$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cbe735b-c85a-3588-8894-3f9ed6c2ef68.roa File: 8cbe735b-c85a-3588-8894-3f9ed6c2ef68.roa (raw, json) Hash identifier: RaizgA2TAgsx7pOxJL8+6F3qbFVcksbHdzwfz3aCVK4= Subject key identifier: D5:07:3D:05:D3:4D:62:85:1F:F1:DE:72:81:D4:B3:80:48:17:9D:4A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A1190A5BC42ACC66AD4D500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cbe735b-c85a-3588-8894-3f9ed6c2ef68.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396584 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:90:a5:bc:42:ac:c6:6a:d4:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=97571f5d-14ea-4574-b0a6-7bf26a318b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a1:17:46:e7:d0:2b:52:ca:aa:b6:b7:af:91: 68:9a:b0:9a:08:6b:78:70:14:c8:fd:3a:70:73:ee: e4:e7:dc:e3:d2:40:bb:ca:98:a1:9d:db:82:25:6d: 57:af:1f:ae:15:41:1c:4e:0b:5a:30:72:2f:e5:29: 57:37:aa:bd:5b:b0:9b:fd:68:f8:f6:b3:0f:b5:ee: bd:30:35:79:0e:42:25:64:b9:e1:4a:57:ad:ad:40: 2d:ea:ee:fb:3d:50:c2:2d:74:26:34:6e:04:9c:38: e0:05:2d:e2:d9:c5:2e:32:81:f7:b8:48:e8:03:cb: 2f:2e:a5:8e:07:eb:d5:57:ba:33:99:78:0c:a5:a5: 30:2f:f2:61:1c:52:7b:34:4e:95:65:98:2a:cc:43: 71:31:09:50:d1:fa:3e:b0:b0:1a:3f:d2:ea:c1:7d: e9:c8:28:fd:94:31:86:48:25:04:1f:e0:76:ab:4c: fe:c6:9e:b9:2d:b8:d4:35:f2:a9:b6:56:f7:b3:c2: bf:26:d4:2a:dd:51:e0:32:fb:bc:58:b1:df:6d:38: f1:17:9b:6e:12:d5:7c:1c:af:a8:c0:b0:7a:ba:72: 36:9f:99:0e:93:8c:4e:ca:37:fb:65:61:28:07:0a: 56:9c:52:2d:71:f8:1a:3d:34:57:87:38:d6:17:d8: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:07:3D:05:D3:4D:62:85:1F:F1:DE:72:81:D4:B3:80:48:17:9D:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8cbe735b-c85a-3588-8894-3f9ed6c2ef68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:8f:40:ab:01:93:4e:2e:8a:77:a0:49:99:47:15:74:c8:29: d1:4e:57:f2:3b:7f:9f:34:7b:86:78:74:08:d4:ae:8f:21:c1: 4a:c5:68:91:d8:e3:59:f1:68:e5:d9:34:a6:d1:49:b9:65:da: a6:64:bf:e2:91:2c:7d:34:46:cc:49:21:8a:26:01:8d:41:a3: 59:da:74:db:90:fb:99:7c:e6:3d:9a:70:11:f4:6d:a3:b1:9c: d5:9b:6b:0c:db:a6:0e:97:23:47:ff:1c:e5:6c:6c:3e:0c:4a: 20:20:0e:82:f5:9a:28:a1:2a:90:5e:4a:fb:d6:ee:c0:5f:a6: 65:c1:61:8d:fe:1e:c7:ea:56:7d:50:0b:a5:b7:39:ac:3b:35: 8c:c1:a5:62:bd:44:82:0d:fd:ae:5f:c5:63:4b:f7:8d:f0:e4: 45:d9:91:fe:aa:f2:61:bb:74:71:ab:ae:7f:9d:68:bd:9a:53: dc:72:c8:57:ce:fc:dd:d1:ec:6d:0a:8d:47:1a:d2:9c:79:40: f7:40:38:e4:a5:32:b8:d0:5f:a2:ef:2b:63:32:30:63:4c:e5: 39:8a:93:ee:71:d3:57:ba:fe:94:90:ff:bc:78:fd:7b:a8:cf: b9:f3:c5:0d:e9:24:14:83:cc:f1:7f:22:2f:9b:b1:eb:79:a2: 29:6c:52:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZClvEKsxmrU1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk OTc1NzFmNWQtMTRlYS00NTc0LWIwYTYtN2JmMjZhMzE4YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaEXRufQK1LKqra3r5FomrCaCGt4cBTI/Tpw c+7k59zj0kC7ypihnduCJW1Xrx+uFUEcTgtaMHIv5SlXN6q9W7Cb/Wj49rMPte69 MDV5DkIlZLnhSletrUAt6u77PVDCLXQmNG4EnDjgBS3i2cUuMoH3uEjoA8svLqWO B+vVV7ozmXgMpaUwL/JhHFJ7NE6VZZgqzENxMQlQ0fo+sLAaP9LqwX3pyCj9lDGG SCUEH+B2q0z+xp65LbjUNfKptlb3s8K/JtQq3VHgMvu8WLHfbTjxF5tuEtV8HK+o wLB6unI2n5kOk4xOyjf7ZWEoBwpWnFItcfgaPTRXhzjWF9j7OQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNUHPQXTTWKFH/HecoHUs4BIF51KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGNiZTczNWItYzg1YS0z NTg4LTg4OTQtM2Y5ZWQ2YzJlZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALaPQKsBk04uinegSZlHFXTIKdFOV/I7f580e4Z4dAjUro8hwUrF aJHY41nxaOXZNKbRSbll2qZkv+KRLH00RsxJIYomAY1Bo1nadNuQ+5l85j2acBH0 baOxnNWbawzbpg6XI0f/HOVsbD4MSiAgDoL1miihKpBeSvvW7sBfpmXBYY3+Hsfq Vn1QC6W3Oaw7NYzBpWK9RIIN/a5fxWNL943w5EXZkf6q8mG7dHGrrn+daL2aU9xy yFfO/N3R7G0KjUca0px5QPdAOOSlMrjQX6LvK2MyMGNM5TmKk+5x01e6/pSQ/7x4 /Xuoz7nzxQ3pJBSDzPF/Ii+bset5oilsUlQ= -----END CERTIFICATE-----Generated at Wed Sep 10 18:02:16 2025 by rpki-client