$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb23f8d6-2df5-3d22-97c7-884859e24fa2.roa File: cb23f8d6-2df5-3d22-97c7-884859e24fa2.roa (raw, json) Hash identifier: osEnY6iTvnp2WTdo0eytaWIfwojvh87P7qsA2lydnzs= Subject key identifier: 62:FE:EE:8A:C6:A8:63:CA:4B:C2:82:E5:66:48:31:71:2E:AC:85:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A1191392AFE7E2473E275A8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb23f8d6-2df5-3d22-97c7-884859e24fa2.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 20362 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:91:39:2a:fe:7e:24:73:e2:75:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=5362a775-6c54-4a3c-a921-791c660b81db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:29:0d:08:c1:b6:11:b5:b4:d7:6f:f7:0f:3a: 54:61:89:7f:e6:39:17:20:ab:18:cf:e5:80:e2:89: 2e:2d:89:53:08:51:91:bc:d1:88:bd:4d:f3:c0:5a: a7:b3:af:ff:f2:ce:46:23:6a:e4:b0:9c:a3:ad:c8: 8d:89:11:7c:5a:b0:bb:e7:ab:41:d7:3b:21:f0:48: 9f:3e:4d:58:fb:33:49:b7:48:fa:bf:c4:2c:8e:79: 83:bb:bb:18:54:24:9e:fe:f6:82:6c:62:fc:e1:34: c0:55:57:21:d9:84:9f:b2:d0:5d:dd:76:f1:78:0e: ff:88:97:63:e3:14:80:2c:16:af:5d:a3:44:b1:14: 83:f9:a1:f4:7a:72:38:c7:94:e4:21:9c:81:81:30: 7a:d3:74:ac:72:c3:58:1b:8c:ef:91:7d:1d:3e:d4: 1e:a8:4e:03:78:31:49:16:fd:60:20:47:68:91:ca: 1a:a3:9a:3b:aa:5c:11:3f:04:09:27:e5:44:1b:41: 69:eb:97:7a:82:9a:4c:d9:70:e2:a7:b2:c6:eb:5b: f0:16:64:ca:40:79:90:1d:d2:2f:07:34:58:38:09: ce:a2:14:ab:9e:eb:62:c7:cc:a9:1a:e8:95:80:42: bd:45:39:cf:a2:6b:17:46:3b:3d:51:8b:86:d3:92: 33:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FE:EE:8A:C6:A8:63:CA:4B:C2:82:E5:66:48:31:71:2E:AC:85:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb23f8d6-2df5-3d22-97c7-884859e24fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:dc:f8:2c:0b:ac:31:89:b8:8c:99:09:a7:b4:24:f4:77:a5: d7:ad:cd:ab:82:b4:d2:6a:30:4a:9a:b7:63:cd:4f:7e:d7:c5: 95:10:55:fd:c6:c7:1f:f3:63:d5:b1:e3:f6:47:1b:b3:84:88: 4e:18:4a:c3:cd:49:da:78:b5:c2:0d:94:b0:19:2f:36:9f:22: 62:f4:12:fc:7c:61:f4:c3:ee:87:45:0b:cf:fb:e3:23:99:af: 8f:3f:5b:c8:bf:8f:2a:cb:18:29:11:46:3b:ee:b0:cc:98:7b: cc:3d:20:5b:13:a9:72:50:4b:c2:f5:e9:d1:f5:b3:9b:ff:d3: 40:3c:1e:9e:21:cd:94:05:eb:6b:93:b6:61:0d:be:dd:be:17: 33:43:23:31:ae:2b:d8:51:5f:85:6c:63:a9:90:31:f4:06:a2: 90:96:62:29:1e:96:66:66:f0:ef:17:dd:0b:d8:38:36:9c:64: 57:d3:e8:e1:3e:4b:5d:90:eb:84:bf:91:dd:42:d0:ec:eb:f1: 69:f6:43:7a:58:f8:3f:ac:a1:f3:b5:39:3c:45:8f:b1:a4:c0: f1:2e:fe:54:2a:b5:f2:cf:df:84:2d:6e:69:67:34:83:f3:4a: 3d:c0:bc:b2:4b:a9:4e:a0:1f:f3:a8:6f:d4:89:50:42:8a:b5: 8c:54:0b:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZE5Kv5+JHPidagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk NTM2MmE3NzUtNmM1NC00YTNjLWE5MjEtNzkxYzY2MGI4MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhikNCMG2EbW012/3DzpUYYl/5jkXIKsYz+WA 4okuLYlTCFGRvNGIvU3zwFqns6//8s5GI2rksJyjrciNiRF8WrC756tB1zsh8Eif Pk1Y+zNJt0j6v8QsjnmDu7sYVCSe/vaCbGL84TTAVVch2YSfstBd3XbxeA7/iJdj 4xSALBavXaNEsRSD+aH0enI4x5TkIZyBgTB603SscsNYG4zvkX0dPtQeqE4DeDFJ Fv1gIEdokcoao5o7qlwRPwQJJ+VEG0Fp65d6gppM2XDip7LG61vwFmTKQHmQHdIv BzRYOAnOohSrnutix8ypGuiVgEK9RTnPomsXRjs9UYuG05IzUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGL+7orGqGPKS8KC5WZIMXEurIWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2IyM2Y4ZDYtMmRmNS0z ZDIyLTk3YzctODg0ODU5ZTI0ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPc+CwLrDGJuIyZCae0JPR3pdetzauCtNJqMEqat2PNT37XxZUQ Vf3Gxx/zY9Wx4/ZHG7OEiE4YSsPNSdp4tcINlLAZLzafImL0Evx8YfTD7odFC8/7 4yOZr48/W8i/jyrLGCkRRjvusMyYe8w9IFsTqXJQS8L16dH1s5v/00A8Hp4hzZQF 62uTtmENvt2+FzNDIzGuK9hRX4VsY6mQMfQGopCWYikelmZm8O8X3QvYODacZFfT 6OE+S12Q64S/kd1C0Ozr8Wn2Q3pY+D+sofO1OTxFj7GkwPEu/lQqtfLP34Qtbmln NIPzSj3AvLJLqU6gH/Oob9SJUEKKtYxUC44= -----END CERTIFICATE-----Generated at Thu Sep 11 06:14:35 2025 by rpki-client