$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a172473-7825-3285-b8e4-bb7127ed0f1a.roa File: 4a172473-7825-3285-b8e4-bb7127ed0f1a.roa (raw, json) Hash identifier: hugEhIpbcsi4eOkdzEDr0xmMgBsRiOv88kt0tlA2P2I= Subject key identifier: 4F:BC:BA:5D:37:C5:38:0C:09:1B:D2:A0:BB:48:24:CD:5E:EA:7D:8E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC7AF89616F7B4696D500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a172473-7825-3285-b8e4-bb7127ed0f1a.roa Signing time: Tue 26 Aug 2025 12:32:14 +0000 ROA not before: Tue 26 Aug 2025 12:32:14 +0000 ROA not after: Mon 24 Nov 2025 13:32:14 +0000 asID: 396611 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c7:af:89:61:6f:7b:46:96:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:14 2025 GMT Not After : Nov 24 13:32:14 2025 GMT Subject: CN=aba8ccd6-d6f6-4c96-99d7-9e34c76c9e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:2a:4c:b8:c5:a9:b0:c3:a4:de:ad:19:9f: 1a:8d:07:36:a6:a9:4d:cc:6a:04:a3:96:0d:55:c0: 7a:a9:b5:e3:7a:78:97:9e:83:34:2a:ba:a0:aa:cb: 21:be:0c:cf:37:26:42:f0:b5:fc:a7:f5:bd:ce:74: c6:01:5b:6c:dc:92:03:cb:69:71:6a:24:2f:82:0f: 77:32:9f:12:a7:da:95:fa:b6:f8:75:e6:23:98:ab: 0c:9a:4a:1c:5f:23:70:fa:69:00:b8:c3:5a:8b:40: bd:c0:20:33:21:b7:3e:02:b8:28:ba:a1:34:56:96: 32:d3:3d:19:66:d8:ba:fa:20:e7:3c:a2:30:4f:c7: f0:71:b8:ca:7e:44:ae:a9:b7:8e:f0:75:b4:a7:bd: f3:71:98:9d:c1:c7:50:06:01:1f:36:fb:fc:42:8f: df:47:a2:90:42:74:3a:1b:d3:09:6d:11:64:9d:f1: 14:a3:4c:f6:5d:df:36:81:45:64:c7:a4:49:28:84: d2:b3:5f:c8:bd:89:59:a1:65:1d:8e:11:fd:3c:3f: 44:88:c3:d5:1f:ac:f8:9e:97:d7:3c:cb:53:7b:3b: f9:db:1e:86:ef:06:2b:34:3a:fe:00:dc:bc:01:41: f1:e9:03:1e:79:d8:3e:86:e0:86:05:56:93:ac:99: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BC:BA:5D:37:C5:38:0C:09:1B:D2:A0:BB:48:24:CD:5E:EA:7D:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a172473-7825-3285-b8e4-bb7127ed0f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9c:bb:7b:0d:aa:d6:5b:da:60:dc:17:f9:4a:88:70:73:40: 51:28:07:dc:65:8e:98:87:4e:fc:71:33:96:38:d2:24:cc:79: fd:0e:a1:de:a8:4f:55:1a:48:e3:67:e6:90:8c:2e:a8:a2:fd: be:1d:61:91:b7:06:25:c5:c1:8a:9e:7e:bf:b4:4d:f8:25:9e: c9:e9:92:bf:9a:8e:a7:31:18:2c:a2:91:1c:51:dc:41:34:d5: bf:c1:62:de:2a:9f:0c:42:54:b8:3b:9a:24:98:13:bb:56:48: 12:37:0b:19:b2:6e:7d:d1:2f:b8:f3:63:1a:13:a3:62:12:45: 19:bd:59:b7:70:5d:fd:79:a3:ca:46:6a:24:39:19:bf:49:e5: db:ac:aa:9c:9d:10:d1:6c:db:c6:b6:3c:24:e2:da:45:d8:8b: dc:88:75:4f:e0:1a:a7:d1:c6:8a:05:f1:e8:00:c5:6e:bb:7d: f6:60:c6:89:6c:cd:30:0e:2c:19:d6:e9:a2:78:81:c2:d7:5a: 5b:99:ac:f8:e7:8c:bf:e2:da:41:8d:cb:92:06:2a:d6:14:f2: 5c:3b:c5:38:92:2e:49:d9:ee:40:5a:e4:a5:e6:20:63:62:fa: 86:99:f3:d4:28:8a:68:ff:aa:c2:88:cc:3c:ac:c8:61:a3:51: 5b:c2:de:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DceviWFve0aW1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNFoXDTI1MTEyNDEzMzIxNFowLzEtMCsGA1UEAxMk YWJhOGNjZDYtZDZmNi00Yzk2LTk5ZDctOWUzNGM3NmM5ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0kqTLjFqbDDpN6tGZ8ajQc2pqlNzGoEo5YN VcB6qbXjeniXnoM0KrqgqsshvgzPNyZC8LX8p/W9znTGAVts3JIDy2lxaiQvgg93 Mp8Sp9qV+rb4deYjmKsMmkocXyNw+mkAuMNai0C9wCAzIbc+ArgouqE0VpYy0z0Z Zti6+iDnPKIwT8fwcbjKfkSuqbeO8HW0p73zcZidwcdQBgEfNvv8Qo/fR6KQQnQ6 G9MJbRFknfEUo0z2Xd82gUVkx6RJKITSs1/IvYlZoWUdjhH9PD9EiMPVH6z4npfX PMtTezv52x6G7wYrNDr+ANy8AUHx6QMeedg+huCGBVaTrJnwCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+8ul03xTgMCRvSoLtIJM1e6n2OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGExNzI0NzMtNzgyNS0z Mjg1LWI4ZTQtYmI3MTI3ZWQwZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKcu3sNqtZb2mDcF/lKiHBzQFEoB9xljpiHTvxxM5Y40iTMef0O od6oT1UaSONn5pCMLqii/b4dYZG3BiXFwYqefr+0Tfglnsnpkr+ajqcxGCyikRxR 3EE01b/BYt4qnwxCVLg7miSYE7tWSBI3Cxmybn3RL7jzYxoTo2ISRRm9WbdwXf15 o8pGaiQ5Gb9J5dusqpydENFs28a2PCTi2kXYi9yIdU/gGqfRxooF8egAxW67ffZg xolszTAOLBnW6aJ4gcLXWluZrPjnjL/i2kGNy5IGKtYU8lw7xTiSLknZ7kBa5KXm IGNi+oaZ89Qoimj/qsKIzDysyGGjUVvC3lk= -----END CERTIFICATE-----Generated at Wed Sep 10 17:59:58 2025 by rpki-client