$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cfdc2f8-3124-365c-9879-2db37863a87a.roa File: 5cfdc2f8-3124-365c-9879-2db37863a87a.roa (raw, json) Hash identifier: NoyGVMmDh8kLnF0pN7jiy5qnSLcA7suzm6kynkq5ueM= Subject key identifier: F4:F6:98:FD:06:EC:CA:29:C7:C2:75:B1:B4:97:39:E8:71:C2:95:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DBFE8F233AC57A8013D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cfdc2f8-3124-365c-9879-2db37863a87a.roa Signing time: Tue 26 Aug 2025 12:32:10 +0000 ROA not before: Tue 26 Aug 2025 12:32:10 +0000 ROA not after: Mon 24 Nov 2025 13:32:10 +0000 asID: 396546 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:bf:e8:f2:33:ac:57:a8:01:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:10 2025 GMT Not After : Nov 24 13:32:10 2025 GMT Subject: CN=8eb7d88e-4866-4ce6-8255-2c5ff7ce430f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:8a:2f:db:4a:d7:4c:37:2a:ac:0e:b0:ca: a0:71:5c:91:9a:ab:fc:57:96:79:34:85:d3:15:d1: 5f:b2:7c:d0:02:41:81:7a:0c:46:1e:50:38:05:95: e2:70:d3:06:cd:ee:6f:01:2b:dc:b5:2f:1c:0b:91: 1f:b3:41:56:80:a7:f2:e9:08:a0:70:e6:53:4c:72: 1b:eb:fa:f7:05:c1:40:06:6a:bc:7d:e2:83:4e:a7: 23:b7:01:64:65:4a:22:cb:ef:a2:bd:25:88:29:ad: 61:b5:bc:d8:2f:f7:56:62:95:52:e1:90:d2:f5:64: 4b:ef:42:ad:a3:a8:dc:84:56:10:77:7b:a2:b7:22: 3d:84:02:bb:ee:1a:20:0c:c7:32:06:ac:1c:ea:cb: 10:5c:33:2a:89:3d:bb:c6:9b:45:96:b3:c4:33:67: d7:36:d4:a6:c6:4c:84:c9:6d:95:c5:35:96:f5:af: d7:71:88:e0:ed:41:12:11:b3:23:e1:47:0f:b7:1b: ae:7f:1e:35:f6:55:60:76:91:ac:f1:ee:21:de:f2: 3a:16:47:fd:81:ee:c3:21:3b:86:8e:bb:38:f0:e9: 3e:18:42:ce:b1:6b:f2:9d:eb:d1:81:6b:eb:7f:69: 64:e4:3a:40:5f:5f:a2:77:de:f4:ac:82:98:f6:99: 5a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:98:FD:06:EC:CA:29:C7:C2:75:B1:B4:97:39:E8:71:C2:95:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5cfdc2f8-3124-365c-9879-2db37863a87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:af:16:6b:f0:35:7c:81:37:3e:dc:98:63:6d:30:fe:9c:48: ae:7c:c1:83:17:5c:72:43:84:6e:57:7f:b6:82:cd:b8:a3:68: 8a:a2:96:4a:a9:09:60:58:44:b5:3d:a4:2a:97:d6:50:53:02: 42:df:07:b2:b2:94:2b:8c:5b:58:70:2e:6f:ca:7b:b4:17:42: dc:9a:ee:63:d9:87:7d:f3:9f:ec:d2:c1:57:c5:42:9b:84:21: 17:23:a2:62:80:12:2c:68:62:27:7e:c1:89:92:2e:c4:36:bc: 1f:b0:6c:14:ed:75:b3:15:4f:b3:e7:06:52:10:b8:40:77:ae: 17:0a:48:a6:4c:9a:bc:05:68:6b:58:dc:a0:7c:56:18:f7:8f: cc:3c:ba:a9:f1:e1:44:db:62:9e:d7:aa:2e:e8:56:75:4a:a8: fe:0c:f5:c3:24:f0:4b:36:8e:2d:7f:70:9b:ae:2e:ff:4e:2a: 75:50:53:50:88:7b:19:a3:47:2b:6e:b9:8b:f0:38:d8:f2:c8: 88:91:1a:0f:3b:02:9f:18:db:66:36:31:ea:1c:02:d9:a0:b9: 93:aa:20:da:b3:86:ad:0d:68:bd:54:ca:81:78:b9:09:86:cc: af:9f:f5:ac:39:37:3b:44:a1:aa:da:5b:9e:7f:f7:9b:c7:42: 98:a0:fe:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8Db/o8jOsV6gBPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMFoXDTI1MTEyNDEzMzIxMFowLzEtMCsGA1UEAxMk OGViN2Q4OGUtNDg2Ni00Y2U2LTgyNTUtMmM1ZmY3Y2U0MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSGKL9tK10w3KqwOsMqgcVyRmqv8V5Z5NIXT FdFfsnzQAkGBegxGHlA4BZXicNMGze5vASvctS8cC5Efs0FWgKfy6QigcOZTTHIb 6/r3BcFABmq8feKDTqcjtwFkZUoiy++ivSWIKa1htbzYL/dWYpVS4ZDS9WRL70Kt o6jchFYQd3uityI9hAK77hogDMcyBqwc6ssQXDMqiT27xptFlrPEM2fXNtSmxkyE yW2VxTWW9a/XcYjg7UESEbMj4UcPtxuufx419lVgdpGs8e4h3vI6Fkf9ge7DITuG jrs48Ok+GELOsWvynevRgWvrf2lk5DpAX1+id970rIKY9plaIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPT2mP0G7Mopx8J1sbSXOehxwpV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWNmZGMyZjgtMzEyNC0z NjVjLTk4NzktMmRiMzc4NjNhODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKuvFmvwNXyBNz7cmGNtMP6cSK58wYMXXHJDhG5Xf7aCzbijaIqi lkqpCWBYRLU9pCqX1lBTAkLfB7KylCuMW1hwLm/Ke7QXQtya7mPZh33zn+zSwVfF QpuEIRcjomKAEixoYid+wYmSLsQ2vB+wbBTtdbMVT7PnBlIQuEB3rhcKSKZMmrwF aGtY3KB8Vhj3j8w8uqnx4UTbYp7Xqi7oVnVKqP4M9cMk8Es2ji1/cJuuLv9OKnVQ U1CIexmjRytuuYvwONjyyIiRGg87Ap8Y22Y2MeocAtmguZOqINqzhq0NaL1UyoF4 uQmGzK+f9aw5NztEoaraW55/95vHQpig/ts= -----END CERTIFICATE-----Generated at Wed Sep 10 18:03:35 2025 by rpki-client