$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/455e3e6a-413b-3321-af55-ba7f538c99d3.roa File: 455e3e6a-413b-3321-af55-ba7f538c99d3.roa (raw, json) Hash identifier: QMlUo0AhLp4B7a43D6tJwDoUDxUB71S16JkY15O/WlM= Subject key identifier: BB:8B:D7:9E:E6:E0:90:60:C5:18:2B:45:4A:4E:A7:1D:49:8B:50:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DCB0FA643833513B56D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/455e3e6a-413b-3321-af55-ba7f538c99d3.roa Signing time: Tue 26 Aug 2025 12:32:15 +0000 ROA not before: Tue 26 Aug 2025 12:32:15 +0000 ROA not after: Mon 24 Nov 2025 13:32:15 +0000 asID: 396544 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:cb:0f:a6:43:83:35:13:b5:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:15 2025 GMT Not After : Nov 24 13:32:15 2025 GMT Subject: CN=362b4eb1-eee5-4588-a3c9-808a05e53fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:95:1d:11:99:38:6a:6a:44:ee:91:5c:eb: 9c:ea:1a:99:34:7b:7d:ef:41:32:5c:ce:ca:8d:1d: 40:c7:e6:18:5d:b5:73:cf:f7:79:78:8d:ff:10:b1: 68:59:ec:2f:9b:67:99:aa:28:88:7d:25:55:0d:29: 6f:0f:c8:14:c2:b8:c0:48:ec:fe:63:97:b3:d6:67: c9:00:3d:cc:f5:bd:01:bc:8e:12:96:33:b0:6a:ed: ea:14:48:b7:98:ba:1c:67:16:d5:54:38:a5:cc:71: cd:65:56:c7:42:76:22:52:50:0d:47:f8:cd:49:24: 78:4f:c3:60:b0:ad:11:15:f4:9c:27:be:e7:88:da: 82:d1:b3:15:99:2c:44:a4:fe:48:75:3b:a1:95:20: 3d:35:d1:a9:d2:77:ea:df:d1:46:e0:5d:83:37:e4: e8:51:a3:ce:17:aa:7c:d7:89:51:4e:e2:0e:43:22: 34:92:1b:64:d6:e1:52:00:c0:ff:18:8e:4e:aa:1d: be:52:10:69:b9:8e:3d:64:de:25:5d:66:48:44:53: 5a:bb:1d:81:07:e8:df:0e:bc:ca:e7:5c:08:f1:89: d2:72:37:53:da:f2:bd:f7:ad:2a:cb:d1:db:03:40: 91:02:2a:34:8b:41:d8:af:d7:39:9e:d7:64:e6:6c: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:D7:9E:E6:E0:90:60:C5:18:2B:45:4A:4E:A7:1D:49:8B:50:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/455e3e6a-413b-3321-af55-ba7f538c99d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:3b:30:2b:bc:c3:fb:69:3c:66:10:60:ae:91:16:c6:90:df: 5c:dd:28:81:cc:9a:99:a5:b2:87:04:ba:5e:06:f0:82:c6:9b: 74:ff:ef:4a:00:38:6b:9b:a1:e3:b2:09:95:23:8e:44:90:f2: 7e:07:08:91:5b:42:0f:79:75:02:48:bb:a7:55:17:2c:17:93: 30:b9:c6:22:28:74:5b:85:a7:d2:85:d6:60:56:3d:fa:88:ce: 74:71:39:c4:a4:22:44:8f:e3:11:1c:68:e4:fd:fa:22:4f:ca: 36:4d:ad:c2:60:e1:f5:b0:18:4b:a7:41:52:4b:e1:13:52:b7: 6b:69:96:03:7f:60:4b:db:9f:6f:8a:f9:79:a1:81:85:ef:8e: 48:a2:eb:c2:03:ef:31:15:8c:f9:6f:58:3d:3d:98:27:3a:92: 74:5e:48:00:e8:3a:2f:a5:b2:ab:c5:af:14:22:18:70:ed:f1: d0:14:93:27:ae:c5:83:5a:f0:09:85:ca:76:f5:03:cf:50:6f: 94:79:6a:5e:a4:21:86:94:92:81:36:65:da:b3:89:f5:ef:45: 7d:ba:40:9d:04:3e:d3:f6:cc:85:a6:e7:c7:91:85:c7:10:ac: 5b:b9:7c:dd:5b:4c:47:a8:5e:aa:62:51:e6:d9:fd:8e:96:79: 3e:77:9f:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcsPpkODNRO1bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNVoXDTI1MTEyNDEzMzIxNVowLzEtMCsGA1UEAxMk MzYyYjRlYjEtZWVlNS00NTg4LWEzYzktODA4YTA1ZTUzZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVCVHRGZOGpqRO6RXOuc6hqZNHt970EyXM7K jR1Ax+YYXbVzz/d5eI3/ELFoWewvm2eZqiiIfSVVDSlvD8gUwrjASOz+Y5ez1mfJ AD3M9b0BvI4SljOwau3qFEi3mLocZxbVVDilzHHNZVbHQnYiUlANR/jNSSR4T8Ng sK0RFfScJ77niNqC0bMVmSxEpP5IdTuhlSA9NdGp0nfq39FG4F2DN+ToUaPOF6p8 14lRTuIOQyI0khtk1uFSAMD/GI5Oqh2+UhBpuY49ZN4lXWZIRFNaux2BB+jfDrzK 51wI8YnScjdT2vK9960qy9HbA0CRAio0i0HYr9c5ntdk5mwvSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLuL157m4JBgxRgrRUpOpx1Ji1D6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDU1ZTNlNmEtNDEzYi0z MzIxLWFmNTUtYmE3ZjUzOGM5OWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEI7MCu8w/tpPGYQYK6RFsaQ31zdKIHMmpmlsocEul4G8ILGm3T/ 70oAOGuboeOyCZUjjkSQ8n4HCJFbQg95dQJIu6dVFywXkzC5xiIodFuFp9KF1mBW PfqIznRxOcSkIkSP4xEcaOT9+iJPyjZNrcJg4fWwGEunQVJL4RNSt2tplgN/YEvb n2+K+XmhgYXvjkii68ID7zEVjPlvWD09mCc6knReSADoOi+lsqvFrxQiGHDt8dAU kyeuxYNa8AmFynb1A89Qb5R5al6kIYaUkoE2ZdqzifXvRX26QJ0EPtP2zIWm58eR hccQrFu5fN1bTEeoXqpiUebZ/Y6WeT53n6k= -----END CERTIFICATE-----Generated at Wed Sep 10 18:01:57 2025 by rpki-client