$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeff4f7c-9410-3a7a-abff-2149f38dd24a.roa File: aeff4f7c-9410-3a7a-abff-2149f38dd24a.roa (raw, json) Hash identifier: +b3wCNZ75vFoUvf1v0rSf7nuoGuJX/sgu5IFVf/gsBQ= Subject key identifier: 85:5C:9A:0E:C0:34:F6:84:6F:59:59:8C:AD:8C:60:AF:88:AE:63:3F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B1AD1BB48B1AC0D95FD2FC000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeff4f7c-9410-3a7a-abff-2149f38dd24a.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 396606 IP address blocks: 2001:503:39c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:bb:48:b1:ac:0d:95:fd:2f:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=2175df59-26d2-4fff-acc6-d03e9b8a833c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:c6:f1:b9:a8:bc:8e:66:25:d5:e0:10:27: 7b:c0:ca:86:ee:08:ad:6a:6b:d5:c8:41:83:f2:91: 81:91:e1:dc:9c:8e:66:e9:02:50:8b:f1:08:6c:dd: 43:07:e2:41:ba:3b:5b:8e:82:ca:7d:30:5b:b7:6d: 57:d2:0a:53:18:02:00:79:c8:e7:5c:5f:d2:c2:c3: 08:3a:ff:7f:9a:b8:57:db:67:4d:7f:5b:0e:bb:73: 0f:7c:b3:97:6b:9c:7d:27:a2:a9:8d:c3:da:62:aa: 1d:14:f7:3c:70:5f:02:77:d4:aa:07:8b:b5:7c:bd: ed:8c:73:ae:29:3a:ea:ef:ab:e4:0e:a6:88:23:66: ea:e2:91:13:0c:96:28:d8:02:63:8d:75:a7:d5:7e: 59:a9:8f:d7:08:cc:35:0f:81:80:1f:63:e2:44:63: 43:17:cd:74:50:a8:d9:b7:0b:c7:a1:ed:00:0f:91: 40:59:b7:cd:2d:3f:89:31:24:79:f0:95:e6:d3:19: 49:35:fa:6e:9a:4a:42:58:56:97:e7:42:58:ce:d9: 43:0b:03:0f:17:ad:24:f6:4d:17:b9:31:d2:9e:72: 4f:9c:1e:cd:79:37:f8:63:3a:26:37:0b:00:34:9f: 1f:14:e0:0e:41:ca:fb:e6:f2:94:b6:ef:25:d0:ff: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5C:9A:0E:C0:34:F6:84:6F:59:59:8C:AD:8C:60:AF:88:AE:63:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aeff4f7c-9410-3a7a-abff-2149f38dd24a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a7:b3:f7:a4:5b:f4:d0:06:e2:fe:70:19:03:a8:1e:7b:42: 1e:95:38:3e:d7:c0:dc:55:c4:2d:3d:b2:f2:e3:2e:67:5a:10: 47:dc:35:d8:2b:f2:bf:9c:47:4f:3f:65:82:bc:dd:6c:ff:3c: b2:0c:29:57:00:b3:8a:8a:83:7c:42:83:a6:82:3e:11:2c:51: 36:5c:aa:33:aa:e4:32:fc:2a:4a:38:bb:cc:8e:6d:b4:e7:68: 6c:2a:a3:c1:c7:3c:2f:11:70:2c:8a:00:98:2f:af:eb:93:44: ef:30:8d:35:b1:91:21:d3:83:c6:77:69:fa:33:4f:e8:51:93: 0f:f1:3a:20:d5:a2:da:f7:f9:f7:49:e8:7f:84:c1:7e:ca:bb: fa:df:c7:72:b9:ed:fc:e8:3f:31:74:ed:82:17:2b:01:82:6f: 34:30:00:27:c3:1d:84:25:44:3e:6b:ae:63:ca:61:08:a9:20: 50:4c:08:b8:68:a2:57:9e:c0:19:d1:52:6d:64:76:4c:e1:50: 9a:fb:42:9b:78:1b:a7:cb:cb:b8:ef:4a:6b:c3:2c:ee:bd:c4: 32:a7:3a:3f:7c:92:4c:e6:2d:01:fd:75:3d:0b:15:db:3b:07: 51:e4:45:d1:60:a9:5b:3b:23:6e:a6:14:d5:51:2c:96:b9:01: a2:39:9d:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0btIsawNlf0vwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MjE3NWRmNTktMjZkMi00ZmZmLWFjYzYtZDAzZTliOGE4MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsnG8bmovI5mJdXgECd7wMqG7gitamvVyEGD 8pGBkeHcnI5m6QJQi/EIbN1DB+JBujtbjoLKfTBbt21X0gpTGAIAecjnXF/SwsMI Ov9/mrhX22dNf1sOu3MPfLOXa5x9J6KpjcPaYqodFPc8cF8Cd9SqB4u1fL3tjHOu KTrq76vkDqaII2bq4pETDJYo2AJjjXWn1X5ZqY/XCMw1D4GAH2PiRGNDF810UKjZ twvHoe0AD5FAWbfNLT+JMSR58JXm0xlJNfpumkpCWFaX50JYztlDCwMPF60k9k0X uTHSnnJPnB7NeTf4YzomNwsANJ8fFOAOQcr75vKUtu8l0P8+dQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVcmg7ANPaEb1lZjK2MYK+IrmM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWVmZjRmN2MtOTQxMC0z YTdhLWFiZmYtMjE0OWYzOGRkMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEWns/ekW/TQBuL+cBkDqB57Qh6VOD7XwNxVxC09svLjLmdaEEfc Ndgr8r+cR08/ZYK83Wz/PLIMKVcAs4qKg3xCg6aCPhEsUTZcqjOq5DL8Kko4u8yO bbTnaGwqo8HHPC8RcCyKAJgvr+uTRO8wjTWxkSHTg8Z3afozT+hRkw/xOiDVotr3 +fdJ6H+EwX7Ku/rfx3K57fzoPzF07YIXKwGCbzQwACfDHYQlRD5rrmPKYQipIFBM CLhooleewBnRUm1kdkzhUJr7Qpt4G6fLy7jvSmvDLO69xDKnOj98kkzmLQH9dT0L Fds7B1HkRdFgqVs7I26mFNVRLJa5AaI5ndw= -----END CERTIFICATE-----Generated at Wed Sep 10 17:49:42 2025 by rpki-client