$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bed3844a-9eea-3f8f-8413-74a8b0a932e8.roa File: bed3844a-9eea-3f8f-8413-74a8b0a932e8.roa (raw, json) Hash identifier: Ah8FZlAjezKMNvn/FMilvJhU2G9oaMStD86ZY/JpPLw= Subject key identifier: 56:8F:AE:5C:71:9A:57:2F:F9:5C:27:FE:EF:7D:26:A5:D5:BD:60:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC941C2A004508FECAF40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bed3844a-9eea-3f8f-8413-74a8b0a932e8.roa Signing time: Tue 26 Aug 2025 12:32:15 +0000 ROA not before: Tue 26 Aug 2025 12:32:15 +0000 ROA not after: Mon 24 Nov 2025 13:32:15 +0000 asID: 396542 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c9:41:c2:a0:04:50:8f:ec:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:15 2025 GMT Not After : Nov 24 13:32:15 2025 GMT Subject: CN=7febfeab-accd-4ebe-9a1a-2fce5bd7f679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d3:4d:db:32:a7:a1:42:57:ec:ec:64:d7:bb: 1e:f1:73:28:eb:b9:a0:2f:21:8a:88:2d:66:e9:cf: 91:69:27:5c:ae:2c:35:29:cf:2d:fc:09:0c:e2:98: a8:d5:f1:2c:ad:7d:f8:c5:19:08:47:f9:9d:38:72: 3c:85:94:f3:63:5b:6d:1a:3a:7d:0b:03:9a:e0:77: ec:60:dc:e7:ea:82:52:cf:53:af:c1:80:70:9e:0e: cf:cb:68:09:4a:f7:8b:0e:ce:88:2f:f1:5b:c4:59: 1b:c5:92:16:f4:19:d7:0d:9a:4e:37:3f:d7:5b:ab: d0:f4:8f:3b:77:4b:24:f9:4b:31:18:7e:e0:20:66: 31:09:28:42:40:da:9d:38:f2:6c:79:51:88:7d:87: c6:00:0a:65:ae:a6:68:1a:68:74:39:a5:31:06:56: 31:dc:59:05:76:66:67:d4:c4:23:f3:73:db:71:88: 6d:8a:45:f0:a9:25:ab:71:7e:99:f8:e1:84:00:44: 87:1e:e5:63:a6:3e:d0:19:79:5d:00:03:25:b8:02: 96:05:c3:df:95:7f:01:c0:48:94:41:a0:99:00:c3: 22:fc:ad:c1:d8:9e:b7:9d:4a:80:34:66:76:fc:1a: f9:e3:03:20:ee:65:8e:45:61:78:b7:c9:69:27:9e: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8F:AE:5C:71:9A:57:2F:F9:5C:27:FE:EF:7D:26:A5:D5:BD:60:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bed3844a-9eea-3f8f-8413-74a8b0a932e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:ba:04:a1:0d:f7:49:b1:91:14:40:a6:8e:fe:da:29:bb:90: d7:53:1d:86:22:aa:a4:b3:3b:93:b3:55:fa:3a:f8:74:e3:10: 86:86:86:3d:e4:72:1f:df:16:9a:9f:4e:e8:d8:6c:06:65:63: 91:2e:32:b7:92:34:29:4b:d0:ad:d9:a1:df:32:45:96:cb:0a: 0b:2e:34:24:bb:3c:30:86:80:8b:a4:56:9f:dc:8a:34:23:77: 9f:13:5d:85:7a:36:0b:b0:94:73:77:bd:73:61:90:13:61:47: e2:33:70:1a:04:c8:34:6e:5e:c8:3d:83:f5:8e:05:92:18:29: 47:66:a4:62:ab:61:90:cb:f6:05:35:48:6d:91:26:c5:ba:13: b2:51:95:50:48:4f:00:4f:8d:df:64:dd:26:36:0d:2f:4b:33: 5b:ad:da:9c:ea:4e:26:f3:08:fd:d1:0a:af:e7:12:da:d2:d2: 9f:f1:2f:74:f7:c9:97:e2:e6:15:b5:d3:31:26:87:b5:49:7d: 56:d4:65:bc:82:ac:4a:16:52:b4:67:d9:ea:e9:c9:bb:74:04: 1d:c3:a7:eb:4f:83:e6:9f:6d:89:cc:49:11:31:8a:22:c4:4d: 3c:4e:36:cc:5b:f5:ea:b2:bd:27:9b:67:99:90:61:59:d1:f6: 54:a9:1a:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DclBwqAEUI/sr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNVoXDTI1MTEyNDEzMzIxNVowLzEtMCsGA1UEAxMk N2ZlYmZlYWItYWNjZC00ZWJlLTlhMWEtMmZjZTViZDdmNjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdNN2zKnoUJX7Oxk17se8XMo67mgLyGKiC1m 6c+RaSdcriw1Kc8t/AkM4pio1fEsrX34xRkIR/mdOHI8hZTzY1ttGjp9CwOa4Hfs YNzn6oJSz1OvwYBwng7Py2gJSveLDs6IL/FbxFkbxZIW9BnXDZpONz/XW6vQ9I87 d0sk+UsxGH7gIGYxCShCQNqdOPJseVGIfYfGAAplrqZoGmh0OaUxBlYx3FkFdmZn 1MQj83PbcYhtikXwqSWrcX6Z+OGEAESHHuVjpj7QGXldAAMluAKWBcPflX8BwEiU QaCZAMMi/K3B2J63nUqANGZ2/Br54wMg7mWORWF4t8lpJ55uNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFaPrlxxmlcv+Vwn/u99JqXVvWD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmVkMzg0NGEtOWVlYS0z ZjhmLTg0MTMtNzRhOGIwYTkzMmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK66BKEN90mxkRRApo7+2im7kNdTHYYiqqSzO5OzVfo6+HTjEIaG hj3kch/fFpqfTujYbAZlY5EuMreSNClL0K3Zod8yRZbLCgsuNCS7PDCGgIukVp/c ijQjd58TXYV6NguwlHN3vXNhkBNhR+IzcBoEyDRuXsg9g/WOBZIYKUdmpGKrYZDL 9gU1SG2RJsW6E7JRlVBITwBPjd9k3SY2DS9LM1ut2pzqTibzCP3RCq/nEtrS0p/x L3T3yZfi5hW10zEmh7VJfVbUZbyCrEoWUrRn2erpybt0BB3Dp+tPg+afbYnMSREx iiLETTxONsxb9eqyvSebZ5mQYVnR9lSpGr0= -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:39 2025 by rpki-client