$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686b297b-3c11-30b4-8770-65d155cce8a5.roa File: 686b297b-3c11-30b4-8770-65d155cce8a5.roa (raw, json) Hash identifier: /HGbbuBJUErA0cBvj5gdtfpzSZI8+xyLWpxgbePbdIo= Subject key identifier: 60:A2:14:9B:AE:74:41:98:F3:50:1C:E8:6B:13:53:10:03:CC:1D:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C28D607EDD3B169997E40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686b297b-3c11-30b4-8770-65d155cce8a5.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 396543 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:28:d6:07:ed:d3:b1:69:99:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=35cf6a9f-819f-4294-9611-b6704bb523f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:46:f3:87:a5:2a:47:5f:ca:09:08:f1:41: 9d:a2:e2:87:62:e4:7d:83:dd:42:2b:e2:71:5c:f1: 14:0c:fe:7f:65:4c:51:25:d7:3f:37:50:bb:85:18: 93:a8:62:d9:0d:19:40:24:65:e8:dc:24:b4:f3:c9: e1:54:af:e2:e0:da:e4:fa:61:3a:7b:6c:6e:3d:46: a0:11:71:4b:b2:4c:2d:02:53:ba:91:92:dd:d4:92: db:8c:8f:34:70:47:10:4d:59:87:c1:dc:cb:5f:c2: b2:23:6b:0c:33:7e:ad:95:d0:68:38:47:26:99:31: f3:60:dc:91:7a:78:13:03:ea:ac:0a:c9:5c:89:14: 3d:7d:15:79:e6:05:14:64:48:2a:e9:ed:96:1a:fc: 0d:99:f5:c0:03:ec:46:85:71:25:81:b5:cf:0e:00: 43:16:99:2a:29:73:55:58:7d:b7:82:0c:2c:02:01: 3b:60:62:21:92:ed:02:7f:9f:de:c4:53:ab:de:c9: dd:1a:e5:61:bb:12:ce:43:0a:8a:76:c6:3e:35:dc: 44:14:74:89:f9:4d:53:da:ee:d2:2f:66:93:cf:bd: b9:e5:2a:de:32:46:fb:83:55:2e:46:d5:6e:9f:c1: 21:9b:7e:16:07:0b:b3:a3:77:42:90:d8:7f:75:76: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A2:14:9B:AE:74:41:98:F3:50:1C:E8:6B:13:53:10:03:CC:1D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/686b297b-3c11-30b4-8770-65d155cce8a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ff:c6:e9:a8:09:8c:12:0b:82:d2:da:99:7b:5e:4d:f4:37: 6f:1d:64:25:44:9d:33:e2:bb:fa:c7:e6:98:e1:e8:28:2e:91: 72:a5:7c:58:53:01:2c:bc:81:ee:79:7f:fd:48:8a:f9:f1:63: b6:39:a8:92:b2:69:f9:ac:93:ad:13:50:16:f0:d9:84:8a:4c: 91:6a:b8:08:37:98:38:c5:07:bd:b6:f4:03:2d:7f:a6:b4:3d: 9d:91:e1:4e:0f:7c:ae:5f:c2:92:d8:6a:fb:ff:6b:2a:77:dc: 30:c8:c1:ac:0d:71:96:c3:8f:7c:f5:b0:08:4d:d7:71:3c:23: f2:96:9b:43:d7:81:21:98:1d:e6:95:37:b3:0e:1b:b1:ff:a0: 9f:db:7e:a8:02:85:18:9e:9a:0a:d9:ac:43:67:35:12:9b:85: 61:6d:78:06:f5:80:ca:10:24:58:e7:b3:5d:38:2c:d4:59:8b: 4c:65:8b:a6:b2:6c:58:eb:d6:6e:30:df:32:df:3e:cb:05:70: 56:86:9f:10:02:54:9b:67:b1:84:50:ef:ab:ce:d8:49:b6:64: 0c:47:34:35:24:f1:d4:84:08:18:24:92:b0:c2:e1:a2:b8:5d: 42:05:08:b2:c5:c7:98:c2:2e:53:c9:ed:8b:4a:05:a4:ce:6a: 4d:2a:18:52 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATCjWB+3TsWmZfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzVjZjZhOWYtODE5Zi00Mjk0LTk2MTEtYjY3MDRiYjUyM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ5G84elKkdfygkI8UGdouKHYuR9g91CK+Jx XPEUDP5/ZUxRJdc/N1C7hRiTqGLZDRlAJGXo3CS088nhVK/i4Nrk+mE6e2xuPUag EXFLskwtAlO6kZLd1JLbjI80cEcQTVmHwdzLX8KyI2sMM36tldBoOEcmmTHzYNyR engTA+qsCslciRQ9fRV55gUUZEgq6e2WGvwNmfXAA+xGhXElgbXPDgBDFpkqKXNV WH23ggwsAgE7YGIhku0Cf5/exFOr3sndGuVhuxLOQwqKdsY+NdxEFHSJ+U1T2u7S L2aTz7255SreMkb7g1UuRtVun8Ehm34WBwuzo3dCkNh/dXazqQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGCiFJuudEGY81Ac6GsTUxADzB0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjg2YjI5N2ItM2MxMS0z MGI0LTg3NzAtNjVkMTU1Y2NlOGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCB/8bpqAmMEguC0tqZe15N9DdvHWQlRJ0z4rv6 x+aY4egoLpFypXxYUwEsvIHueX/9SIr58WO2OaiSsmn5rJOtE1AW8NmEikyRargI N5g4xQe9tvQDLX+mtD2dkeFOD3yuX8KS2Gr7/2sqd9wwyMGsDXGWw4989bAITddx PCPylptD14EhmB3mlTezDhux/6Cf236oAoUYnpoK2axDZzUSm4VhbXgG9YDKECRY 57NdOCzUWYtMZYumsmxY69ZuMN8y3z7LBXBWhp8QAlSbZ7GEUO+rzthJtmQMRzQ1 JPHUhAgYJJKwwuGiuF1CBQiyxceYwi5Tye2LSgWkzmpNKhhS -----END CERTIFICATE-----Generated at Wed Sep 10 17:57:06 2025 by rpki-client