$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22bafa1-d6d2-35e1-8af2-8aa40a8ebac0.roa File: a22bafa1-d6d2-35e1-8af2-8aa40a8ebac0.roa (raw, json) Hash identifier: bAEGFmt2E9ZdY5AOoe4SsmNlmuWefXRcNKOTGN8nz8Y= Subject key identifier: 63:E6:35:1A:F4:AA:95:B7:7E:5A:77:26:FF:5C:EA:4D:85:B8:A1:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC7301E01DE910413E110 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22bafa1-d6d2-35e1-8af2-8aa40a8ebac0.roa Signing time: Tue 26 Aug 2025 12:32:14 +0000 ROA not before: Tue 26 Aug 2025 12:32:14 +0000 ROA not after: Mon 24 Nov 2025 13:32:14 +0000 asID: 396573 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c7:30:1e:01:de:91:04:13:e1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:14 2025 GMT Not After : Nov 24 13:32:14 2025 GMT Subject: CN=22f5b805-7c84-4509-b033-ac330fc689cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:42:2a:20:d5:4e:a4:eb:5d:43:df:df:d4: ab:b7:7e:70:16:d0:4d:c2:a2:b9:66:27:a5:32:f4: f1:8e:44:31:c5:61:41:b2:c3:0b:ff:6e:74:b3:62: 63:02:5e:cb:b4:63:41:17:e4:19:ce:ee:96:76:7a: 01:14:31:d6:95:6a:d5:27:2e:c7:36:42:bd:10:64: 43:e6:c9:50:32:24:c9:14:ef:91:a9:aa:d6:16:cd: 7f:0d:f4:89:87:e7:85:76:98:f1:85:70:69:b4:32: 16:4d:bc:1d:e1:71:fe:04:66:35:fb:78:9c:89:9a: d2:4e:36:85:52:f1:49:d9:ca:3e:5a:1d:88:dd:f8: ac:46:62:65:ee:1a:a4:1b:36:60:d1:27:e1:c3:87: 92:ce:4f:18:bc:b8:30:bb:c6:77:b9:91:d0:6f:f8: 2a:01:76:19:b9:06:ff:60:0d:cb:5a:17:38:bd:11: 5e:77:b0:cd:b9:7f:d9:77:ad:3b:39:06:f2:a2:19: 7c:91:c2:23:27:4b:47:6b:77:96:0a:5a:f9:81:6f: 13:ef:42:79:fb:a4:4c:b7:e1:35:5f:e3:40:8c:51: 52:0f:8d:07:f5:d7:24:78:14:c3:b1:f0:39:fa:15: 95:88:5c:4f:42:c7:da:f3:78:9d:f7:2f:5d:cc:48: 0d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E6:35:1A:F4:AA:95:B7:7E:5A:77:26:FF:5C:EA:4D:85:B8:A1:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22bafa1-d6d2-35e1-8af2-8aa40a8ebac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:12:df:0e:77:6f:19:72:ec:4d:90:b3:39:e5:49:16:8f:f8: 18:97:1f:2a:a2:11:11:49:ea:dc:e8:55:78:ed:ab:99:d2:e7: 9c:14:a2:b5:27:d1:4c:1d:ec:4e:c3:ac:a9:30:cc:bf:2e:39: 63:a1:fa:d3:08:ed:a6:e8:bc:99:e4:8a:4a:d3:98:e1:74:48: 0f:a5:e3:c5:02:b5:6c:30:57:0b:45:10:d5:28:73:86:f6:68: 21:f5:84:66:45:58:c2:66:82:ae:cd:d5:1f:a4:18:f4:ea:ec: 70:43:b7:34:c0:60:2d:47:25:08:8a:f7:1f:98:d3:4c:e0:5c: 7c:28:f8:d4:6c:49:b8:f0:88:33:5e:16:b8:9e:f8:80:22:d3: cd:b8:24:19:36:41:53:7b:00:30:ff:5d:b3:a5:24:6e:a9:96: 08:f9:5b:30:83:ec:f3:ed:e9:2d:03:1c:71:e0:c8:d1:c4:0a: 85:e2:4b:b0:7a:86:69:ec:87:c7:98:3c:fe:90:eb:0d:d5:d3: 7a:4c:d7:c8:a0:ba:15:d4:29:62:74:a3:55:e8:ad:5e:c9:af: 27:21:11:06:22:74:98:8b:28:60:c9:50:65:1c:31:15:bd:0f: f5:b3:fb:5c:93:9f:6f:7f:92:67:f4:e5:60:0a:15:ed:e4:dc: 76:1c:b6:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DccwHgHekQQT4RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNFoXDTI1MTEyNDEzMzIxNFowLzEtMCsGA1UEAxMk MjJmNWI4MDUtN2M4NC00NTA5LWIwMzMtYWMzMzBmYzY4OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwpCKiDVTqTrXUPf39Srt35wFtBNwqK5Ziel MvTxjkQxxWFBssML/250s2JjAl7LtGNBF+QZzu6WdnoBFDHWlWrVJy7HNkK9EGRD 5slQMiTJFO+RqarWFs1/DfSJh+eFdpjxhXBptDIWTbwd4XH+BGY1+3iciZrSTjaF UvFJ2co+Wh2I3fisRmJl7hqkGzZg0Sfhw4eSzk8YvLgwu8Z3uZHQb/gqAXYZuQb/ YA3LWhc4vRFed7DNuX/Zd607OQbyohl8kcIjJ0tHa3eWClr5gW8T70J5+6RMt+E1 X+NAjFFSD40H9dckeBTDsfA5+hWViFxPQsfa83id9y9dzEgNSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGPmNRr0qpW3flp3Jv9c6k2FuKEZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIyYmFmYTEtZDZkMi0z NWUxLThhZjItOGFhNDBhOGViYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKAS3w53bxly7E2QsznlSRaP+BiXHyqiERFJ6tzoVXjtq5nS55wU orUn0Uwd7E7DrKkwzL8uOWOh+tMI7abovJnkikrTmOF0SA+l48UCtWwwVwtFENUo c4b2aCH1hGZFWMJmgq7N1R+kGPTq7HBDtzTAYC1HJQiK9x+Y00zgXHwo+NRsSbjw iDNeFrie+IAi0824JBk2QVN7ADD/XbOlJG6plgj5WzCD7PPt6S0DHHHgyNHECoXi S7B6hmnsh8eYPP6Q6w3V03pM18iguhXUKWJ0o1XorV7JrychEQYidJiLKGDJUGUc MRW9D/Wz+1yTn29/kmf05WAKFe3k3HYctiU= -----END CERTIFICATE-----Generated at Wed Sep 10 20:25:24 2025 by rpki-client