$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a66495ee-a684-3ccf-ae50-85cbc49f2e1c.roa File: a66495ee-a684-3ccf-ae50-85cbc49f2e1c.roa (raw, json) Hash identifier: 1J0+kLDQaSWG4E1BctYvruA/Mb8V09a8AW6GeNTGrg4= Subject key identifier: A8:DF:50:AC:C6:24:07:D3:1D:66:5F:38:30:8A:53:92:6B:17:6D:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C296F7994BB9423D36900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a66495ee-a684-3ccf-ae50-85cbc49f2e1c.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 211369 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:29:6f:79:94:bb:94:23:d3:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=19122d82-0080-42a6-ad21-380255de709c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:db:f1:ff:a0:e0:ed:0e:0b:f1:e4:12:d0:a5: 81:3f:fe:c0:40:f7:68:cc:28:f7:a1:00:b4:b1:4f: 4b:b8:f3:d3:de:f7:18:50:dd:b7:cf:84:7c:bf:4e: 6e:3f:bf:9a:6f:7d:95:b4:8f:59:fb:1b:61:88:52: a3:3a:3b:18:23:3a:6e:32:b5:31:56:68:83:89:85: 68:82:52:f9:6e:d9:15:a9:a4:71:e9:54:85:95:d9: 50:c6:9c:14:d2:d6:aa:85:33:bd:63:aa:7b:42:6c: 45:a2:99:c2:e5:39:1f:59:0f:85:d9:53:57:ad:b6: 90:a7:d4:c3:44:98:48:07:81:2d:2f:a0:b9:a5:e0: 28:ef:d4:2f:9e:d1:90:cd:b1:d4:bd:64:1f:5b:55: 91:cc:83:fb:67:83:70:ce:6b:02:bd:3a:af:fa:dc: 7d:60:8b:14:4f:02:97:10:25:90:7c:c9:61:f9:e7: 8a:92:10:6d:b0:df:8e:85:36:01:24:47:04:1b:9b: 32:a5:0a:5c:c9:2b:2e:30:95:79:d5:8d:fb:25:40: 0f:22:fe:9e:8a:ef:b5:50:5a:4a:8c:30:d0:f8:ae: 5a:ff:da:84:51:05:b9:ac:ac:06:e0:ee:d3:e7:7f: c4:e2:8a:38:ff:96:56:1f:57:9e:81:e3:3a:b1:6a: ea:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DF:50:AC:C6:24:07:D3:1D:66:5F:38:30:8A:53:92:6B:17:6D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a66495ee-a684-3ccf-ae50-85cbc49f2e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:33:47:39:78:c7:e6:4d:a8:cf:47:22:5a:bb:7f:66:39:04: 84:43:b7:35:45:28:4a:15:80:6f:98:e6:34:a0:c0:7e:40:42: 70:e1:f2:0e:11:cc:fa:2e:14:9a:c1:8c:23:73:57:de:82:ce: 13:7f:be:f2:fa:5b:ad:e3:05:d5:6a:f7:a0:91:65:c6:06:fc: 7e:4a:03:b9:57:da:58:23:4b:af:07:e8:f4:ff:1e:8e:8c:24: b5:a1:24:83:09:b9:71:83:bf:e8:ce:87:9e:52:24:15:92:9c: 30:07:7e:3f:de:7d:0e:81:42:d6:5d:f6:db:a4:a7:25:dc:df: af:e9:bf:38:89:d4:12:06:88:e3:f7:30:23:7f:19:59:8c:ee: 73:76:47:9c:55:8e:71:87:5f:7f:01:86:c6:60:67:f3:da:6f: 45:35:92:90:c6:49:13:35:99:68:34:73:25:83:4a:7d:45:11: 1b:92:84:70:21:a9:5e:23:eb:65:25:9f:62:7c:72:58:05:68: 4d:a1:2f:eb:94:5f:67:b6:56:50:c1:53:05:a1:d4:37:01:3b: e0:46:b6:52:37:d8:d1:3d:b4:ce:d1:65:e3:bd:a7:fa:f3:ab: f8:25:ef:ba:8a:04:26:89:c9:ab:04:34:fb:de:87:23:5d:5f: d4:51:e8:2d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATClveZS7lCPTaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MTkxMjJkODItMDA4MC00MmE2LWFkMjEtMzgwMjU1ZGU3MDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNvx/6Dg7Q4L8eQS0KWBP/7AQPdozCj3oQC0 sU9LuPPT3vcYUN23z4R8v05uP7+ab32VtI9Z+xthiFKjOjsYIzpuMrUxVmiDiYVo glL5btkVqaRx6VSFldlQxpwU0taqhTO9Y6p7QmxFopnC5TkfWQ+F2VNXrbaQp9TD RJhIB4EtL6C5peAo79QvntGQzbHUvWQfW1WRzIP7Z4NwzmsCvTqv+tx9YIsUTwKX ECWQfMlh+eeKkhBtsN+OhTYBJEcEG5sypQpcySsuMJV51Y37JUAPIv6eiu+1UFpK jDDQ+K5a/9qEUQW5rKwG4O7T53/E4oo4/5ZWH1eegeM6sWrq9QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKjfUKzGJAfTHWZfODCKU5JrF22fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTY2NDk1ZWUtYTY4NC0z Y2NmLWFlNTAtODVjYmM0OWYyZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCuM0c5eMfmTajPRyJau39mOQSEQ7c1RShKFYBv mOY0oMB+QEJw4fIOEcz6LhSawYwjc1fegs4Tf77y+lut4wXVavegkWXGBvx+SgO5 V9pYI0uvB+j0/x6OjCS1oSSDCblxg7/ozoeeUiQVkpwwB34/3n0OgULWXfbbpKcl 3N+v6b84idQSBojj9zAjfxlZjO5zdkecVY5xh19/AYbGYGfz2m9FNZKQxkkTNZlo NHMlg0p9RREbkoRwIaleI+tlJZ9ifHJYBWhNoS/rlF9ntlZQwVMFodQ3ATvgRrZS N9jRPbTO0WXjvaf686v4Je+6igQmicmrBDT73ocjXV/UUegt -----END CERTIFICATE-----Generated at Wed Sep 10 20:41:40 2025 by rpki-client