$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c089cf17-9ebc-3577-84d5-add47f4fe20c.roa File: c089cf17-9ebc-3577-84d5-add47f4fe20c.roa (raw, json) Hash identifier: xmpumnSBB11Flda9tTmbZphr3ypfA6JTlEo1/m9lWVY= Subject key identifier: 01:9F:98:06:14:80:64:5A:A0:01:47:83:7D:E6:E1:01:22:18:CB:7E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF2569725B19A65292E7C6C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c089cf17-9ebc-3577-84d5-add47f4fe20c.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 36630 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:97:25:b1:9a:65:29:2e:7c:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=341d6bf8-5d5e-4d72-b761-ea8ea93db6d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ca:65:0b:03:38:8c:83:5e:13:a5:ae:16:63: 66:22:47:cd:b0:69:bd:0b:76:43:ea:ff:7b:79:bb: 41:b8:6f:cb:55:a9:8a:26:d0:13:9f:fc:f5:a4:33: 95:d2:c3:fc:2c:e1:0f:2c:f7:cd:fb:23:33:45:bc: ae:19:a1:47:09:59:6a:94:c2:9d:f5:e5:1e:81:17: 9e:d4:bf:93:75:e2:0c:b8:b6:22:86:db:14:54:7e: 0f:09:34:e1:20:25:94:cf:60:57:fb:c4:91:4a:9a: de:8d:55:8a:36:93:5f:9e:6d:53:20:98:16:ad:af: 42:4f:50:70:28:8c:22:a8:86:72:0d:c3:9a:3e:89: 00:bf:4a:f5:0f:2d:f6:c1:8a:77:98:59:8b:8a:65: 8c:fa:ce:cd:55:da:2f:50:99:69:34:99:06:10:f8: 5f:7b:98:66:dc:fc:47:1b:3f:0e:29:db:02:62:72: 4c:7b:76:86:98:26:a7:4d:29:27:b6:42:6f:44:a9: a7:f8:1b:31:70:96:95:c2:47:2c:8d:55:ff:e2:9e: 30:f8:01:b9:4b:48:1f:14:5f:a9:00:8f:48:56:fc: 1b:5c:4a:11:65:a2:0b:65:14:6c:1c:03:8e:31:99: cb:a1:64:ac:16:67:bc:80:32:24:58:a5:56:b4:af: c2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9F:98:06:14:80:64:5A:A0:01:47:83:7D:E6:E1:01:22:18:CB:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c089cf17-9ebc-3577-84d5-add47f4fe20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:db:e9:9b:c7:5e:24:a8:ce:d0:3e:de:0b:19:79:e7:ff:cb: 2e:07:cb:64:a9:a6:30:75:2e:2c:b6:c1:ea:29:25:6e:ec:18: 07:42:fa:16:df:29:90:3b:9f:a7:72:c9:25:13:a3:6c:74:0e: 65:87:fd:a6:88:5f:6d:d1:2f:12:28:49:f6:67:2c:a2:1c:59: 18:b4:86:87:74:ec:ac:93:a4:74:f1:7b:5e:f2:c7:57:99:e7: eb:33:1a:40:40:3e:8b:8c:d3:b6:36:5a:fc:6f:9b:67:3c:6c: 09:5a:14:b1:3b:b7:61:94:40:29:ab:2d:0e:77:56:53:9c:bf: ab:6e:8f:b1:83:3a:2e:e1:15:e0:c2:f3:18:f0:ed:71:11:df: 1a:ec:6b:c6:a9:ee:5c:b5:ea:3f:00:89:e3:b0:09:4d:e1:1d: a1:40:42:4a:24:d3:6b:fc:e8:f1:d9:ba:2f:a4:43:7d:97:de: 98:28:33:f5:ed:da:2d:a8:e5:21:d7:a0:89:10:0c:ef:6a:f8: 3a:27:36:68:05:07:b1:a9:e7:13:49:f5:a9:ce:ef:36:26:cc: 6d:29:74:a5:fd:48:d3:d4:d1:84:aa:e9:31:72:30:0c:fe:ad: 43:9a:8a:e0:c5:e3:62:f4:d4:bd:f4:f4:f9:15:11:7d:78:18: 77:20:a6:96 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpclsZplKS58bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzQxZDZiZjgtNWQ1ZS00ZDcyLWI3NjEtZWE4ZWE5M2RiNmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MplCwM4jINeE6WuFmNmIkfNsGm9C3ZD6v97 ebtBuG/LVamKJtATn/z1pDOV0sP8LOEPLPfN+yMzRbyuGaFHCVlqlMKd9eUegRee 1L+TdeIMuLYihtsUVH4PCTThICWUz2BX+8SRSprejVWKNpNfnm1TIJgWra9CT1Bw KIwiqIZyDcOaPokAv0r1Dy32wYp3mFmLimWM+s7NVdovUJlpNJkGEPhfe5hm3PxH Gz8OKdsCYnJMe3aGmCanTSkntkJvRKmn+BsxcJaVwkcsjVX/4p4w+AG5S0gfFF+p AI9IVvwbXEoRZaILZRRsHAOOMZnLoWSsFme8gDIkWKVWtK/CNwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAGfmAYUgGRaoAFHg33m4QEiGMt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzA4OWNmMTctOWViYy0z NTc3LTg0ZDUtYWRkNDdmNGZlMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCQ2+mbx14kqM7QPt4LGXnn/8suB8tkqaYwdS4s tsHqKSVu7BgHQvoW3ymQO5+ncsklE6NsdA5lh/2miF9t0S8SKEn2ZyyiHFkYtIaH dOysk6R08Xte8sdXmefrMxpAQD6LjNO2Nlr8b5tnPGwJWhSxO7dhlEApqy0Od1ZT nL+rbo+xgzou4RXgwvMY8O1xEd8a7GvGqe5cteo/AInjsAlN4R2hQEJKJNNr/Ojx 2bovpEN9l96YKDP17dotqOUh16CJEAzvavg6JzZoBQexqecTSfWpzu82JsxtKXSl /UjT1NGEqukxcjAM/q1DmorgxeNi9NS99PT5FRF9eBh3IKaW -----END CERTIFICATE-----Generated at Wed Oct 29 11:23:18 2025 by rpki-client