$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6eae63-9107-33de-8899-fd34d41dec5a.roa File: cd6eae63-9107-33de-8899-fd34d41dec5a.roa (raw, json) Hash identifier: SoUOwtNl0hIbF8cpwr3ljB2lswddx0jquSRMk1LvE3A= Subject key identifier: F7:27:2B:33:C7:9A:1A:0E:FC:CF:43:8B:ED:E8:40:B8:D3:23:7F:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2CF710DA58DF436EDA700700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6eae63-9107-33de-8899-fd34d41dec5a.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 396571 IP address blocks: 2001:500:7967::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f7:10:da:58:df:43:6e:da:70:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=b5289b0e-436b-49bd-ae02-48dfbbca8907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:80:dd:07:ae:30:75:22:e5:dd:51:4f:f7: 6b:df:5b:46:dc:b0:4c:84:b3:32:6f:93:7b:4a:c1: 1f:da:d0:b8:e2:59:f6:87:d6:fb:9c:db:be:ac:13: 3d:51:6f:62:96:de:68:40:77:c4:f1:c5:0e:e6:14: 7a:7a:d8:29:aa:8e:a1:db:3c:f2:d9:28:48:b2:eb: 2d:67:f4:6f:41:79:bf:d5:22:6d:81:d6:b6:8c:ea: c5:21:43:10:05:ad:ef:54:88:c6:b6:32:60:0c:4c: 50:a2:0f:26:10:26:20:4c:38:ee:d2:77:ab:71:33: 42:26:5a:8f:8b:a4:4c:cb:44:d5:f6:6f:2a:a7:b8: 1a:3b:23:45:6f:7a:28:f9:76:0c:4c:7d:85:d4:dc: e6:d0:3e:82:29:c6:00:17:b4:a9:49:c8:2f:7f:69: 9e:9a:c7:50:2d:bf:5f:42:15:fd:a7:f7:a4:0e:dc: c3:2d:50:73:50:48:67:89:93:df:f1:07:0a:05:2e: 94:a7:76:b8:d7:de:4c:81:de:34:43:36:a9:8b:cd: 0f:59:fb:d3:47:8f:08:0f:d7:6f:2b:85:49:28:42: d3:55:a8:ac:1d:e8:69:1e:95:87:99:5f:4f:77:3c: 56:49:3a:28:d9:77:40:85:3e:d9:0d:43:7b:39:97: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:27:2B:33:C7:9A:1A:0E:FC:CF:43:8B:ED:E8:40:B8:D3:23:7F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd6eae63-9107-33de-8899-fd34d41dec5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d8:96:4b:44:03:c1:3b:ea:6a:14:da:43:b6:ea:dc:7a:fb: ab:5a:b3:87:43:7f:bd:2b:92:ef:49:53:50:62:1a:01:16:2c: df:6e:66:ec:cf:73:6a:b7:96:fd:69:48:37:04:71:9a:9c:e7: a8:79:21:37:b7:48:b7:ad:b3:6c:d0:12:6e:82:58:18:70:46: a4:ae:bc:a7:e0:c4:c4:cd:ed:87:5b:ec:a0:95:c3:1e:25:a6: 15:a1:a5:50:d5:e5:f7:40:d7:20:85:01:4a:f8:5d:da:aa:2f: 0f:76:a5:e1:a1:3e:97:99:3e:7b:1b:67:d9:f9:5c:61:2b:8b: e6:88:d2:fa:54:d7:f3:e2:0e:96:b1:6e:6f:d4:46:a3:20:86: cc:b7:17:50:fb:6e:d3:7e:45:e2:23:2e:57:af:f2:23:c5:1f: ae:68:91:81:fe:e1:ae:cb:32:1c:d3:5e:db:f4:b6:b1:2e:9c: 3f:ad:d7:c4:5a:72:aa:e5:5d:a3:89:b0:c3:54:a4:4e:5d:c1: 25:2c:1e:56:ee:a1:6e:6b:b3:1b:6a:6e:9a:0a:02:46:66:05: d2:6c:b8:3c:b2:cd:4b:68:98:bd:72:50:96:06:68:ad:45:96: b7:ee:f6:4f:8d:e2:73:7a:55:ac:6a:9f:4f:a4:a0:14:ea:f4: fe:7f:41:6a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEss9xDaWN9DbtpwBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk YjUyODliMGUtNDM2Yi00OWJkLWFlMDItNDhkZmJiY2E4OTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO6A3QeuMHUi5d1RT/dr31tG3LBMhLMyb5N7 SsEf2tC44ln2h9b7nNu+rBM9UW9ilt5oQHfE8cUO5hR6etgpqo6h2zzy2ShIsust Z/RvQXm/1SJtgda2jOrFIUMQBa3vVIjGtjJgDExQog8mECYgTDju0nercTNCJlqP i6RMy0TV9m8qp7gaOyNFb3oo+XYMTH2F1Nzm0D6CKcYAF7SpScgvf2memsdQLb9f QhX9p/ekDtzDLVBzUEhniZPf8QcKBS6Up3a4195Mgd40Qzapi80PWfvTR48ID9dv K4VJKELTVaisHehpHpWHmV9PdzxWSToo2XdAhT7ZDUN7OZf+pQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPcnKzPHmhoO/M9Di+3oQLjTI3+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q2ZWFlNjMtOTEwNy0z M2RlLTg4OTktZmQzNGQ0MWRlYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBk2JZLRAPBO+pqFNpDturcevurWrOHQ3+9K5Lv SVNQYhoBFizfbmbsz3Nqt5b9aUg3BHGanOeoeSE3t0i3rbNs0BJuglgYcEakrryn 4MTEze2HW+yglcMeJaYVoaVQ1eX3QNcghQFK+F3aqi8PdqXhoT6XmT57G2fZ+Vxh K4vmiNL6VNfz4g6WsW5v1EajIIbMtxdQ+27TfkXiIy5Xr/IjxR+uaJGB/uGuyzIc 017b9LaxLpw/rdfEWnKq5V2jibDDVKROXcElLB5W7qFua7Mbam6aCgJGZgXSbLg8 ss1LaJi9clCWBmitRZa37vZPjeJzelWsap9PpKAU6vT+f0Fq -----END CERTIFICATE-----Generated at Wed Oct 29 09:22:22 2025 by rpki-client