$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/578efc80-71a9-3064-8778-68d01f5822a5.roa File: 578efc80-71a9-3064-8778-68d01f5822a5.roa (raw, json) Hash identifier: IBQgM6qM80lW60oA3z5aklblOuDm4afujitVE43aslE= Subject key identifier: 35:E3:67:2E:27:7B:4A:0C:35:44:A3:CE:B0:C6:D5:8C:C4:70:55:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC0FDF4DC98A285EC7480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/578efc80-71a9-3064-8778-68d01f5822a5.roa Signing time: Tue 26 Aug 2025 12:32:11 +0000 ROA not before: Tue 26 Aug 2025 12:32:11 +0000 ROA not after: Mon 24 Nov 2025 13:32:11 +0000 asID: 32651 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c0:fd:f4:dc:98:a2:85:ec:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:11 2025 GMT Not After : Nov 24 13:32:11 2025 GMT Subject: CN=a217af2e-087e-4b3e-87d7-455c80a6c8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:49:45:84:81:51:fc:54:a2:68:a4:49:b6:d4: 6e:ac:59:8e:69:17:00:38:53:cc:89:f3:ca:21:c1: 56:48:6c:23:98:dc:4b:bb:8f:aa:3e:a4:a5:90:d8: e5:59:b9:c9:98:d0:76:59:22:17:73:bd:a3:4e:77: 04:14:5b:56:96:68:6e:16:bc:b6:17:4e:59:7d:3f: 33:4d:ca:10:b4:52:53:b5:28:a0:65:29:45:2e:f2: 82:ef:b8:b7:a6:5e:74:03:22:40:ee:ea:43:13:3d: 6b:0b:2e:f2:ce:2b:31:82:75:72:94:f0:21:ce:fd: 3c:e5:f7:a0:5e:9d:42:f7:f1:ff:17:ff:65:b8:46: 2a:f2:d1:16:51:21:89:49:bc:39:ae:e6:64:8e:67: 78:20:84:e9:be:82:c8:05:dd:d1:85:51:7e:c5:0c: c1:c4:0e:d4:91:a4:c4:97:09:f6:d0:3c:16:5f:74: 7f:ca:53:98:1d:a8:54:62:23:f7:61:a8:86:0b:fc: ff:e4:71:ef:e7:e2:09:2d:c1:47:88:7c:9a:4c:57: 61:99:af:94:1b:0b:a8:d1:7c:32:bb:7f:20:1e:57: e5:dc:57:93:bf:77:91:42:8a:2a:8a:3a:54:92:ba: a1:fa:5a:da:03:19:f5:34:3a:6f:3d:65:59:95:6d: 52:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E3:67:2E:27:7B:4A:0C:35:44:A3:CE:B0:C6:D5:8C:C4:70:55:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/578efc80-71a9-3064-8778-68d01f5822a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:a0:14:0e:18:52:71:a2:bc:52:6e:a9:c2:13:d6:35:05:eb: fe:bd:8a:18:1d:0c:36:8c:46:8e:e8:1c:1e:e0:5f:7d:c2:4a: 8b:8b:07:ed:4c:ba:a4:d3:9a:ee:c6:a3:0a:b7:47:86:2b:ea: fb:8c:4f:43:f2:96:33:3a:32:46:fc:82:5e:78:e2:61:7a:67: 7d:c0:54:89:32:3a:16:f3:85:da:56:0c:32:75:df:8f:ae:a2: 02:49:aa:45:42:13:09:4b:c7:87:c2:3e:a8:d5:e7:19:3b:4e: be:8a:bf:1a:a3:c7:1f:87:2e:08:87:24:63:ba:73:14:dc:04: ee:57:c6:d1:0a:df:a1:39:7e:9d:d2:41:2d:78:70:b1:ad:65: ca:f7:96:71:34:00:01:b2:60:e6:1e:14:16:43:eb:63:27:97: 39:b7:9c:10:7d:86:dc:b9:4c:ac:5e:b7:dc:a9:15:e2:14:5e: d4:52:2f:54:59:67:72:7f:43:21:a7:fd:e0:22:ea:01:b7:4e: 2f:ee:88:e3:12:85:1e:47:c9:c2:0a:94:2f:42:4b:1f:14:97: 37:d4:c8:f6:bc:21:e3:41:3b:0c:30:cd:b7:38:8b:12:e4:76: 1f:cd:68:e4:6b:19:77:2b:91:84:a9:34:6b:32:f3:f1:ea:a5: 53:6a:26:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcD99NyYooXsdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMVoXDTI1MTEyNDEzMzIxMVowLzEtMCsGA1UEAxMk YTIxN2FmMmUtMDg3ZS00YjNlLTg3ZDctNDU1YzgwYTZjOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UlFhIFR/FSiaKRJttRurFmOaRcAOFPMifPK IcFWSGwjmNxLu4+qPqSlkNjlWbnJmNB2WSIXc72jTncEFFtWlmhuFry2F05ZfT8z TcoQtFJTtSigZSlFLvKC77i3pl50AyJA7upDEz1rCy7yzisxgnVylPAhzv085feg Xp1C9/H/F/9luEYq8tEWUSGJSbw5ruZkjmd4IITpvoLIBd3RhVF+xQzBxA7UkaTE lwn20DwWX3R/ylOYHahUYiP3YaiGC/z/5HHv5+IJLcFHiHyaTFdhma+UGwuo0Xwy u38gHlfl3FeTv3eRQooqijpUkrqh+lraAxn1NDpvPWVZlW1SmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXjZy4ne0oMNUSjzrDG1YzEcFWiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTc4ZWZjODAtNzFhOS0z MDY0LTg3NzgtNjhkMDFmNTgyMmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK+gFA4YUnGivFJuqcIT1jUF6/69ihgdDDaMRo7oHB7gX33CSouL B+1MuqTTmu7Gowq3R4Yr6vuMT0PyljM6Mkb8gl544mF6Z33AVIkyOhbzhdpWDDJ1 34+uogJJqkVCEwlLx4fCPqjV5xk7Tr6Kvxqjxx+HLgiHJGO6cxTcBO5XxtEK36E5 fp3SQS14cLGtZcr3lnE0AAGyYOYeFBZD62Mnlzm3nBB9hty5TKxet9ypFeIUXtRS L1RZZ3J/QyGn/eAi6gG3Ti/uiOMShR5HycIKlC9CSx8UlzfUyPa8IeNBOwwwzbc4 ixLkdh/NaORrGXcrkYSpNGsy8/HqpVNqJqw= -----END CERTIFICATE-----Generated at Wed Oct 29 09:18:13 2025 by rpki-client