$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4958c02-83a2-30fb-91b2-c4c7a8c6cabc.roa File: d4958c02-83a2-30fb-91b2-c4c7a8c6cabc.roa (raw, json) Hash identifier: WmeH33xnnKjYliXC1HtIULSX/jbqZn1Dgw6ZRANxKL8= Subject key identifier: AE:5F:75:71:49:57:A2:15:76:F1:81:8D:81:76:81:A0:12:C9:22:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DBFB57207F2FCE2AA9B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4958c02-83a2-30fb-91b2-c4c7a8c6cabc.roa Signing time: Tue 26 Aug 2025 12:32:10 +0000 ROA not before: Tue 26 Aug 2025 12:32:10 +0000 ROA not after: Mon 24 Nov 2025 13:32:10 +0000 asID: 397211 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:bf:b5:72:07:f2:fc:e2:aa:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:10 2025 GMT Not After : Nov 24 13:32:10 2025 GMT Subject: CN=be25a8a5-561d-4644-9419-726bd6105532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:71:fb:cd:08:e5:5f:30:bf:7c:4d:15:f0: 16:ad:98:8f:dd:35:89:ce:14:08:b1:ed:12:d3:5e: 0a:7e:5d:a5:55:92:8a:57:87:5e:f2:ca:57:65:cd: 22:6c:7c:7c:49:ef:33:be:6e:65:93:e4:7c:63:12: 68:75:20:ed:82:95:b0:68:ba:dd:33:2f:27:05:a4: ed:43:35:01:8d:12:54:8a:d0:e0:ab:23:c9:7b:1f: 98:cd:15:2a:8c:79:ca:f8:9b:1c:43:88:58:51:79: 7f:54:1a:65:5d:a0:2b:db:47:b3:ea:e2:17:32:d3: cc:f9:f4:dd:c3:66:39:86:0f:49:04:fd:ef:9a:a4: 60:01:18:52:b4:24:f5:c1:ca:25:98:31:c6:da:3c: 4d:57:b6:ca:25:45:6d:16:11:54:8c:b5:7d:f3:50: 8d:cf:1c:63:b8:a0:7c:ef:37:db:85:2a:72:e1:c8: 25:13:cf:69:5b:70:e3:b8:68:65:1f:c6:06:91:aa: 91:fd:56:67:e1:7a:b8:bd:ab:e5:ae:2b:0a:7f:fb: 2b:23:a4:9e:a9:8b:25:7e:52:df:67:b0:a1:6f:15: f0:f9:35:42:22:83:61:d0:1e:27:e0:01:db:b2:13: 7d:d0:83:42:e1:4f:49:58:6f:89:7b:0e:b2:0b:b8: 06:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5F:75:71:49:57:A2:15:76:F1:81:8D:81:76:81:A0:12:C9:22:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4958c02-83a2-30fb-91b2-c4c7a8c6cabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:31:55:a1:be:93:04:12:bb:a5:f5:aa:ad:18:e3:81:5c:5b: 02:d0:fa:dd:92:5e:1e:e3:91:23:79:f6:31:be:ba:9d:36:fe: 90:12:3f:24:ab:2a:e5:67:bf:c7:87:10:4f:b6:db:4f:a8:41: 5d:1c:13:e0:98:ca:03:5d:02:f3:b1:26:62:d0:00:ed:8a:45: c9:7a:44:d6:98:37:56:05:4c:f4:c7:e1:12:11:06:92:72:65: 2c:2c:20:31:14:a2:f2:44:e9:4d:cd:73:6c:96:37:d3:55:8f: 67:61:29:4f:f4:53:59:1d:20:4b:61:3e:22:e1:4f:82:ff:42: 96:b1:4a:31:cc:b1:bc:87:6c:d0:1d:25:54:12:f5:77:59:f8: d8:f4:77:84:62:fc:77:15:a2:45:14:a3:c5:8d:31:ba:ba:80: 10:5b:07:f7:ab:b9:bf:d7:6b:f9:cd:a4:c7:5e:ef:6e:17:90: e0:c5:58:0f:eb:22:75:d2:94:28:fb:54:c5:54:3a:09:6d:8a: b9:a7:b4:0d:dd:cb:be:6f:8f:4c:1e:ed:5f:6b:09:3f:05:14: b4:90:bc:41:f8:5f:c0:5a:2a:0b:cd:a6:35:d6:5a:6f:02:a5: a1:c4:80:2f:44:52:7c:03:b9:1a:b7:ff:43:ba:b9:dd:84:22: 95:da:13:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8Db+1cgfy/OKqm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMFoXDTI1MTEyNDEzMzIxMFowLzEtMCsGA1UEAxMk YmUyNWE4YTUtNTYxZC00NjQ0LTk0MTktNzI2YmQ2MTA1NTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/tx+80I5V8wv3xNFfAWrZiP3TWJzhQIse0S 014Kfl2lVZKKV4de8spXZc0ibHx8Se8zvm5lk+R8YxJodSDtgpWwaLrdMy8nBaTt QzUBjRJUitDgqyPJex+YzRUqjHnK+JscQ4hYUXl/VBplXaAr20ez6uIXMtPM+fTd w2Y5hg9JBP3vmqRgARhStCT1wcolmDHG2jxNV7bKJUVtFhFUjLV981CNzxxjuKB8 7zfbhSpy4cglE89pW3DjuGhlH8YGkaqR/VZn4Xq4vavlrisKf/srI6SeqYslflLf Z7ChbxXw+TVCIoNh0B4n4AHbshN90INC4U9JWG+Jew6yC7gGxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK5fdXFJV6IVdvGBjYF2gaASySKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQ5NThjMDItODNhMi0z MGZiLTkxYjItYzRjN2E4YzZjYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL4xVaG+kwQSu6X1qq0Y44FcWwLQ+t2SXh7jkSN59jG+up02/pAS PySrKuVnv8eHEE+220+oQV0cE+CYygNdAvOxJmLQAO2KRcl6RNaYN1YFTPTH4RIR BpJyZSwsIDEUovJE6U3Nc2yWN9NVj2dhKU/0U1kdIEthPiLhT4L/QpaxSjHMsbyH bNAdJVQS9XdZ+Nj0d4Ri/HcVokUUo8WNMbq6gBBbB/erub/Xa/nNpMde724XkODF WA/rInXSlCj7VMVUOgltirmntA3dy75vj0we7V9rCT8FFLSQvEH4X8BaKgvNpjXW Wm8CpaHEgC9EUnwDuRq3/0O6ud2EIpXaEz0= -----END CERTIFICATE-----Generated at Thu Sep 11 06:03:01 2025 by rpki-client