPRnvwoOxj0= Subject key identifier: B3:87:D1:6D:01:6B:C4:BC:8C:6C:9C:65:61:81:9B:CC:23:91:99:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF25690C1129660C648400D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396616 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:90:c1:12:96:60:c6:48:40:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d30afa4e-919f-490b-a850-0e75e822b089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:1b:08:c5:e4:98:1e:58:a5:9e:49:86:58: ac:60:c1:16:af:b3:ca:5e:ae:60:2e:b9:69:69:2f: 11:43:a2:8e:d0:f5:df:28:ed:9c:53:9d:fc:15:33: b8:b7:f5:83:59:7b:32:4c:3c:b8:5e:1b:8c:2f:ea: 48:3f:0f:84:2b:24:10:e8:0c:5e:07:70:95:4d:a6: 91:76:b6:5f:c0:16:d9:6c:f2:9a:bf:5f:62:e8:25: 3b:c7:eb:48:f6:c0:cb:ce:33:9b:c1:4b:17:a7:30: 05:90:26:b7:20:a8:06:aa:80:4c:b9:86:d7:eb:9f: f9:38:15:9f:b4:73:56:1a:94:10:b8:10:68:a5:39: ae:19:2f:bc:21:9c:a4:64:1d:b3:6f:a0:ac:56:3f: 2d:9d:60:a2:2b:8f:1a:07:55:49:b9:e0:06:87:40: 9d:8a:66:51:91:c3:d9:1f:61:fe:c0:32:fb:f9:96: f5:c1:14:7b:1c:30:cb:b4:6f:b1:c8:d2:3b:b6:a7: 64:b5:af:90:67:22:aa:cb:8f:34:ce:38:7b:ee:36: 06:58:d9:90:33:b2:7f:37:ed:de:de:bb:90:fc:e9: eb:7a:77:c0:62:50:17:61:fe:e3:bb:20:8e:c6:51: 89:27:76:a0:57:b1:23:35:9b:65:15:2d:2a:d9:fe: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:87:D1:6D:01:6B:C4:BC:8C:6C:9C:65:61:81:9B:CC:23:91:99:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f9:3f:23:4c:bb:00:d1:68:89:1c:d6:0c:14:ab:9c:28:e0: b3:1a:59:a4:20:3b:01:35:cb:60:68:4a:8d:77:5c:4f:f7:8b: 26:68:c2:ae:e3:d4:3d:03:18:98:5f:48:a4:67:4c:23:c9:61: b8:75:a5:3a:9b:0a:e4:8b:30:31:31:43:82:58:c2:89:0a:c5: 7e:1b:83:59:55:2a:36:00:c1:5b:82:c7:0e:cd:34:24:75:87: 99:d0:06:cd:4f:67:11:83:49:d6:95:34:da:d6:6b:af:9f:3b: de:09:6c:bf:6e:85:5d:2d:f9:c7:09:24:5b:8e:11:e3:56:f1: 41:f5:37:bb:11:7c:89:4b:c9:ce:e9:e6:d1:20:cd:c9:d6:02: 9b:bc:e4:3b:99:b0:97:95:51:72:ed:5c:a1:38:c5:9d:df:cb: 77:30:9f:a5:b3:4e:aa:99:ed:c5:9f:8e:95:0c:03:19:7f:7b: 7a:a0:db:21:86:8f:7f:8a:5e:7d:ee:1d:0f:64:95:1e:d0:79: 34:14:ad:2b:fa:c3:f9:4a:b6:e4:d6:1d:79:c1:0a:94:b9:82: 01:ac:fe:ef:d9:40:50:17:d6:2b:d1:54:18:c0:7a:8e:9d:07: 2a:d0:cd:15:d0:04:e7:4c:8a:6f:ea:28:55:10:bd:88:05:c1: f5:4f:19:5d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpDBEpZgxkhADQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDMwYWZhNGUtOTE5Zi00OTBiLWE4NTAtMGU3NWU4MjJiMDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS8bCMXkmB5YpZ5JhlisYMEWr7PKXq5gLrlp aS8RQ6KO0PXfKO2cU538FTO4t/WDWXsyTDy4XhuML+pIPw+EKyQQ6AxeB3CVTaaR drZfwBbZbPKav19i6CU7x+tI9sDLzjObwUsXpzAFkCa3IKgGqoBMuYbX65/5OBWf tHNWGpQQuBBopTmuGS+8IZykZB2zb6CsVj8tnWCiK48aB1VJueAGh0CdimZRkcPZ H2H+wDL7+Zb1wRR7HDDLtG+xyNI7tqdkta+QZyKqy480zjh77jYGWNmQM7J/N+3e 3ruQ/OnrenfAYlAXYf7juyCOxlGJJ3agV7EjNZtlFS0q2f4hDQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLOH0W0Ba8S8jGycZWGBm8wjkZkHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U2MDQyYzAtMmU4OS0z Zjc2LThjZWEtYjdiNmZhNTM2ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA1+T8jTLsA0WiJHNYMFKucKOCzGlmkIDsBNctg aEqNd1xP94smaMKu49Q9AxiYX0ikZ0wjyWG4daU6mwrkizAxMUOCWMKJCsV+G4NZ VSo2AMFbgscOzTQkdYeZ0AbNT2cRg0nWlTTa1muvnzveCWy/boVdLfnHCSRbjhHj VvFB9Te7EXyJS8nO6ebRIM3J1gKbvOQ7mbCXlVFy7VyhOMWd38t3MJ+ls06qme3F n46VDAMZf3t6oNshho9/il597h0PZJUe0Hk0FK0r+sP5Srbk1h15wQqUuYIBrP7v 2UBQF9Yr0VQYwHqOnQcq0M0V0ATnTIpv6ihVEL2IBcH1Txld -----END CERTIFICATE-----Generated at Wed Oct 29 07:15:21 2025 by rpki-client