$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97702c65-81aa-3dd7-aa01-7d9e2e3c5246.roa File: 97702c65-81aa-3dd7-aa01-7d9e2e3c5246.roa (raw, json) Hash identifier: ghDpanIRdJBNtLr4QmCv6il0Hj8OSXMgxV7MRSpmcnI= Subject key identifier: FC:BC:FC:58:A1:F6:D8:F4:EE:68:20:55:14:34:1C:29:36:D1:73:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C2CD133E42A554AC9BC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97702c65-81aa-3dd7-aa01-7d9e2e3c5246.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 397197 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2c:d1:33:e4:2a:55:4a:c9:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=15aebde1-2f4c-4fe3-ab39-83b8aecbf921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:42:64:84:33:bc:b8:ad:80:58:f6:cd:8d: 76:7a:6b:f4:c2:58:ff:ff:1a:80:b3:c0:4e:78:bc: 0a:d7:56:d9:52:0e:32:e5:d0:d9:26:3e:ff:f8:33: c1:db:9b:ad:94:73:4e:0b:3f:b2:7b:bc:5f:4a:b5: f9:03:5f:31:e6:b5:f6:3f:de:6e:ba:f2:e0:b8:bc: 54:80:ab:b6:ff:23:ca:bd:9e:d9:bc:18:51:fd:3f: 0d:70:19:f2:0c:27:35:1c:22:15:da:11:13:76:05: 31:71:1b:ec:32:84:63:05:1e:86:31:b2:60:7c:99: 3c:c6:f2:ca:80:c1:3e:95:f2:0f:17:33:a3:3d:e1: 32:15:55:bd:95:e5:47:f2:f2:b1:66:38:af:8f:cf: 1d:db:0a:08:45:9a:d6:b7:e8:8e:b5:ec:dd:f1:e4: 11:ea:a6:7b:22:b9:fe:e0:cf:ae:e5:60:b5:fb:73: 17:84:70:6d:78:b5:2f:71:3b:40:2a:59:a0:c1:10: 89:1f:59:4e:ca:70:b6:41:53:c6:79:a8:b7:04:8c: 02:90:36:bf:7b:94:9b:a6:02:67:7a:29:a9:ce:ba: ae:78:c7:ac:c5:74:3f:93:28:0b:f5:91:93:be:50: fb:eb:e0:2b:61:77:01:eb:cd:19:f1:ad:02:52:93: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BC:FC:58:A1:F6:D8:F4:EE:68:20:55:14:34:1C:29:36:D1:73:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97702c65-81aa-3dd7-aa01-7d9e2e3c5246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:46:03:aa:e5:96:06:8d:84:43:3c:ac:23:9d:1b:5b:d5:d6: 90:69:6a:6e:19:33:13:bc:7e:07:1b:3d:92:ea:27:07:a6:ee: 81:b5:e8:26:c4:a9:c3:72:5a:be:64:04:ce:9f:60:b1:7b:20: 5a:f0:ed:ee:5f:3d:67:34:3f:cf:85:38:72:95:18:e3:81:f9: d8:43:98:7d:fb:91:34:4c:45:c0:88:76:09:e1:ff:c1:ab:1d: 92:1e:16:16:a9:c7:82:0c:5b:43:98:eb:94:b8:c8:56:f6:69: d5:5a:8f:6c:bd:9d:59:bb:58:a3:b7:b4:77:10:4e:18:6a:33: d6:b9:bf:22:c2:26:c7:12:30:ee:df:cf:12:22:51:c6:5e:44: e3:94:77:26:8b:33:66:bf:4a:04:6d:b8:44:c9:11:4d:f3:e5: 39:1b:ea:9c:fc:b5:20:e1:28:83:49:3f:0e:f7:e1:b4:1d:cd: cb:0a:10:34:a8:a4:9e:83:ee:32:e2:b7:b6:0d:60:64:27:f8: e5:1a:d6:18:bd:33:ef:a8:c3:0b:95:d8:43:55:44:ce:e6:d4: 5f:12:d9:6c:b0:bd:64:6d:6c:24:02:ad:5b:f3:94:04:c0:76: 30:cb:d5:81:b7:83:74:43:a4:70:0a:c1:dd:3a:05:e6:08:b6: 17:dc:d7:ec -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATCzRM+QqVUrJvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTVhZWJkZTEtMmY0Yy00ZmUzLWFiMzktODNiOGFlY2JmOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3JCZIQzvLitgFj2zY12emv0wlj//xqAs8BO eLwK11bZUg4y5dDZJj7/+DPB25utlHNOCz+ye7xfSrX5A18x5rX2P95uuvLguLxU gKu2/yPKvZ7ZvBhR/T8NcBnyDCc1HCIV2hETdgUxcRvsMoRjBR6GMbJgfJk8xvLK gME+lfIPFzOjPeEyFVW9leVH8vKxZjivj88d2woIRZrWt+iOtezd8eQR6qZ7Irn+ 4M+u5WC1+3MXhHBteLUvcTtAKlmgwRCJH1lOynC2QVPGeai3BIwCkDa/e5SbpgJn eimpzrqueMesxXQ/kygL9ZGTvlD76+ArYXcB680Z8a0CUpMmUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPy8/Fih9tj07mggVRQ0HCk20XNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTc3MDJjNjUtODFhYS0z ZGQ3LWFhMDEtN2Q5ZTJlM2M1MjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBtRgOq5ZYGjYRDPKwjnRtb1daQaWpuGTMTvH4H Gz2S6icHpu6BtegmxKnDclq+ZATOn2CxeyBa8O3uXz1nND/PhThylRjjgfnYQ5h9 +5E0TEXAiHYJ4f/Bqx2SHhYWqceCDFtDmOuUuMhW9mnVWo9svZ1Zu1ijt7R3EE4Y ajPWub8iwibHEjDu388SIlHGXkTjlHcmizNmv0oEbbhEyRFN8+U5G+qc/LUg4SiD ST8O9+G0Hc3LChA0qKSeg+4y4re2DWBkJ/jlGtYYvTPvqMMLldhDVUTO5tRfEtls sL1kbWwkAq1b85QEwHYwy9WBt4N0Q6RwCsHdOgXmCLYX3Nfs -----END CERTIFICATE-----Generated at Wed Oct 29 07:11:53 2025 by rpki-client