$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7888fd8-ef1a-3cba-97c5-81ab6eb00552.roa File: b7888fd8-ef1a-3cba-97c5-81ab6eb00552.roa (raw, json) Hash identifier: o+8OEYiF/qGToS+ZC7vpxx7auIsPx8epAlzb3OlOYms= Subject key identifier: 93:46:5E:32:44:FB:01:B3:50:CA:66:37:EA:9C:5E:9B:0C:51:F2:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC29FEBE279FD09789300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7888fd8-ef1a-3cba-97c5-81ab6eb00552.roa Signing time: Tue 26 Aug 2025 12:32:11 +0000 ROA not before: Tue 26 Aug 2025 12:32:11 +0000 ROA not after: Mon 24 Nov 2025 13:32:11 +0000 asID: 396565 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c2:9f:eb:e2:79:fd:09:78:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:11 2025 GMT Not After : Nov 24 13:32:11 2025 GMT Subject: CN=102aeb0c-52e6-4cb8-a941-97c4ea9d90bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:a7:df:10:1b:5e:47:4f:ec:0c:80:e5:a8: 39:0e:2d:5e:c0:55:79:c5:87:2c:08:9a:a5:48:71: 26:58:af:34:a8:e4:95:f5:fa:d9:3d:a8:d0:aa:e6: 15:ee:cc:fc:8f:8b:c7:23:7b:74:93:06:25:9f:ad: e9:89:df:75:06:21:87:15:cc:d8:c9:ac:e9:e3:ac: 9c:20:01:11:b3:51:0d:38:49:4e:8e:d3:c2:d3:bc: 26:2a:4d:18:61:3a:de:bc:40:da:e2:08:ef:b7:87: 3d:47:40:14:39:d8:b9:b3:f1:9d:d3:33:6d:ac:23: 32:94:13:40:be:dd:3c:8b:cc:56:ce:63:e7:5f:92: 8f:09:89:73:36:9e:db:8b:44:c2:4d:dd:7d:1b:be: 06:b2:96:dd:77:24:14:1d:ab:b9:41:04:f5:41:ac: 23:40:d4:0d:b9:6d:ba:f0:6e:3a:01:b1:7a:7e:41: 8b:7d:e5:d3:48:24:90:7c:ff:f3:8c:ef:b9:b9:79: b2:81:e0:8a:f4:2b:0b:f2:98:b9:5f:d2:ef:63:80: 9f:c5:b2:87:8a:a5:95:e1:81:6d:c1:8d:21:23:66: 63:08:1f:32:44:74:35:da:e7:4c:90:2c:08:4a:f9: 75:d7:6e:ec:72:7c:79:4e:13:c6:2f:86:08:4c:e2: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:46:5E:32:44:FB:01:B3:50:CA:66:37:EA:9C:5E:9B:0C:51:F2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7888fd8-ef1a-3cba-97c5-81ab6eb00552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b8:bd:8c:bb:bc:49:70:7b:71:4d:f9:db:8f:cc:ee:2d:68: fa:d8:8f:59:d1:22:20:2f:00:8f:43:a6:12:d2:6d:ea:89:b5: 33:c3:f4:b6:1b:05:d3:b7:90:62:e4:85:1e:c7:5e:c1:02:04: db:0d:3d:82:c8:be:50:e4:86:53:b3:b9:bf:39:a4:d9:5e:66: 1a:00:02:41:07:fd:cc:5a:93:18:9e:a7:77:5a:3a:51:91:c8: 8d:8b:27:cb:43:8a:28:d1:e8:0a:b9:72:8d:f0:5e:cc:a9:c1: ab:71:9c:5d:07:ba:94:e3:05:2a:71:0b:20:fa:f8:a3:44:ca: 78:b2:d5:6e:74:a7:b7:43:53:06:56:8e:78:9f:c2:ef:19:76: 26:d8:0b:f4:0d:16:80:77:ca:6f:08:d2:3f:ce:d2:f6:ea:0f: 2b:0a:fb:bb:5d:6c:ed:d4:85:2d:8e:66:ce:34:c5:13:bb:ef: b2:ec:12:b5:55:c1:e2:18:33:2a:89:8e:d3:bf:b8:e2:2b:88: 0a:54:76:50:7d:22:f1:58:8b:25:17:e4:25:c9:f2:1e:7f:86: f5:12:1c:ba:a8:9e:27:d4:de:a1:14:63:cb:12:79:97:63:1f: dc:50:ed:cc:63:e8:b2:2d:a2:8b:24:c6:e8:0b:62:18:4a:f9: c4:2f:a8:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcKf6+J5/Ql4kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMVoXDTI1MTEyNDEzMzIxMVowLzEtMCsGA1UEAxMk MTAyYWViMGMtNTJlNi00Y2I4LWE5NDEtOTdjNGVhOWQ5MGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgWn3xAbXkdP7AyA5ag5Di1ewFV5xYcsCJql SHEmWK80qOSV9frZPajQquYV7sz8j4vHI3t0kwYln63pid91BiGHFczYyazp46yc IAERs1ENOElOjtPC07wmKk0YYTrevEDa4gjvt4c9R0AUOdi5s/Gd0zNtrCMylBNA vt08i8xWzmPnX5KPCYlzNp7bi0TCTd19G74GspbddyQUHau5QQT1QawjQNQNuW26 8G46AbF6fkGLfeXTSCSQfP/zjO+5uXmygeCK9CsL8pi5X9LvY4CfxbKHiqWV4YFt wY0hI2ZjCB8yRHQ12udMkCwISvl1127scnx5ThPGL4YITOK5qQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJNGXjJE+wGzUMpmN+qcXpsMUfIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjc4ODhmZDgtZWYxYS0z Y2JhLTk3YzUtODFhYjZlYjAwNTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABa4vYy7vElwe3FN+duPzO4taPrYj1nRIiAvAI9DphLSbeqJtTPD 9LYbBdO3kGLkhR7HXsECBNsNPYLIvlDkhlOzub85pNleZhoAAkEH/cxakxiep3da OlGRyI2LJ8tDiijR6Aq5co3wXsypwatxnF0HupTjBSpxCyD6+KNEyniy1W50p7dD UwZWjnifwu8ZdibYC/QNFoB3ym8I0j/O0vbqDysK+7tdbO3UhS2OZs40xRO777Ls ErVVweIYMyqJjtO/uOIriApUdlB9IvFYiyUX5CXJ8h5/hvUSHLqonifU3qEUY8sS eZdjH9xQ7cxj6LItooskxugLYhhK+cQvqOg= -----END CERTIFICATE-----Generated at Wed Sep 10 17:53:33 2025 by rpki-client