$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/595832da-24f5-310b-a467-83a76464a79c.roa File: 595832da-24f5-310b-a467-83a76464a79c.roa (raw, json) Hash identifier: MXY7SlfQOMbIdU4G21AyPlvF6T6kaHugaI+bmvJ156w= Subject key identifier: B8:4A:E7:1D:8D:AC:A4:F5:81:85:A7:AC:DB:33:38:D0:74:BF:62:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF2569138513E7911264F3380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/595832da-24f5-310b-a467-83a76464a79c.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396606 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:91:38:51:3e:79:11:26:4f:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=214894e2-ce4a-4367-ac0d-00d164b3da51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:9b:d5:6a:54:37:2e:ab:26:0b:16:84:9f: 68:f0:94:45:d3:9a:c1:81:8a:a2:06:71:64:61:4e: 4d:5c:0a:bf:b8:ac:cb:37:0f:52:1d:22:6e:1a:9a: 19:79:4f:52:75:ca:95:bb:61:07:07:44:04:18:7e: 44:d9:54:e4:95:d6:07:76:83:c1:a1:31:a8:7f:af: 33:4b:17:9f:e5:82:55:06:80:92:eb:2e:a6:50:86: 41:41:9f:1b:de:63:2c:a3:2b:e3:76:dc:52:f0:18: 15:ab:49:43:78:65:3d:05:89:43:db:ac:05:a5:fc: 0a:4f:01:e2:0d:c2:8b:6e:f8:24:e3:c1:a4:e7:40: f9:bd:7a:f0:6d:f3:a3:3d:15:03:14:ff:56:ee:ea: d6:87:e5:22:b3:ce:61:ec:23:1a:6e:61:d4:23:0a: 74:d1:1d:a1:ad:5c:58:80:c3:55:6b:fd:09:36:2b: d2:3d:2c:d9:5b:03:d6:b2:bb:49:8c:b3:14:47:23: 96:d7:87:37:81:ec:41:3b:92:a1:c2:03:3c:54:72: 21:71:d3:d6:61:70:23:b1:d6:2c:4c:c0:13:33:d4: 9b:92:20:9c:49:9c:46:79:1d:31:9e:47:8c:2c:6b: 46:f9:ed:ea:12:93:89:a5:e9:35:8a:a4:f0:48:69: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4A:E7:1D:8D:AC:A4:F5:81:85:A7:AC:DB:33:38:D0:74:BF:62:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/595832da-24f5-310b-a467-83a76464a79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:dc:02:9d:d8:aa:73:84:4b:14:da:3a:ca:3d:ec:b1:8f:1e: 93:1c:59:fc:aa:39:85:cf:a1:b2:8d:21:c3:06:71:48:7b:67: 8d:83:82:6b:a0:8d:a2:27:d0:ca:d3:5b:cd:d2:ba:f1:0b:41: 95:1e:b6:b3:c5:58:60:f1:e6:dd:0d:94:55:78:cc:38:7e:95: 0b:63:2f:7e:e9:94:e3:14:34:58:d9:40:e8:0b:dd:e9:38:4a: e9:ac:29:84:6c:06:dd:e9:5d:a9:ed:c3:cc:2e:18:f5:ed:57: 81:7a:37:8e:f7:22:99:7a:22:1b:2b:0e:98:f7:ce:b8:88:b7: 71:e8:d7:8f:51:fc:47:61:ee:90:9b:24:b2:13:bb:45:3b:f1: 97:e5:2a:06:5f:6d:ac:85:8b:31:4a:e9:19:4b:4d:49:1d:13: 5b:c5:e8:af:8e:0d:79:84:46:c3:e0:bc:c0:6d:62:1b:65:17: 29:db:c0:0b:ba:fe:0e:7d:2f:2a:c5:22:94:8b:1f:f8:60:9f: d8:f5:71:35:6a:bd:c9:e1:d0:3b:a1:ba:57:7a:d4:cf:1c:a7: 38:bb:51:fd:41:40:28:f3:7f:bf:ec:bc:2c:ee:c2:e4:55:c2: 54:2d:41:67:31:ef:8e:b3:c0:8e:dc:a2:1a:fa:7c:91:96:98: 49:e2:36:2e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpE4UT55ESZPM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjE0ODk0ZTItY2U0YS00MzY3LWFjMGQtMDBkMTY0YjNkYTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn2b1WpUNy6rJgsWhJ9o8JRF05rBgYqiBnFk YU5NXAq/uKzLNw9SHSJuGpoZeU9SdcqVu2EHB0QEGH5E2VTkldYHdoPBoTGof68z Sxef5YJVBoCS6y6mUIZBQZ8b3mMsoyvjdtxS8BgVq0lDeGU9BYlD26wFpfwKTwHi DcKLbvgk48Gk50D5vXrwbfOjPRUDFP9W7urWh+Uis85h7CMabmHUIwp00R2hrVxY gMNVa/0JNivSPSzZWwPWsrtJjLMURyOW14c3gexBO5KhwgM8VHIhcdPWYXAjsdYs TMATM9SbkiCcSZxGeR0xnkeMLGtG+e3qEpOJpek1iqTwSGkf8wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFLhK5x2NrKT1gYWnrNszONB0v2ICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTk1ODMyZGEtMjRmNS0z MTBiLWE0NjctODNhNzY0NjRhNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCO3AKd2KpzhEsU2jrKPeyxjx6THFn8qjmFz6Gy jSHDBnFIe2eNg4JroI2iJ9DK01vN0rrxC0GVHrazxVhg8ebdDZRVeMw4fpULYy9+ 6ZTjFDRY2UDoC93pOErprCmEbAbd6V2p7cPMLhj17VeBejeO9yKZeiIbKw6Y9864 iLdx6NePUfxHYe6QmySyE7tFO/GX5SoGX22shYsxSukZS01JHRNbxeivjg15hEbD 4LzAbWIbZRcp28ALuv4OfS8qxSKUix/4YJ/Y9XE1ar3J4dA7obpXetTPHKc4u1H9 QUAo83+/7Lws7sLkVcJULUFnMe+Os8CO3KIa+nyRlphJ4jYu -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:17 2025 by rpki-client