$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ebd4be5-4259-3d1f-af16-899c3e51fb6f.roa File: 8ebd4be5-4259-3d1f-af16-899c3e51fb6f.roa (raw, json) Hash identifier: DYbF4LXm6mYuxlbKOiUSM6fJhwyYzb6nuIiaUcmI7SY= Subject key identifier: 2C:2E:AC:03:5F:88:83:8D:4C:52:36:33:DE:60:96:56:F3:EC:EF:7E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C5A08FAB0612135AA080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ebd4be5-4259-3d1f-af16-899c3e51fb6f.roa Signing time: Thu 21 Aug 2025 12:31:03 +0000 ROA not before: Thu 21 Aug 2025 12:31:03 +0000 ROA not after: Wed 19 Nov 2025 13:31:03 +0000 asID: 397208 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c5:a0:8f:ab:06:12:13:5a:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:03 2025 GMT Not After : Nov 19 13:31:03 2025 GMT Subject: CN=d3efa2b0-a4b0-4513-8004-78deefb40cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:65:99:06:f4:54:99:5a:d7:2f:99:24:56:96: e4:29:29:32:f3:00:ff:ec:09:54:82:2d:f8:c6:ec: 90:ab:c4:dc:b9:b6:9c:66:e7:11:75:6b:ba:32:6b: 19:af:c8:50:0d:8a:83:74:fb:1d:93:02:af:f5:29: ee:ca:c0:3c:31:d0:d4:62:ec:e9:72:44:ba:44:34: 91:fc:6a:6b:e7:5a:c8:be:5e:08:64:26:f1:d0:39: 79:ee:d6:16:0c:5e:1e:37:aa:7e:f5:73:1a:94:f6: c3:87:30:1c:a9:83:4c:cd:3a:2b:5b:31:b2:ac:5d: 81:68:bb:ab:df:e8:6b:fe:38:6e:f6:5a:84:ab:e6: 5d:bb:11:38:f8:d3:d5:7f:ff:e7:9e:b5:75:1b:89: be:78:c9:9e:66:73:46:42:c4:3c:16:19:9f:9f:f8: 0d:48:b7:76:fb:af:65:37:ab:d3:d1:4e:d2:84:02: 75:98:ff:00:db:50:1f:79:56:0c:e0:20:43:93:48: 41:d2:ca:7f:97:52:ce:3a:5d:ea:7d:fe:26:a7:df: a9:1b:8f:3f:e7:86:ad:f6:ef:e0:cf:fc:d0:e9:da: 35:32:38:62:63:68:d0:a0:78:7e:7d:9a:72:c3:59: c2:a8:e4:1c:00:a5:98:e0:b4:10:0a:2c:f7:b9:8a: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2E:AC:03:5F:88:83:8D:4C:52:36:33:DE:60:96:56:F3:EC:EF:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ebd4be5-4259-3d1f-af16-899c3e51fb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:04:ec:58:17:3f:40:43:45:6c:bc:52:73:f8:e5:28:eb:f4: 01:41:2a:1c:c7:10:02:91:ed:a4:cb:c4:f5:25:1f:fa:94:31: 91:5e:c4:db:43:39:6d:c4:27:2d:d1:11:d0:8c:c9:61:23:cc: ac:9a:97:ea:99:62:dc:54:1b:90:98:1b:cd:8b:39:97:eb:fd: d6:78:c0:44:03:a2:73:10:01:69:9b:20:f7:b2:91:c6:2d:2c: ff:71:30:9e:5b:69:c6:54:d6:4b:23:2d:6c:a0:b0:a3:75:1b: 8f:f0:5e:ea:c9:26:b8:d2:ac:5f:57:62:69:07:10:51:2b:9f: 35:d9:fd:34:60:0b:26:d8:92:b0:ee:f0:2f:19:ba:84:a9:d6: 9f:59:bc:ae:b9:b4:3d:cd:4c:a3:44:61:17:d2:0a:b1:5b:56: 8f:f3:66:4e:a0:37:6b:07:bd:51:b2:ef:58:cf:85:cb:54:a1: e1:64:23:3e:2b:21:a5:84:98:09:0b:77:cb:b1:c5:d1:5b:40: d8:62:dc:9c:96:fd:bb:f0:30:fc:a1:d0:02:b0:7f:74:9c:d6: 17:c2:1c:da:27:36:bb:9e:78:18:01:d2:56:b1:bb:54:36:b3: d1:23:e3:76:3d:ab:8b:38:d2:a9:6b:b9:7d:ca:b8:21:a6:94: 4b:e3:0a:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8Wgj6sGEhNaoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwM1oXDTI1MTExOTEzMzEwM1owLzEtMCsGA1UEAxMk ZDNlZmEyYjAtYTRiMC00NTEzLTgwMDQtNzhkZWVmYjQwY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGWZBvRUmVrXL5kkVpbkKSky8wD/7AlUgi34 xuyQq8TcubacZucRdWu6MmsZr8hQDYqDdPsdkwKv9SnuysA8MdDUYuzpckS6RDSR /Gpr51rIvl4IZCbx0Dl57tYWDF4eN6p+9XMalPbDhzAcqYNMzTorWzGyrF2BaLur 3+hr/jhu9lqEq+ZduxE4+NPVf//nnrV1G4m+eMmeZnNGQsQ8Fhmfn/gNSLd2+69l N6vT0U7ShAJ1mP8A21AfeVYM4CBDk0hB0sp/l1LOOl3qff4mp9+pG48/54at9u/g z/zQ6do1MjhiY2jQoHh+fZpyw1nCqOQcAKWY4LQQCiz3uYrq2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCwurANfiIONTFI2M95gllbz7O9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGViZDRiZTUtNDI1OS0z ZDFmLWFmMTYtODk5YzNlNTFmYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGkE7FgXP0BDRWy8UnP45Sjr9AFBKhzHEAKR7aTLxPUlH/qUMZFe xNtDOW3EJy3REdCMyWEjzKyal+qZYtxUG5CYG82LOZfr/dZ4wEQDonMQAWmbIPey kcYtLP9xMJ5bacZU1ksjLWygsKN1G4/wXurJJrjSrF9XYmkHEFErnzXZ/TRgCybY krDu8C8ZuoSp1p9ZvK65tD3NTKNEYRfSCrFbVo/zZk6gN2sHvVGy71jPhctUoeFk Iz4rIaWEmAkLd8uxxdFbQNhi3JyW/bvwMPyh0AKwf3Sc1hfCHNonNrueeBgB0lax u1Q2s9Ej43Y9q4s40qlruX3KuCGmlEvjCic= -----END CERTIFICATE-----Generated at Wed Oct 29 09:01:56 2025 by rpki-client