$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4c130b4-73cc-344e-bf1e-3ba18fdf48e1.roa File: d4c130b4-73cc-344e-bf1e-3ba18fdf48e1.roa (raw, json) Hash identifier: PJ2kDKb4lP39kS9GoKfCWHOMA8e6a9+EWQMcChimMX8= Subject key identifier: 44:91:1C:2A:BB:32:83:A1:D1:E1:FA:76:1B:1C:CC:27:32:C7:38:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DCF1FEDC819ED1ED432C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4c130b4-73cc-344e-bf1e-3ba18fdf48e1.roa Signing time: Tue 26 Aug 2025 12:32:17 +0000 ROA not before: Tue 26 Aug 2025 12:32:17 +0000 ROA not after: Mon 24 Nov 2025 13:32:17 +0000 asID: 211369 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:cf:1f:ed:c8:19:ed:1e:d4:32:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:17 2025 GMT Not After : Nov 24 13:32:17 2025 GMT Subject: CN=50fa4c65-69af-45ad-a725-ce401b1d7883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:52:8c:88:43:e3:85:5b:39:cb:ad:c3:08:d0: 68:cc:76:18:23:23:11:3e:bc:bb:a2:fe:d1:f0:99: ea:44:6b:8b:39:1f:14:f5:0b:09:b5:ed:af:5e:c7: 96:4b:dd:14:34:34:fa:b3:cf:41:14:1c:a8:b1:79: 46:b2:67:f4:c0:10:d2:d7:ea:45:a1:f1:be:7c:27: b9:8a:4a:f9:cf:d2:53:a3:b0:af:0d:c6:24:21:69: e8:57:0f:a6:ef:3b:bb:b4:f3:c7:1f:a6:9f:dc:07: db:b3:d1:b0:f8:00:e4:5e:b0:a2:89:df:a4:3a:de: 1a:50:54:03:01:43:a4:6f:a7:0b:7c:f5:ff:a2:30: 3e:39:38:b7:cc:7f:98:a9:a1:be:af:86:80:0d:38: 34:3a:98:71:f4:d8:63:65:dd:ff:50:c6:61:ed:25: 1e:a3:c9:a4:9c:af:9b:fc:0d:d8:27:92:c8:b4:88: 4e:c5:f1:15:18:ec:fe:9b:ee:36:24:b2:e0:b7:96: 64:7c:e4:7c:ce:0c:ab:4c:7b:7a:5c:24:05:e6:65: 79:c6:14:36:3a:0c:30:97:4f:30:91:b9:ec:4e:96: e8:47:6a:c8:60:f4:99:e7:14:7f:1a:0c:31:2c:47: 50:b7:09:56:0e:92:ae:e0:91:d1:67:45:e9:3a:10: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:91:1C:2A:BB:32:83:A1:D1:E1:FA:76:1B:1C:CC:27:32:C7:38:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4c130b4-73cc-344e-bf1e-3ba18fdf48e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:da:85:10:b8:1f:3d:86:4a:44:fa:ed:85:2a:03:bf:bb:d3: 36:e4:45:2a:61:77:d9:56:aa:58:82:5c:7b:fc:43:56:c8:32: f1:b7:b8:33:39:6f:69:f6:eb:dc:a6:00:3c:b0:5f:49:a1:ee: 4c:4a:c1:b8:c3:2a:2b:3f:7c:b9:21:02:03:f8:8b:d7:f0:6d: ac:ff:c7:4c:87:11:bb:a2:3f:43:b2:c7:58:3c:38:14:0f:f5: b5:73:12:2b:27:a2:f7:2d:c3:15:be:2a:8a:c3:64:a9:fc:11: 90:38:fd:29:65:8c:91:fd:78:94:18:56:f5:14:20:3d:18:7e: a7:cf:08:59:6f:c4:49:8d:60:93:ba:93:e3:6b:ef:97:88:e9: 73:79:2a:2c:3f:be:c7:90:8e:32:f1:49:df:ef:46:34:5b:9c: c8:5c:7b:79:22:a6:d7:45:92:5c:d7:58:26:ec:fe:d7:c4:12: 76:25:56:20:54:be:e1:c8:23:ce:9d:c8:fe:f9:62:ab:40:a5: be:0f:9e:53:05:0b:ff:0b:ff:1d:16:61:c6:58:42:fb:8b:ae: d3:b7:20:e9:62:e9:61:8a:b7:c6:7d:9a:82:bb:71:3d:b5:d7: 0d:34:c2:8b:e9:d2:e9:27:18:a3:ef:c4:86:79:12:5f:eb:b3: 49:5c:9a:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8Dc8f7cgZ7R7UMsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxN1oXDTI1MTEyNDEzMzIxN1owLzEtMCsGA1UEAxMk NTBmYTRjNjUtNjlhZi00NWFkLWE3MjUtY2U0MDFiMWQ3ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFKMiEPjhVs5y63DCNBozHYYIyMRPry7ov7R 8JnqRGuLOR8U9QsJte2vXseWS90UNDT6s89BFByosXlGsmf0wBDS1+pFofG+fCe5 ikr5z9JTo7CvDcYkIWnoVw+m7zu7tPPHH6af3Afbs9Gw+ADkXrCiid+kOt4aUFQD AUOkb6cLfPX/ojA+OTi3zH+YqaG+r4aADTg0Ophx9NhjZd3/UMZh7SUeo8mknK+b /A3YJ5LItIhOxfEVGOz+m+42JLLgt5ZkfOR8zgyrTHt6XCQF5mV5xhQ2Ogwwl08w kbnsTpboR2rIYPSZ5xR/GgwxLEdQtwlWDpKu4JHRZ0XpOhB/2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFESRHCq7MoOh0eH6dhsczCcyxzjiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDRjMTMwYjQtNzNjYy0z NDRlLWJmMWUtM2JhMThmZGY0OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALfahRC4Hz2GSkT67YUqA7+70zbkRSphd9lWqliCXHv8Q1bIMvG3 uDM5b2n269ymADywX0mh7kxKwbjDKis/fLkhAgP4i9fwbaz/x0yHEbuiP0Oyx1g8 OBQP9bVzEisnovctwxW+KorDZKn8EZA4/SlljJH9eJQYVvUUID0YfqfPCFlvxEmN YJO6k+Nr75eI6XN5Kiw/vseQjjLxSd/vRjRbnMhce3kiptdFklzXWCbs/tfEEnYl ViBUvuHII86dyP75YqtApb4PnlMFC/8L/x0WYcZYQvuLrtO3IOli6WGKt8Z9moK7 cT211w00wovp0uknGKPvxIZ5El/rs0lcmrw= -----END CERTIFICATE-----Generated at Wed Sep 10 20:24:08 2025 by rpki-client