$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c96e6cf8-607e-35f2-8fb4-8ae407c47b4d.roa File: c96e6cf8-607e-35f2-8fb4-8ae407c47b4d.roa (raw, json) Hash identifier: F6MC3upBrH2utPRAaALgPSzK3VOMGjfoxfUwNzJ0QQk= Subject key identifier: 12:6C:2F:F4:F1:82:3D:A1:00:62:6F:54:8A:B1:16:7F:10:C3:5F:85 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B004C29F332753FE9B2E67E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c96e6cf8-607e-35f2-8fb4-8ae407c47b4d.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 396596 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:29:f3:32:75:3f:e9:b2:e6:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=5a1ad52f-e2fa-41e0-b9ae-d24e47a56582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f7:2b:cb:c3:d4:23:87:b6:59:48:de:f3:04: 07:da:18:f3:97:33:70:ad:20:c3:50:ec:d8:dd:ca: 89:8b:b0:37:e2:44:da:3f:5e:27:19:b5:85:35:39: c7:f3:af:38:a2:cf:31:4a:29:ed:d7:13:de:02:51: e0:f9:d5:33:0b:6d:b8:c8:c2:ed:3a:c1:60:f7:88: e0:b5:ad:aa:d1:33:8d:1f:b4:7d:2a:40:d8:fd:d6: 04:e9:84:05:14:70:b9:48:45:26:d3:3e:98:0b:c7: a2:e5:cc:ae:7d:91:b5:c1:59:9d:02:f8:0b:74:6d: a4:09:9c:0b:a4:1d:93:d6:c7:a5:75:c3:33:5f:f1: 51:c7:56:7e:10:d8:6b:33:ab:27:36:95:dc:7e:fe: d2:8f:41:2e:e5:29:b2:f5:35:86:8e:fa:3d:94:54: dd:11:84:54:35:d1:2e:53:d0:ab:b4:30:61:1c:e2: 12:33:6a:9a:d1:c2:42:c0:c2:52:0c:19:e9:3e:18: dd:4c:45:fc:f0:c0:f6:a8:b5:d3:2a:0c:ac:9d:22: 21:91:cb:1d:46:38:88:bc:01:dd:3c:47:58:d8:93: c1:26:3b:6f:81:de:38:2d:23:10:50:be:8c:72:f0: 91:70:c4:8f:83:a1:9a:85:c1:4e:96:5c:2a:60:06: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6C:2F:F4:F1:82:3D:A1:00:62:6F:54:8A:B1:16:7F:10:C3:5F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c96e6cf8-607e-35f2-8fb4-8ae407c47b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:17:e1:92:7b:97:77:61:75:e4:2e:40:ec:6b:03:f7:1b:79: d2:de:b6:b8:3b:5c:55:ae:68:70:5a:18:37:09:9e:d7:45:1d: 30:6c:95:c6:54:2e:ed:02:46:90:5d:c4:f6:dd:e4:ee:de:eb: 22:0e:ca:ae:da:7b:8b:03:35:65:d9:01:43:6f:df:9d:8b:50: 90:ed:02:f9:47:c1:5b:9d:05:bd:0d:91:fb:21:87:bb:21:7f: a3:23:33:32:c6:01:c6:53:09:ef:54:1c:02:79:7a:da:2c:02: 47:77:01:2d:d3:35:1d:7f:5c:f2:48:48:49:37:2e:13:f9:cf: 5c:29:2d:de:a9:a8:40:78:16:4d:88:f3:e0:2d:8b:1b:13:57: da:53:cf:db:ca:6e:15:81:14:1e:4d:63:44:39:68:84:c1:2a: d3:85:e4:5f:b2:1c:95:cb:f6:6a:9a:c6:5d:c1:fd:69:a2:f8: 81:ab:c3:33:a0:a1:33:c4:b9:0a:d1:38:a8:47:54:5f:a1:88: 04:7c:d9:ab:3c:df:71:52:ff:f3:fc:5c:bc:33:62:31:0f:35: 65:80:c7:8e:08:b6:a9:20:52:f9:38:21:5a:8d:8f:82:94:9d: 8f:d0:3f:e9:90:87:9c:88:23:22:28:97:26:94:2e:76:e4:2f: 7e:77:92:14 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATCnzMnU/6bLmfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk NWExYWQ1MmYtZTJmYS00MWUwLWI5YWUtZDI0ZTQ3YTU2NTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/cry8PUI4e2WUje8wQH2hjzlzNwrSDDUOzY 3cqJi7A34kTaP14nGbWFNTnH8684os8xSint1xPeAlHg+dUzC224yMLtOsFg94jg ta2q0TONH7R9KkDY/dYE6YQFFHC5SEUm0z6YC8ei5cyufZG1wVmdAvgLdG2kCZwL pB2T1seldcMzX/FRx1Z+ENhrM6snNpXcfv7Sj0Eu5Smy9TWGjvo9lFTdEYRUNdEu U9CrtDBhHOISM2qa0cJCwMJSDBnpPhjdTEX88MD2qLXTKgysnSIhkcsdRjiIvAHd PEdY2JPBJjtvgd44LSMQUL6McvCRcMSPg6GahcFOllwqYAZX6wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBJsL/Txgj2hAGJvVIqxFn8Qw1+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzk2ZTZjZjgtNjA3ZS0z NWYyLThmYjQtOGFlNDA3YzQ3YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCNF+GSe5d3YXXkLkDsawP3G3nS3ra4O1xVrmhw Whg3CZ7XRR0wbJXGVC7tAkaQXcT23eTu3usiDsqu2nuLAzVl2QFDb9+di1CQ7QL5 R8FbnQW9DZH7IYe7IX+jIzMyxgHGUwnvVBwCeXraLAJHdwEt0zUdf1zySEhJNy4T +c9cKS3eqahAeBZNiPPgLYsbE1faU8/bym4VgRQeTWNEOWiEwSrTheRfshyVy/Zq msZdwf1poviBq8MzoKEzxLkK0TioR1RfoYgEfNmrPN9xUv/z/Fy8M2IxDzVlgMeO CLapIFL5OCFajY+ClJ2P0D/pkIeciCMiKJcmlC525C9+d5IU -----END CERTIFICATE-----Generated at Wed Sep 10 20:23:59 2025 by rpki-client