$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c3c283f-b048-36f3-9659-a9b0a20cb378.roa File: 7c3c283f-b048-36f3-9659-a9b0a20cb378.roa (raw, json) Hash identifier: tGmSmOPzpCkblh956+pVjoLD226wLci2+4GwuSgOCZY= Subject key identifier: 75:F2:44:2C:C5:90:0F:C1:3A:F4:30:15:62:94:E0:88:7E:4B:A0:AF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC80F789DB3F27223A900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c3c283f-b048-36f3-9659-a9b0a20cb378.roa Signing time: Tue 26 Aug 2025 12:32:14 +0000 ROA not before: Tue 26 Aug 2025 12:32:14 +0000 ROA not after: Mon 24 Nov 2025 13:32:14 +0000 asID: 396555 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c8:0f:78:9d:b3:f2:72:23:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:14 2025 GMT Not After : Nov 24 13:32:14 2025 GMT Subject: CN=13b6e430-da59-4bc6-b028-fa0e9752d0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:12:1c:84:2f:e4:25:6c:82:3c:e5:74:e9:68: e8:69:0b:5e:71:4a:80:e2:94:de:13:27:5d:97:48: 72:f8:28:8c:7d:42:6b:76:59:fc:04:69:82:13:ef: ef:b0:a2:0a:39:31:99:a2:30:17:50:0b:b2:42:fa: de:04:17:13:96:70:61:f9:ba:a2:1f:a0:b6:b0:fa: 13:f2:07:88:4e:4f:6c:5e:31:aa:c6:a9:e6:aa:bd: 83:54:40:1a:0a:9b:5a:52:ed:15:8b:dc:90:56:ce: c4:dc:3f:8a:e7:12:52:d7:fa:3c:04:37:96:0f:3c: e1:26:35:97:91:f1:5e:b6:c5:f7:7a:ad:64:28:e6: c2:53:1f:fe:ab:d6:01:48:98:c1:32:d1:46:3c:66: c1:e4:f2:1a:3e:ed:cb:ca:46:4c:7d:40:48:94:be: 61:fe:0f:9f:e6:09:e7:59:58:63:26:c1:5c:8e:ef: 3d:f7:3b:59:e5:72:b4:9a:16:3d:7e:1e:11:4f:77: cf:42:f2:a5:64:a8:b1:66:f6:e3:9c:ac:03:3c:d2: 31:6a:ad:88:6d:40:f4:38:01:fa:b0:9a:31:f3:62: 6a:00:f6:83:45:c4:98:18:3b:32:82:19:74:89:35: 2d:37:5e:d2:2b:51:dc:b8:c5:a7:d2:d1:57:39:5b: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F2:44:2C:C5:90:0F:C1:3A:F4:30:15:62:94:E0:88:7E:4B:A0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c3c283f-b048-36f3-9659-a9b0a20cb378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:ca:4c:3c:bd:16:d0:9e:8e:ac:43:aa:9a:bd:4d:8a:e5:bd: 6b:5c:60:8d:7a:42:fe:3a:4f:c5:fc:ed:00:1b:86:e0:71:bb: da:17:3a:b9:ab:93:d5:77:ce:e0:21:2a:ad:26:d7:96:29:23: 0a:ca:30:be:44:5f:dd:ea:8f:d6:02:f8:97:1a:87:f3:7d:c2: cc:36:01:c7:d5:fa:d9:f3:34:ac:e4:45:e9:8f:8f:e8:9a:47: ac:80:15:1e:55:ec:4d:c9:5f:b5:3c:28:3e:72:53:81:c1:a0: 02:37:8a:b1:3f:bf:3d:60:b7:0a:0b:8c:cd:54:4a:30:0b:32: f6:fd:f5:e7:f2:a4:87:34:a9:f1:41:72:05:e9:5e:7d:0f:9a: 53:6c:b0:ca:ba:06:77:c6:54:ca:f5:e2:f1:96:35:86:b7:df: 07:9d:4e:6b:96:6c:81:bb:1e:ab:77:7e:92:0d:66:aa:e6:91: 6a:25:a8:ab:99:64:3f:31:56:e4:f0:e1:8c:5d:95:3f:d1:c3: 29:12:e5:4e:bd:28:5e:dc:45:d9:7e:f3:19:5c:dc:aa:8b:41: 85:e5:e1:ce:02:56:04:2e:9e:58:58:49:46:18:4c:37:56:ae: b8:cb:5d:9d:c4:8d:ee:b8:36:69:cb:b6:bd:b9:5e:6f:80:d1: 14:4a:80:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcgPeJ2z8nIjqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNFoXDTI1MTEyNDEzMzIxNFowLzEtMCsGA1UEAxMk MTNiNmU0MzAtZGE1OS00YmM2LWIwMjgtZmEwZTk3NTJkMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBIchC/kJWyCPOV06WjoaQtecUqA4pTeEydd l0hy+CiMfUJrdln8BGmCE+/vsKIKOTGZojAXUAuyQvreBBcTlnBh+bqiH6C2sPoT 8geITk9sXjGqxqnmqr2DVEAaCptaUu0Vi9yQVs7E3D+K5xJS1/o8BDeWDzzhJjWX kfFetsX3eq1kKObCUx/+q9YBSJjBMtFGPGbB5PIaPu3LykZMfUBIlL5h/g+f5gnn WVhjJsFcju899ztZ5XK0mhY9fh4RT3fPQvKlZKixZvbjnKwDPNIxaq2IbUD0OAH6 sJox82JqAPaDRcSYGDsyghl0iTUtN17SK1HcuMWn0tFXOVsWAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHXyRCzFkA/BOvQwFWKU4Ih+S6CvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2MzYzI4M2YtYjA0OC0z NmYzLTk2NTktYTliMGEyMGNiMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKvKTDy9FtCejqxDqpq9TYrlvWtcYI16Qv46T8X87QAbhuBxu9oX Ormrk9V3zuAhKq0m15YpIwrKML5EX93qj9YC+Jcah/N9wsw2AcfV+tnzNKzkRemP j+iaR6yAFR5V7E3JX7U8KD5yU4HBoAI3irE/vz1gtwoLjM1USjALMvb99efypIc0 qfFBcgXpXn0PmlNssMq6BnfGVMr14vGWNYa33wedTmuWbIG7Hqt3fpINZqrmkWol qKuZZD8xVuTw4YxdlT/RwykS5U69KF7cRdl+8xlc3KqLQYXl4c4CVgQunlhYSUYY TDdWrrjLXZ3Eje64NmnLtr25Xm+A0RRKgIA= -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:16 2025 by rpki-client