$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25db196-f507-3531-ba0a-d145e098a693.roa File: d25db196-f507-3531-ba0a-d145e098a693.roa (raw, json) Hash identifier: FO/yNbTWNJ2GFecSzdWgKE2oPZ5QNkQjNyg9+SJU/JI= Subject key identifier: DF:C4:9C:D8:D6:88:4A:61:C3:EE:02:AE:F9:F3:C6:4A:CF:13:53:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE883F7DDF2BC90289130D000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25db196-f507-3531-ba0a-d145e098a693.roa Signing time: Tue 19 Aug 2025 12:34:12 +0000 ROA not before: Tue 19 Aug 2025 12:34:12 +0000 ROA not after: Mon 17 Nov 2025 13:34:12 +0000 asID: 396567 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:83:f7:dd:f2:bc:90:28:91:30:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 12:34:12 2025 GMT Not After : Nov 17 13:34:12 2025 GMT Subject: CN=b7662d7e-4c96-4d8a-962c-3cc53a24d65b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8f:05:da:aa:65:9d:2e:44:a1:dd:6b:82:7c: fa:93:6f:d7:dc:52:cb:a5:9b:01:e4:61:7f:94:6a: 2a:46:75:13:25:f3:ef:0b:2c:ce:2d:6a:42:ef:82: 9c:a3:17:de:9b:81:9f:a9:f3:5c:d6:41:95:fd:20: db:75:c7:18:b5:f3:b4:17:94:45:df:85:90:0c:d5: 41:eb:1b:18:f4:74:70:b2:4d:11:78:0d:8e:77:c6: 8e:59:ec:07:db:8b:64:e3:b1:0e:04:1f:40:00:c1: 0e:4d:fe:e9:6c:77:bd:2c:90:19:42:93:95:bd:49: 3a:c0:43:a5:1e:be:4c:08:3a:4e:ed:fd:d9:c9:0d: 43:db:62:ed:2b:5a:8a:c5:25:b1:a9:9b:8c:c6:71: 47:56:92:fc:f9:10:39:3a:c8:b7:5b:cd:87:65:71: 50:b2:3d:aa:c0:bc:82:b3:ee:73:b5:55:c0:21:27: 23:4c:2e:b9:63:42:61:5d:48:f3:d4:a7:64:c7:c8: 13:3b:11:22:56:83:c2:4a:90:b9:97:03:c8:45:b6: b3:30:b0:19:db:3c:74:0f:39:7f:10:4e:04:75:26: 3a:51:60:b1:75:16:63:55:fb:77:f2:14:06:bc:c9: 41:df:f7:84:00:bd:ea:c5:91:7f:d4:e6:48:ac:2f: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C4:9C:D8:D6:88:4A:61:C3:EE:02:AE:F9:F3:C6:4A:CF:13:53:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d25db196-f507-3531-ba0a-d145e098a693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:94:3a:7c:73:4e:df:50:92:a8:e5:42:1e:01:3a:5c:54:17: 0c:ce:b8:43:50:2b:1c:2b:24:d5:0f:a6:7a:19:69:c3:fe:b2: 8d:89:2f:63:a3:19:3a:b2:ee:18:93:d6:5a:c1:b2:6d:f0:94: 68:c7:6e:15:f1:a5:64:1f:4e:c0:21:3b:6d:41:ba:85:f7:85: 24:be:21:66:46:99:43:f6:d3:3c:58:72:b9:d9:be:e5:f8:a1: 8a:76:e6:ab:2b:52:7f:07:8a:8a:00:0a:73:e6:a6:23:ef:3a: 15:fc:3f:01:08:d5:37:fb:fe:da:bc:f2:16:97:f5:3c:72:02: 09:68:aa:97:7f:6b:52:f7:6a:93:33:67:81:b0:c0:76:08:a6: 41:ea:20:e3:9f:9a:43:2e:86:3e:ed:ac:60:bd:7c:db:a8:22: 7a:4e:f8:8d:c3:15:67:ba:6e:09:f4:6b:70:43:40:2f:cf:97: 9e:8a:83:ca:15:79:73:70:31:8d:6d:57:89:13:c3:3b:c0:a9: 88:68:fe:72:2e:f2:8b:9e:dc:74:42:3d:5e:23:91:2d:08:e2: 80:b1:9c:aa:f5:96:80:e5:cd:09:a5:cf:26:7b:d2:c6:b2:fd: f9:b3:df:21:68:94:d8:7c:41:f4:07:6c:e2:15:09:dc:13:c6: 95:fd:65:95 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/fd8ryQKJEw0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxOTEyMzQxMloXDTI1MTExNzEzMzQxMlowLzEtMCsGA1UEAxMk Yjc2NjJkN2UtNGM5Ni00ZDhhLTk2MmMtM2NjNTNhMjRkNjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo8F2qplnS5Eod1rgnz6k2/X3FLLpZsB5GF/ lGoqRnUTJfPvCyzOLWpC74Kcoxfem4GfqfNc1kGV/SDbdccYtfO0F5RF34WQDNVB 6xsY9HRwsk0ReA2Od8aOWewH24tk47EOBB9AAMEOTf7pbHe9LJAZQpOVvUk6wEOl Hr5MCDpO7f3ZyQ1D22LtK1qKxSWxqZuMxnFHVpL8+RA5Osi3W82HZXFQsj2qwLyC s+5ztVXAIScjTC65Y0JhXUjz1Kdkx8gTOxEiVoPCSpC5lwPIRbazMLAZ2zx0Dzl/ EE4EdSY6UWCxdRZjVft38hQGvMlB3/eEAL3qxZF/1OZIrC+6+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFN/EnNjWiEphw+4CrvnzxkrPE1NXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDI1ZGIxOTYtZjUwNy0z NTMxLWJhMGEtZDE0NWUwOThhNjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA+lDp8c07fUJKo5UIeATpcVBcMzrhDUCscKyTV D6Z6GWnD/rKNiS9joxk6su4Yk9ZawbJt8JRox24V8aVkH07AITttQbqF94UkviFm RplD9tM8WHK52b7l+KGKduarK1J/B4qKAApz5qYj7zoV/D8BCNU3+/7avPIWl/U8 cgIJaKqXf2tS92qTM2eBsMB2CKZB6iDjn5pDLoY+7axgvXzbqCJ6TviNwxVnum4J 9GtwQ0Avz5eeioPKFXlzcDGNbVeJE8M7wKmIaP5yLvKLntx0Qj1eI5EtCOKAsZyq 9ZaA5c0Jpc8me9LGsv35s98haJTYfEH0B2ziFQncE8aV/WWV -----END CERTIFICATE-----Generated at Wed Oct 29 07:09:39 2025 by rpki-client