$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0c2f2c-b6fa-3a96-a6bc-3f4ab4e55800.roa File: 4b0c2f2c-b6fa-3a96-a6bc-3f4ab4e55800.roa (raw, json) Hash identifier: yTUnvSUJxlJwQPPSkIWaBn6vmyR9MDPUX3p3xUmyB7s= Subject key identifier: F7:34:3E:52:F2:EA:69:E3:39:E2:66:6E:CD:04:3D:19:00:86:F7:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A11965DF24822B28E71F280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0c2f2c-b6fa-3a96-a6bc-3f4ab4e55800.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 36623 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:96:5d:f2:48:22:b2:8e:71:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=1a4d4068-a073-44b4-838c-3812905b194a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:5b:ad:4e:37:cf:49:f8:89:31:ff:17:1a: f7:ee:2d:37:d9:b0:ea:32:ad:e7:72:24:d7:27:54: ce:04:de:ff:e2:ca:d3:48:7c:df:23:40:eb:ec:0a: 7e:d6:99:36:73:c2:37:41:fe:0d:0a:70:be:83:68: 9c:95:0a:cf:6c:4e:87:de:14:77:80:1f:74:07:2e: 12:ca:86:7a:f7:b1:9e:ba:f7:5a:15:7e:f5:fc:66: c5:35:61:41:99:fb:70:00:2e:de:5b:79:41:91:eb: 7d:71:40:78:93:f8:06:93:cd:15:32:27:11:41:c3: c1:03:ee:6b:95:9c:18:44:33:14:4f:56:03:d9:fa: 11:bb:88:e9:10:20:b0:9f:24:67:0f:83:bc:2d:d1: c5:08:9b:a5:21:60:0d:53:55:ad:8f:6b:cd:56:57: 7c:88:13:73:3c:a2:35:a4:09:e5:56:5a:78:a0:14: d7:47:75:64:75:50:a9:f7:d4:35:2c:0c:d7:39:39: 4d:1d:0f:06:15:8a:32:64:73:56:f9:3a:b2:80:07: 3b:94:bd:2f:97:82:ad:47:7f:f6:da:87:66:04:85: 07:48:36:4f:1c:36:a4:33:7c:dc:12:b8:d1:f5:af: 28:75:90:7b:fa:47:42:48:0b:07:4c:6e:10:70:2b: 56:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:34:3E:52:F2:EA:69:E3:39:E2:66:6E:CD:04:3D:19:00:86:F7:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0c2f2c-b6fa-3a96-a6bc-3f4ab4e55800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a0:86:82:10:22:3b:eb:cc:bc:d9:aa:9e:16:98:f1:09:e1: 80:90:42:46:c9:1e:dd:35:d4:15:b0:6e:22:39:b5:b5:3a:80: bc:1f:07:47:65:f2:6c:a9:00:21:33:4e:cf:64:38:34:4d:12: e8:7b:d7:17:8f:11:06:68:fe:5a:6f:d4:86:67:89:f0:03:7e: 12:a4:8d:f8:d3:62:61:4b:1f:df:8c:53:11:a7:12:e7:06:ea: 2b:3e:03:3d:d1:52:1b:e1:d1:02:9b:44:ca:ad:fb:00:d9:bc: 4a:61:85:0e:59:3e:5e:2b:97:7b:37:2f:37:1d:05:30:52:49: cf:af:6f:d6:ac:a9:8f:0d:8a:45:81:5e:ad:da:0d:b3:38:00: 77:f8:e0:39:a4:e5:53:92:a8:f5:1b:d4:0d:8f:8a:78:60:b7: 32:3d:17:e7:e8:b9:73:5c:ca:e5:03:24:1e:01:0f:95:40:4d: 4b:54:9b:d8:f6:24:4d:72:c1:01:26:bf:39:87:1b:7c:a4:41: 20:aa:07:5c:61:17:2d:f8:81:37:7f:c9:9e:43:54:38:e3:11: 6e:9f:62:7e:ee:66:f9:d5:b6:4d:ce:1c:8e:5e:ae:a6:b5:f0: 83:f4:af:fd:e1:e9:31:0b:9a:e6:6c:f9:c3:1d:d0:70:8b:fc: 65:3d:4d:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZZd8kgiso5x8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MWE0ZDQwNjgtYTA3My00NGI0LTgzOGMtMzgxMjkwNWIxOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYhbrU43z0n4iTH/Fxr37i032bDqMq3nciTX J1TOBN7/4srTSHzfI0Dr7Ap+1pk2c8I3Qf4NCnC+g2iclQrPbE6H3hR3gB90By4S yoZ697GeuvdaFX71/GbFNWFBmftwAC7eW3lBket9cUB4k/gGk80VMicRQcPBA+5r lZwYRDMUT1YD2foRu4jpECCwnyRnD4O8LdHFCJulIWANU1Wtj2vNVld8iBNzPKI1 pAnlVlp4oBTXR3VkdVCp99Q1LAzXOTlNHQ8GFYoyZHNW+TqygAc7lL0vl4KtR3/2 2odmBIUHSDZPHDakM3zcErjR9a8odZB7+kdCSAsHTG4QcCtW8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPc0PlLy6mnjOeJmbs0EPRkAhvdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGIwYzJmMmMtYjZmYS0z YTk2LWE2YmMtM2Y0YWI0ZTU1ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG2ghoIQIjvrzLzZqp4WmPEJ4YCQQkbJHt011BWwbiI5tbU6gLwf B0dl8mypACEzTs9kODRNEuh71xePEQZo/lpv1IZnifADfhKkjfjTYmFLH9+MUxGn EucG6is+Az3RUhvh0QKbRMqt+wDZvEphhQ5ZPl4rl3s3LzcdBTBSSc+vb9asqY8N ikWBXq3aDbM4AHf44Dmk5VOSqPUb1A2PinhgtzI9F+fouXNcyuUDJB4BD5VATUtU m9j2JE1ywQEmvzmHG3ykQSCqB1xhFy34gTd/yZ5DVDjjEW6fYn7uZvnVtk3OHI5e rqa18IP0r/3h6TELmuZs+cMd0HCL/GU9Tas= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:42 2025 by rpki-client