$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8602d12-994b-32c0-a3c1-6f2976b2d89d.roa File: b8602d12-994b-32c0-a3c1-6f2976b2d89d.roa (raw, json) Hash identifier: /mU7EABbTCWmp3J4j7Rga33Jmw6SyM3yq0nnFD50PJY= Subject key identifier: 00:CA:27:5E:75:6E:20:A0:E5:DC:B5:15:2D:1D:C4:6A:AA:C2:15:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686964DF8814B9EAF370930 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8602d12-994b-32c0-a3c1-6f2976b2d89d.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396571 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:96:4d:f8:81:4b:9e:af:37:09:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=ff87560d-30d0-46f4-b574-834b313d5e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:41:f0:86:af:35:3d:ee:d9:7a:19:c3:58:47: 04:a4:52:c2:93:7f:fa:03:b5:f7:af:12:e8:71:23: 38:84:d9:06:e7:7c:54:55:3a:ab:86:e3:fa:2c:f0: 88:5d:a2:f9:84:ae:c8:30:d6:f2:a7:41:6e:23:a9: ae:07:2d:04:64:9e:f2:15:48:ad:5a:e6:bf:f3:fe: 90:91:ea:20:b1:f8:9d:57:bf:e2:f4:9e:88:f0:4c: d0:51:78:12:94:66:e4:d9:9a:02:cf:88:fb:43:08: 23:b1:d8:8e:4f:73:af:f3:6f:26:07:42:d1:45:1c: d3:57:71:ff:a4:e1:cc:32:38:9b:9e:1c:33:11:ea: 66:29:cc:6a:5e:0a:77:06:83:4d:b1:48:5c:cd:c5: 2e:a2:c7:8f:7b:3c:ce:44:12:29:87:df:18:ef:24: 0c:a3:e9:37:04:66:c3:37:2e:ef:e6:a4:6b:2b:1f: fe:0f:02:67:85:4e:5c:c0:70:d2:1b:fc:8a:d9:57: 96:99:75:ca:88:72:5c:ab:22:54:d8:01:15:86:ff: 72:65:cd:09:94:8c:2c:1f:65:0f:a1:27:8d:ba:80: 03:c9:6a:ea:b9:c0:f9:d1:a6:71:19:ec:10:9a:b7: 03:bb:07:33:27:f7:cd:68:e0:d8:30:87:e2:51:6d: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CA:27:5E:75:6E:20:A0:E5:DC:B5:15:2D:1D:C4:6A:AA:C2:15:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8602d12-994b-32c0-a3c1-6f2976b2d89d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:39:cd:c2:80:61:c8:9b:0e:63:9a:94:94:51:df:a9:a5:97: d9:82:94:50:1d:51:36:d2:3d:2a:7f:e3:a7:94:fe:77:82:bd: 96:e4:36:35:0a:fd:c3:1c:60:01:e4:da:0a:cb:85:9d:7a:39: 99:24:b5:6e:0f:ad:37:01:62:ff:93:5f:99:24:0f:12:93:5d: c5:b1:dc:e6:95:3c:d2:e9:09:49:f2:c9:22:d1:c9:92:e0:c7: 5e:92:d3:a5:19:c8:df:8f:fd:6c:e8:0c:ea:05:ae:57:b1:21: 36:20:c6:19:91:57:da:32:db:38:65:1a:9e:35:1b:b8:2a:fc: b5:7d:80:68:da:97:aa:58:af:e0:01:0f:c5:80:9f:dd:60:5a: 73:d0:da:00:26:9c:2d:a7:1f:1c:a8:bb:b6:ef:ef:90:20:23: 28:d6:3d:06:13:e6:41:06:c2:32:b1:b7:43:b4:09:76:85:88: c0:0a:f2:6e:36:c6:21:fe:f0:7f:11:81:c6:de:eb:78:86:43: ec:4f:fa:ac:25:54:db:95:b3:7b:15:62:ae:03:e0:54:f1:89: 85:7c:3e:3b:b0:76:85:81:15:08:61:2a:e6:f6:ee:0c:16:96: 1b:52:18:e2:9b:64:77:05:ef:cd:73:74:58:f7:36:03:d6:74: 5f:14:4e:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hpZN+IFLnq83CTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ZmY4NzU2MGQtMzBkMC00NmY0LWI1NzQtODM0YjMxM2Q1ZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkHwhq81Pe7ZehnDWEcEpFLCk3/6A7X3rxLo cSM4hNkG53xUVTqrhuP6LPCIXaL5hK7IMNbyp0FuI6muBy0EZJ7yFUitWua/8/6Q keogsfidV7/i9J6I8EzQUXgSlGbk2ZoCz4j7QwgjsdiOT3Ov828mB0LRRRzTV3H/ pOHMMjibnhwzEepmKcxqXgp3BoNNsUhczcUuosePezzORBIph98Y7yQMo+k3BGbD Ny7v5qRrKx/+DwJnhU5cwHDSG/yK2VeWmXXKiHJcqyJU2AEVhv9yZc0JlIwsH2UP oSeNuoADyWrqucD50aZxGewQmrcDuwczJ/fNaODYMIfiUW0U6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFADKJ151biCg5dy1FS0dxGqqwhVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjg2MDJkMTItOTk0Yi0z MmMwLWEzYzEtNmYyOTc2YjJkODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB05zcKAYcibDmOalJRR36mll9mClFAdUTbSPSp/46eU/neCvZbk NjUK/cMcYAHk2grLhZ16OZkktW4PrTcBYv+TX5kkDxKTXcWx3OaVPNLpCUnyySLR yZLgx16S06UZyN+P/WzoDOoFrlexITYgxhmRV9oy2zhlGp41G7gq/LV9gGjal6pY r+ABD8WAn91gWnPQ2gAmnC2nHxyou7bv75AgIyjWPQYT5kEGwjKxt0O0CXaFiMAK 8m42xiH+8H8Rgcbe63iGQ+xP+qwlVNuVs3sVYq4D4FTxiYV8PjuwdoWBFQhhKub2 7gwWlhtSGOKbZHcF781zdFj3NgPWdF8UTqQ= -----END CERTIFICATE-----Generated at Wed Oct 29 07:08:32 2025 by rpki-client