$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/512fa8d8-855c-3885-bbb1-cc8acae6e9fd.roa File: 512fa8d8-855c-3885-bbb1-cc8acae6e9fd.roa (raw, json) Hash identifier: ThO3kTqdVUtF3j3gjfbF50JHEWD7FBtnlYBWqQuw4RY= Subject key identifier: 70:D3:DF:5F:0C:47:13:42:D3:D9:48:E8:75:7E:25:1B:22:26:56:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC0DA2B06C742AF105500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/512fa8d8-855c-3885-bbb1-cc8acae6e9fd.roa Signing time: Tue 26 Aug 2025 12:32:11 +0000 ROA not before: Tue 26 Aug 2025 12:32:11 +0000 ROA not after: Mon 24 Nov 2025 13:32:11 +0000 asID: 397198 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c0:da:2b:06:c7:42:af:10:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:11 2025 GMT Not After : Nov 24 13:32:11 2025 GMT Subject: CN=1c75ee0d-4a30-403b-a2f1-93f02f3af14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:0c:9e:3b:bc:1e:00:2d:b6:10:01:e9:5a: 52:76:ad:c2:64:1b:43:2c:bc:1b:01:61:08:cd:76: fc:be:85:5b:4e:94:96:a8:5f:82:da:63:8a:50:9b: f4:0f:ba:83:cc:c9:55:4c:1d:7a:4f:c6:29:22:6b: d5:c8:3d:33:51:bc:39:80:3b:29:f9:1c:96:9b:72: ab:29:8a:7f:2a:8e:22:a4:75:77:16:00:f3:9a:a6: 56:ff:89:28:70:f6:6e:63:0d:d5:75:55:f0:03:c3: 3b:8d:29:7f:26:19:99:5d:e0:d7:2c:ae:d5:c1:c8: e7:49:5b:b4:d6:5f:00:e5:89:6d:7a:30:e2:07:b8: 40:65:9f:7c:e7:69:83:44:db:51:67:d7:e7:35:b0: 7f:1c:65:af:35:5e:bd:8c:10:3f:2e:00:2b:15:c9: 13:26:76:fb:7f:21:1a:aa:74:a5:98:c0:06:cf:c2: da:52:b4:2f:2f:9f:55:f8:18:69:8d:df:2b:4b:05: 30:7b:4a:28:03:2b:0c:8e:b8:88:83:df:bd:9c:e8: ad:b5:35:50:73:06:dc:09:70:3b:67:e5:80:55:96: 3b:2d:dc:b1:12:fa:32:11:85:f0:a0:6d:ec:8c:06: 5d:10:36:33:4e:41:04:34:ef:92:4f:a1:90:e2:59: 98:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D3:DF:5F:0C:47:13:42:D3:D9:48:E8:75:7E:25:1B:22:26:56:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/512fa8d8-855c-3885-bbb1-cc8acae6e9fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:6b:1f:48:e4:8f:15:ac:db:2a:a5:56:a7:36:d7:76:a4:96: 22:c1:74:1e:a3:2a:f8:ef:cd:f7:28:6d:e7:8b:bf:07:2f:18: fc:c3:a8:85:b1:a9:78:85:94:ff:af:53:f3:b1:7b:32:5e:05: e5:9f:85:76:c3:08:81:9f:f9:b9:15:53:fa:c4:c1:13:d7:17: 64:06:f1:24:99:ee:77:0f:c0:de:8c:08:c4:9e:7f:f1:8d:21: ca:f9:16:07:1b:5a:02:7a:2d:fa:28:fa:cd:5b:e6:b7:a8:78: a3:72:53:81:43:5f:f5:9a:c9:76:e9:af:e7:c0:52:96:5c:6b: af:dc:0f:d1:12:c8:40:2a:a7:77:f2:60:b4:42:da:a4:d7:de: 20:c9:44:d2:39:43:05:fb:74:dd:3e:ca:5b:1f:64:93:46:cf: 74:e6:16:e4:d9:14:09:f1:a3:27:b0:63:b8:58:c5:dc:22:a2: ed:f5:87:b5:92:aa:be:85:a1:86:9b:ba:d2:4a:02:1b:53:a8: 8f:4d:e2:29:f5:3a:71:bc:c0:63:60:ec:64:ac:50:9e:61:7c: c4:1d:d5:42:7b:22:ff:fd:ca:61:6c:75:27:09:c1:a4:7f:49: 2a:bd:18:7e:fc:52:f5:45:76:00:14:71:ce:53:8c:1e:6d:2a: f3:62:f8:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcDaKwbHQq8QVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMVoXDTI1MTEyNDEzMzIxMVowLzEtMCsGA1UEAxMk MWM3NWVlMGQtNGEzMC00MDNiLWEyZjEtOTNmMDJmM2FmMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5kMnju8HgAtthAB6VpSdq3CZBtDLLwbAWEI zXb8voVbTpSWqF+C2mOKUJv0D7qDzMlVTB16T8YpImvVyD0zUbw5gDsp+RyWm3Kr KYp/Ko4ipHV3FgDzmqZW/4kocPZuYw3VdVXwA8M7jSl/JhmZXeDXLK7VwcjnSVu0 1l8A5YltejDiB7hAZZ9852mDRNtRZ9fnNbB/HGWvNV69jBA/LgArFckTJnb7fyEa qnSlmMAGz8LaUrQvL59V+Bhpjd8rSwUwe0ooAysMjriIg9+9nOittTVQcwbcCXA7 Z+WAVZY7LdyxEvoyEYXwoG3sjAZdEDYzTkEENO+ST6GQ4lmYbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHDT318MRxNC09lI6HV+JRsiJlb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTEyZmE4ZDgtODU1Yy0z ODg1LWJiYjEtY2M4YWNhZTZlOWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdrH0jkjxWs2yqlVqc213akliLBdB6jKvjvzfcobeeLvwcvGPzD qIWxqXiFlP+vU/OxezJeBeWfhXbDCIGf+bkVU/rEwRPXF2QG8SSZ7ncPwN6MCMSe f/GNIcr5FgcbWgJ6Lfoo+s1b5reoeKNyU4FDX/WayXbpr+fAUpZca6/cD9ESyEAq p3fyYLRC2qTX3iDJRNI5QwX7dN0+ylsfZJNGz3TmFuTZFAnxoyewY7hYxdwiou31 h7WSqr6FoYabutJKAhtTqI9N4in1OnG8wGNg7GSsUJ5hfMQd1UJ7Iv/9ymFsdScJ waR/SSq9GH78UvVFdgAUcc5TjB5tKvNi+HU= -----END CERTIFICATE-----Generated at Wed Sep 10 17:58:24 2025 by rpki-client