$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa File: 9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa (raw, json) Hash identifier: jQfm3AvBTcOOQRXF5PJRtoMmlrpvk3WNu3wtNZ0dwqw= Subject key identifier: A6:BD:41:7B:EA:0D:EB:6B:8D:88:59:A8:32:E1:6F:55:5F:13:05:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2CF710BB769A97CEB229E780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 396586 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:10:bb:76:9a:97:ce:b2:29:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=c667da62-a20b-43a2-9311-89e67a3a33b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:89:b1:47:e7:33:f9:e7:0d:da:25:2c:f5: a6:85:59:19:eb:69:f2:eb:05:1c:fc:c3:23:59:9d: 17:36:58:20:eb:e9:f2:78:b5:f6:ad:cb:95:14:e9: 74:fe:e3:6c:f4:12:8e:88:dd:ed:d0:6b:f6:c5:8b: 18:da:58:68:2a:be:22:5f:96:17:a9:fe:1c:42:a9: 30:fa:a3:40:28:29:38:44:9c:9b:f6:a6:a9:90:23: 0d:a0:e6:0a:cb:f5:ce:53:22:7f:8e:d2:6e:11:6f: ee:c2:42:d4:84:05:20:46:ae:4e:88:6e:4f:b0:ac: 13:e5:c2:12:3f:9b:ee:5b:26:e0:3e:37:c9:72:94: a5:53:69:37:68:73:fa:d4:fc:f7:46:b2:c2:e8:5b: 3b:9f:ee:78:69:c9:42:a6:62:c4:05:ae:50:19:21: 33:fe:52:44:d3:73:54:02:49:17:43:f8:87:02:68: 90:e5:df:0a:58:27:1a:8b:ab:73:27:5e:94:6b:20: 80:b4:d2:20:91:05:cd:b3:4a:84:24:f2:6e:92:7a: 3a:6d:dc:19:68:29:77:17:80:d0:f1:25:e3:a0:27: 95:a5:ab:57:d4:35:86:2c:52:df:ca:f4:f0:ce:bd: bf:69:dd:a7:df:aa:0d:e7:dc:b1:3b:b7:61:7b:3e: 63:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BD:41:7B:EA:0D:EB:6B:8D:88:59:A8:32:E1:6F:55:5F:13:05:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:14:3f:7c:5d:a8:c0:23:e6:2a:05:10:9c:32:a9:4c:85:34: 60:bc:53:a1:f7:0c:27:36:89:1d:72:d5:34:bf:8d:99:7f:0d: a3:06:2a:fb:ab:a3:b0:de:17:ab:54:e7:ed:cc:bf:2e:58:bc: d7:ed:bb:f9:ca:80:c7:00:b9:7c:87:5d:dc:96:dd:19:6c:6b: 0b:d8:13:d8:05:e1:30:4b:1a:e1:63:15:c0:6d:51:3e:89:14: 35:57:38:41:2f:5e:1e:87:d1:cf:65:b4:b5:e2:05:6e:a3:20: 85:22:56:36:04:22:35:59:8c:c1:26:52:3c:de:28:ea:40:c4: 5d:56:c0:f7:7f:b5:2f:bd:b7:64:56:d6:3b:dc:80:10:df:9a: e4:b9:a5:d2:d0:4a:2e:4c:92:d4:48:c0:d8:1f:1f:fd:c3:ac: 97:a1:a4:08:a4:f2:78:6a:05:b2:10:a6:f9:a4:a0:64:ab:cf: a4:2a:af:27:bf:51:91:88:83:4a:9b:9c:fc:34:65:b4:89:89: 0f:e3:9a:b0:09:15:ea:87:0a:bf:37:40:3c:f9:0f:c3:37:1a: e6:a9:b4:9b:9d:8e:ee:c3:33:73:96:5d:90:29:52:70:dd:1a: 27:73:d0:4e:44:dd:cd:27:a2:64:cc:56:04:5f:67:94:83:ad: 1e:ed:13:74 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEss9xC7dpqXzrIp54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YzY2N2RhNjItYTIwYi00M2EyLTkzMTEtODllNjdhM2EzM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaiJsUfnM/nnDdolLPWmhVkZ62ny6wUc/MMj WZ0XNlgg6+nyeLX2rcuVFOl0/uNs9BKOiN3t0Gv2xYsY2lhoKr4iX5YXqf4cQqkw +qNAKCk4RJyb9qapkCMNoOYKy/XOUyJ/jtJuEW/uwkLUhAUgRq5OiG5PsKwT5cIS P5vuWybgPjfJcpSlU2k3aHP61Pz3RrLC6Fs7n+54aclCpmLEBa5QGSEz/lJE03NU AkkXQ/iHAmiQ5d8KWCcai6tzJ16UayCAtNIgkQXNs0qEJPJukno6bdwZaCl3F4DQ 8SXjoCeVpatX1DWGLFLfyvTwzr2/ad2n36oN59yxO7dhez5jLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKa9QXvqDetrjYhZqDLhb1VfEwVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWFmNmNjZmUtYWNlNS0z YzMxLTljMTctZTViMWM3YTJiZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBoFD98XajAI+YqBRCcMqlMhTRgvFOh9wwnNokd ctU0v42Zfw2jBir7q6Ow3herVOftzL8uWLzX7bv5yoDHALl8h13clt0ZbGsL2BPY BeEwSxrhYxXAbVE+iRQ1VzhBL14eh9HPZbS14gVuoyCFIlY2BCI1WYzBJlI83ijq QMRdVsD3f7UvvbdkVtY73IAQ35rkuaXS0EouTJLUSMDYHx/9w6yXoaQIpPJ4agWy EKb5pKBkq8+kKq8nv1GRiINKm5z8NGW0iYkP45qwCRXqhwq/N0A8+Q/DNxrmqbSb nY7uwzNzll2QKVJw3Ronc9BORN3NJ6JkzFYEX2eUg60e7RN0 -----END CERTIFICATE-----Generated at Wed Oct 29 07:00:48 2025 by rpki-client