$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa File: 821fc637-901f-389b-a543-7673ce7660ba.roa (raw, json) Hash identifier: N39PilkIhOteh9EtRBcpYAcd5GwDFWd1TwduOcGYJpw= Subject key identifier: 82:E8:C1:D8:B1:6E:A9:79:1E:2C:47:39:7E:EF:94:DC:48:57:94:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A119E90736DD792E667B700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 397209 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:9e:90:73:6d:d7:92:e6:67:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=d8a42b52-d47c-4768-9002-a802cdf3d8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e4:16:1a:9b:ca:56:3d:a2:53:04:44:5b:2a: 8f:54:83:9c:a6:e9:4f:db:3b:cc:4a:75:6b:55:ed: d8:8e:53:90:ba:c1:7b:9d:ca:a5:09:54:e1:38:77: f7:85:00:92:ea:55:95:c8:cf:1c:f7:2a:5e:4a:68: 7c:3f:65:7d:6d:5c:fd:98:a9:31:53:d6:df:20:c4: 00:a5:f9:d9:65:c3:a9:d2:76:ea:7e:5c:2e:db:06: 23:02:e0:be:61:ac:d4:a0:08:39:af:e3:6f:9b:22: ec:ad:42:e5:6e:48:89:3f:5b:ec:fe:01:57:c6:10: fe:11:4f:35:60:e2:69:21:54:91:4e:f1:c3:80:19: 4e:97:df:d8:06:e6:a4:60:4d:6b:1a:d4:9b:32:1a: 10:c3:1a:4c:a3:0f:ce:3a:30:1e:fc:53:6b:f6:0e: 30:9b:5f:59:1c:44:fc:1a:2a:11:ef:b4:99:67:a0: b0:3d:88:d3:19:a1:9b:19:99:81:08:2f:49:0c:7c: 62:5d:7e:f3:aa:01:93:fd:1c:8f:25:80:3c:d8:e5: 0c:ad:11:a0:2f:1c:a7:2a:b5:21:86:64:9b:1c:d0: 92:1f:e9:ae:6c:af:58:3c:a3:02:a7:c9:55:76:d0: 18:d0:d0:74:94:c2:fa:34:b9:db:3d:6a:f9:76:23: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E8:C1:D8:B1:6E:A9:79:1E:2C:47:39:7E:EF:94:DC:48:57:94:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/821fc637-901f-389b-a543-7673ce7660ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:87:a4:0a:42:12:ba:22:a9:d0:54:6d:08:c2:6a:bf:a6:77: 36:7b:96:dc:f6:81:48:f5:c3:51:97:85:ee:9e:f2:b0:71:50: 1d:98:b0:43:ad:61:43:3a:21:17:d3:5d:87:55:b0:41:d3:21: ad:c1:57:93:a5:98:a8:b8:82:ed:f9:50:66:7c:ed:7d:08:13: 45:fb:26:ac:a1:c1:ea:e0:01:98:eb:93:ab:8e:08:00:11:f8: 57:75:28:3e:58:f8:31:01:e7:da:72:5b:7a:a3:8c:96:d0:08: 0d:43:e2:ad:2b:63:7c:79:96:d8:e0:04:41:1c:1e:1d:dd:26: 42:d8:7d:24:93:8c:b5:7c:b5:69:77:7e:bb:e7:7e:2b:5f:9b: 6b:63:c6:84:87:e5:34:42:cd:90:de:5e:be:de:d6:22:b6:99: 62:ac:8a:ef:9a:6c:42:78:ba:f9:75:73:43:ef:a5:db:0f:22: 5d:80:a8:0f:d5:a0:13:48:ef:5a:59:75:eb:97:0d:89:27:f4: ba:46:b6:54:4c:58:4f:a5:20:ba:0a:52:77:44:bb:e8:62:4d: f8:ce:40:7b:ef:4e:b9:32:69:56:b1:5e:76:58:78:9c:40:32: cc:80:bc:9e:b9:ab:5c:df:56:63:eb:20:5f:32:da:81:8e:51: 29:f5:23:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZ6Qc23XkuZntwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk ZDhhNDJiNTItZDQ3Yy00NzY4LTkwMDItYTgwMmNkZjNkOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreQWGpvKVj2iUwREWyqPVIOcpulP2zvMSnVr Ve3YjlOQusF7ncqlCVThOHf3hQCS6lWVyM8c9ypeSmh8P2V9bVz9mKkxU9bfIMQA pfnZZcOp0nbqflwu2wYjAuC+YazUoAg5r+NvmyLsrULlbkiJP1vs/gFXxhD+EU81 YOJpIVSRTvHDgBlOl9/YBuakYE1rGtSbMhoQwxpMow/OOjAe/FNr9g4wm19ZHET8 GioR77SZZ6CwPYjTGaGbGZmBCC9JDHxiXX7zqgGT/RyPJYA82OUMrRGgLxynKrUh hmSbHNCSH+mubK9YPKMCp8lVdtAY0NB0lML6NLnbPWr5diMYzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFILowdixbql5HixHOX7vlNxIV5RvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODIxZmM2MzctOTAxZi0z ODliLWE1NDMtNzY3M2NlNzY2MGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiHpApCEroiqdBUbQjCar+mdzZ7ltz2gUj1w1GXhe6e8rBxUB2Y sEOtYUM6IRfTXYdVsEHTIa3BV5OlmKi4gu35UGZ87X0IE0X7JqyhwergAZjrk6uO CAAR+Fd1KD5Y+DEB59pyW3qjjJbQCA1D4q0rY3x5ltjgBEEcHh3dJkLYfSSTjLV8 tWl3frvnfitfm2tjxoSH5TRCzZDeXr7e1iK2mWKsiu+abEJ4uvl1c0PvpdsPIl2A qA/VoBNI71pZdeuXDYkn9LpGtlRMWE+lILoKUndEu+hiTfjOQHvvTrkyaVaxXnZY eJxAMsyAvJ65q1zfVmPrIF8y2oGOUSn1I24= -----END CERTIFICATE-----Generated at Wed Sep 10 20:48:36 2025 by rpki-client