$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1de71e1-c920-3d42-b2d6-6e9225547a3b.roa File: c1de71e1-c920-3d42-b2d6-6e9225547a3b.roa (raw, json) Hash identifier: gSUy6HRGbycaG1jSbV6rCdLMUU9ZpueaXYwREg7nB8Y= Subject key identifier: 52:0C:6E:83:41:1A:6B:A4:31:ED:AA:E4:63:42:1D:34:35:E1:E9:3A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC82270B92E9BC3FBE800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1de71e1-c920-3d42-b2d6-6e9225547a3b.roa Signing time: Tue 26 Aug 2025 12:32:14 +0000 ROA not before: Tue 26 Aug 2025 12:32:14 +0000 ROA not after: Mon 24 Nov 2025 13:32:14 +0000 asID: 396605 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c8:22:70:b9:2e:9b:c3:fb:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:14 2025 GMT Not After : Nov 24 13:32:14 2025 GMT Subject: CN=9db6344c-beee-4715-9e37-84c602b44838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:02:a1:51:16:e6:77:60:9f:16:71:41:68: 05:0b:68:b0:18:d0:eb:3b:38:6f:89:0f:18:39:25: 49:86:42:69:e9:c9:bb:6b:c7:ec:60:98:e7:d6:66: e1:fd:c7:03:a4:83:c8:28:35:c8:15:79:27:17:47: 82:0a:81:23:ca:d8:a3:b5:7f:1f:d2:0a:d5:98:2a: 69:da:82:a4:9a:2f:86:48:de:3b:51:1f:dd:94:f3: 8a:89:2d:3e:57:7e:84:1a:f8:79:53:20:f6:a1:f6: 0c:c4:87:4a:86:e1:25:23:ff:13:44:7e:4b:13:49: 4a:1f:90:12:3d:13:b8:2e:50:79:ca:4b:69:47:6a: e4:bb:a5:a5:af:70:4a:c8:52:6d:a7:7e:61:d9:90: 28:72:80:20:1c:d0:be:8d:aa:13:88:91:73:92:2b: 06:cd:76:75:fc:f7:8e:1f:20:99:61:95:7b:28:e5: 53:7d:2f:c4:61:87:53:38:18:73:46:e9:a5:b6:03: e2:f0:ab:db:a9:79:d9:76:f9:d3:67:e3:5f:64:ca: 83:b8:ce:21:b5:03:21:c6:b5:8b:df:36:98:92:4d: 49:52:1c:a8:6f:9a:9d:f2:f2:dc:84:59:c1:4d:47: e6:00:ba:a6:e1:d7:db:46:92:b8:33:45:5f:b6:98: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0C:6E:83:41:1A:6B:A4:31:ED:AA:E4:63:42:1D:34:35:E1:E9:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1de71e1-c920-3d42-b2d6-6e9225547a3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1a:ba:01:cd:bd:dd:eb:cb:ac:4d:23:48:a2:7e:67:37:a0: bc:3a:cf:7c:54:09:26:e4:c1:56:6d:9f:63:a5:59:dc:48:1f: c2:36:1d:07:fc:57:ea:25:53:93:d5:fa:8d:40:69:bb:da:c7: 49:61:6a:61:66:24:93:b7:b5:0f:1e:96:5c:bc:28:78:01:8b: bc:43:65:c6:9a:b3:32:b0:23:65:5d:12:f6:ea:38:32:42:0b: 92:a2:10:24:36:0b:c7:95:85:39:22:14:d1:92:76:73:4c:be: a1:86:42:e6:b2:17:f3:35:a6:25:e2:c9:00:52:39:a2:0f:b7: a3:58:61:ab:09:26:e1:b1:62:1b:e6:22:5d:41:e1:28:cc:4a: 9a:b5:3a:cb:7e:e6:93:7b:03:5d:d8:21:63:9c:4c:0e:cf:fa: db:78:22:85:82:39:ee:d9:5b:ca:81:ec:d9:2c:57:f4:3c:29: 47:ae:7d:a4:cf:e3:3d:cd:94:c2:bb:5b:c3:ac:fe:1b:76:7b: 24:ee:8a:ff:aa:40:9e:d0:07:d9:41:6d:45:e9:30:72:86:93: 2b:65:2f:3b:a6:d8:48:90:12:ae:5a:51:7f:34:ad:fc:b7:d0: f9:b0:41:ab:b1:60:1c:4b:6d:98:e6:de:69:ad:e2:84:a5:86: f6:9b:93:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcgicLkum8P76AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNFoXDTI1MTEyNDEzMzIxNFowLzEtMCsGA1UEAxMk OWRiNjM0NGMtYmVlZS00NzE1LTllMzctODRjNjAyYjQ0ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQwCoVEW5ndgnxZxQWgFC2iwGNDrOzhviQ8Y OSVJhkJp6cm7a8fsYJjn1mbh/ccDpIPIKDXIFXknF0eCCoEjytijtX8f0grVmCpp 2oKkmi+GSN47UR/dlPOKiS0+V36EGvh5UyD2ofYMxIdKhuElI/8TRH5LE0lKH5AS PRO4LlB5yktpR2rku6Wlr3BKyFJtp35h2ZAocoAgHNC+jaoTiJFzkisGzXZ1/PeO HyCZYZV7KOVTfS/EYYdTOBhzRumltgPi8KvbqXnZdvnTZ+NfZMqDuM4htQMhxrWL 3zaYkk1JUhyob5qd8vLchFnBTUfmALqm4dfbRpK4M0VftpiT8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIMboNBGmukMe2q5GNCHTQ14ek6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFkZTcxZTEtYzkyMC0z ZDQyLWIyZDYtNmU5MjI1NTQ3YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIIaugHNvd3ry6xNI0iifmc3oLw6z3xUCSbkwVZtn2OlWdxIH8I2 HQf8V+olU5PV+o1Aabvax0lhamFmJJO3tQ8elly8KHgBi7xDZcaaszKwI2VdEvbq ODJCC5KiECQ2C8eVhTkiFNGSdnNMvqGGQuayF/M1piXiyQBSOaIPt6NYYasJJuGx YhvmIl1B4SjMSpq1Ost+5pN7A13YIWOcTA7P+tt4IoWCOe7ZW8qB7NksV/Q8KUeu faTP4z3NlMK7W8Os/ht2eyTuiv+qQJ7QB9lBbUXpMHKGkytlLzum2EiQEq5aUX80 rfy30PmwQauxYBxLbZjm3mmt4oSlhvabkxo= -----END CERTIFICATE-----Generated at Wed Sep 10 17:53:39 2025 by rpki-client