$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a94e1934-998f-3574-8046-fcc6f58804b3.roa File: a94e1934-998f-3574-8046-fcc6f58804b3.roa (raw, json) Hash identifier: QQpXsnPmheYoKrLBIK78jrkpr30/IrXjMbW7I3XwHg8= Subject key identifier: 44:94:A2:D8:83:1D:B8:0B:74:AE:76:18:BE:08:59:FF:24:79:C4:2E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686A40D4E5C3D635E3ADF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a94e1934-998f-3574-8046-fcc6f58804b3.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396584 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:a4:0d:4e:5c:3d:63:5e:3a:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=2ed9034f-448e-4a5f-82c7-78bd4a725a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:93:94:58:e9:c6:6c:35:d2:45:c4:a3:ce: 61:ed:5c:17:b1:a6:af:76:ab:6e:7e:fa:b4:a9:77: c3:d2:20:83:2e:ab:ac:f1:61:70:70:9d:d7:38:95: d7:57:66:05:c8:87:05:76:54:64:12:5f:d2:1a:cb: 25:f1:c3:31:48:c3:c5:36:e6:ab:03:60:c1:6b:a4: 2a:49:e9:ad:87:44:54:8c:ef:7c:16:be:0f:c7:3e: 6b:9c:f5:c9:bb:5a:81:9e:4e:dd:53:47:0f:28:65: 9b:da:b6:c2:b6:c4:86:0c:ae:2d:98:cf:de:6a:56: 5e:4d:1d:51:d0:21:ae:3e:6c:c6:d8:1e:63:cc:6c: a7:6f:b5:00:1b:64:1d:47:15:a4:62:e1:a5:f2:52: 48:20:e0:4f:13:8e:2a:1c:79:87:c0:ff:12:2f:67: 38:7b:2a:d0:01:f0:33:d3:f6:b9:eb:f0:89:ac:19: dc:e2:cc:ce:6b:bf:83:9c:cf:78:cf:61:8d:41:bf: 4b:6d:a4:9d:45:da:7b:66:b8:d2:e7:9e:c6:e7:41: f3:3e:82:2e:8d:9d:4d:96:19:52:fe:0a:b8:0a:30: 94:a7:4b:54:d9:f3:12:d1:48:e8:f7:0b:5f:63:1b: da:8f:54:86:37:61:b8:e1:68:71:ba:51:97:1d:cc: f5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:94:A2:D8:83:1D:B8:0B:74:AE:76:18:BE:08:59:FF:24:79:C4:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a94e1934-998f-3574-8046-fcc6f58804b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f6:f7:2e:ed:6c:e0:5f:9a:0b:71:52:8f:00:82:55:09:81: d2:86:1f:6f:7f:19:a3:1b:ee:75:e8:58:75:a1:f8:ce:a5:88: 0d:45:37:a3:69:22:49:6c:52:85:39:59:c7:94:fa:64:69:c7: 4a:de:df:ed:bf:47:44:f1:db:a3:64:c9:7b:10:05:c3:d5:12: 6a:f9:14:2e:10:6f:6a:51:b0:3b:0b:fb:0f:08:35:2d:5b:c8: b6:97:60:3d:bb:78:26:66:97:cf:54:d0:0c:46:e5:d1:91:ca: 9c:eb:99:e6:45:de:48:ca:21:95:29:60:ab:1c:52:83:52:7f: 79:a5:94:80:f8:1b:20:36:2f:42:f9:90:e8:60:a2:d7:aa:24: 0a:95:80:02:8d:ff:27:86:91:4b:0e:03:2b:06:7f:c2:8a:23: 2d:3c:67:47:2b:70:08:a7:cc:ad:20:9d:24:e7:b1:d2:8b:df: df:01:d2:8f:a9:85:cd:2f:46:9c:1a:35:26:fa:7c:a3:5e:64: 75:24:2a:4d:95:b0:c9:cd:8e:32:57:45:32:4a:8d:6b:a6:69: 67:74:4b:ff:6e:b9:9a:2d:1a:0a:e9:b8:9d:37:48:0d:27:86: c7:80:74:24:46:c7:63:44:0c:b3:35:8e:bc:5c:c3:cb:cc:c2: 69:80:f5:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hqQNTlw9Y1463wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk MmVkOTAzNGYtNDQ4ZS00YTVmLTgyYzctNzhiZDRhNzI1YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEaTlFjpxmw10kXEo85h7VwXsaavdqtufvq0 qXfD0iCDLqus8WFwcJ3XOJXXV2YFyIcFdlRkEl/SGssl8cMxSMPFNuarA2DBa6Qq Semth0RUjO98Fr4Pxz5rnPXJu1qBnk7dU0cPKGWb2rbCtsSGDK4tmM/ealZeTR1R 0CGuPmzG2B5jzGynb7UAG2QdRxWkYuGl8lJIIOBPE44qHHmHwP8SL2c4eyrQAfAz 0/a56/CJrBnc4szOa7+DnM94z2GNQb9LbaSdRdp7ZrjS557G50HzPoIujZ1NlhlS /gq4CjCUp0tU2fMS0Ujo9wtfYxvaj1SGN2G44WhxulGXHcz1RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFESUotiDHbgLdK52GL4IWf8kecQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk0ZTE5MzQtOTk4Zi0z NTc0LTgwNDYtZmNjNmY1ODgwNGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJb29y7tbOBfmgtxUo8AglUJgdKGH29/GaMb7nXoWHWh+M6liA1F N6NpIklsUoU5WceU+mRpx0re3+2/R0Tx26NkyXsQBcPVEmr5FC4Qb2pRsDsL+w8I NS1byLaXYD27eCZml89U0AxG5dGRypzrmeZF3kjKIZUpYKscUoNSf3mllID4GyA2 L0L5kOhgoteqJAqVgAKN/yeGkUsOAysGf8KKIy08Z0crcAinzK0gnSTnsdKL398B 0o+phc0vRpwaNSb6fKNeZHUkKk2VsMnNjjJXRTJKjWumaWd0S/9uuZotGgrpuJ03 SA0nhseAdCRGx2NEDLM1jrxcw8vMwmmA9TI= -----END CERTIFICATE-----Generated at Wed Sep 10 20:42:15 2025 by rpki-client