$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e81739-be44-3d6b-8cdb-983122e81ef2.roa File: d4e81739-be44-3d6b-8cdb-983122e81ef2.roa (raw, json) Hash identifier: jzzjrkBM2hW3C7UV44CzetrAH7pjNpuOu75ZuG8vWqE= Subject key identifier: 2A:5D:E1:71:17:6C:94:A7:2B:C6:C4:88:D8:B2:1D:42:D8:34:8C:CD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B180700D4F4D56F04BDACCCCC Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e81739-be44-3d6b-8cdb-983122e81ef2.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 32651 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:07:00:d4:f4:d5:6f:04:bd:ac:cc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=56cfcc78-8154-4753-af86-add0a48f57fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:75:6f:40:03:fe:56:d6:51:1b:50:20:42:e5: a9:0f:cd:0a:37:21:85:98:0d:e8:3f:48:6e:1d:7e: 49:b2:3b:fc:33:da:bb:05:7b:b8:27:6f:39:73:ea: 38:27:65:6c:ac:89:69:c9:5d:dd:47:e6:04:35:22: 3c:2f:50:cf:57:30:bd:b6:a1:c1:71:73:c5:71:bc: 6d:bf:3b:b8:81:aa:f8:f7:1c:98:bf:35:ac:cd:ef: 7b:7e:cf:04:50:72:a6:d0:bd:14:96:81:1e:84:cd: 3c:54:ee:ae:36:0b:e2:89:4a:a4:0a:2b:15:3a:48: c6:93:a2:bd:ed:7e:1a:b5:2f:da:5f:ff:c4:bc:17: bf:84:cb:fe:92:60:21:87:a5:a0:8c:ca:1c:5e:6e: 04:02:5e:f0:b5:ea:d4:b0:54:13:58:a0:09:07:38: 5e:a1:b7:77:17:b7:63:f9:f1:a3:ea:06:85:7c:e0: a2:86:f2:dd:74:b4:25:ef:34:0c:41:44:3d:d8:e1: 1e:12:f4:a5:61:52:0e:5c:8b:7e:f6:cc:07:86:b4: 11:f0:7e:49:4d:11:7d:e1:66:d3:29:f2:5f:26:80: 80:b4:2c:e6:f6:ab:60:53:3e:93:ad:db:ed:2b:a1: 18:33:5e:33:84:97:46:94:c7:3d:23:81:cb:2c:8a: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5D:E1:71:17:6C:94:A7:2B:C6:C4:88:D8:B2:1D:42:D8:34:8C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4e81739-be44-3d6b-8cdb-983122e81ef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ee:ba:e8:7b:8f:85:c6:e2:35:d0:29:49:3a:b9:5d:28:f0: d5:d4:49:1d:e0:2c:52:f6:84:35:7a:86:a9:ca:09:89:40:a9: ca:9b:90:28:16:6d:97:f1:6d:62:2d:39:ba:47:76:35:fd:98: c0:8c:d4:62:9e:8f:54:76:6a:27:82:5a:0f:aa:7d:01:73:1e: 37:c8:e2:c8:f3:35:f6:30:e6:26:ba:70:c9:3d:8c:a8:fb:1d: 86:01:de:46:6a:98:77:1f:dc:17:94:af:e4:f0:f6:4c:42:55: 2f:4e:5a:83:6d:07:df:5b:40:ab:2f:0c:36:d8:46:40:b6:8d: e8:fa:d0:2c:71:ff:f6:4b:f5:ec:ea:fd:b5:3a:60:34:04:44: 4f:16:23:4d:62:45:12:54:71:bd:58:59:fe:c9:9c:ba:6c:39: f8:24:e5:d0:2a:af:94:af:46:c9:6c:41:86:97:3d:83:8d:e3: 73:d6:8a:ac:06:b2:9f:37:b5:7c:cc:92:c1:6c:41:a0:d2:c2: ae:43:7f:a7:76:1e:e0:5b:c3:9a:79:9a:d0:72:ad:69:38:61: 8d:31:96:d2:61:f0:4f:f3:6a:a0:49:93:50:73:0b:be:37:35: 46:ec:44:54:28:1c:9a:fd:d8:44:64:77:1e:81:e8:85:99:39: 43:73:7f:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBwDU9NVvBL2szMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTZjZmNjNzgtODE1NC00NzUzLWFmODYtYWRkMGE0OGY1N2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHVvQAP+VtZRG1AgQuWpD80KNyGFmA3oP0hu HX5Jsjv8M9q7BXu4J285c+o4J2VsrIlpyV3dR+YENSI8L1DPVzC9tqHBcXPFcbxt vzu4gar49xyYvzWsze97fs8EUHKm0L0UloEehM08VO6uNgviiUqkCisVOkjGk6K9 7X4atS/aX//EvBe/hMv+kmAhh6WgjMocXm4EAl7wterUsFQTWKAJBzheobd3F7dj +fGj6gaFfOCihvLddLQl7zQMQUQ92OEeEvSlYVIOXIt+9swHhrQR8H5JTRF94WbT KfJfJoCAtCzm9qtgUz6TrdvtK6EYM14zhJdGlMc9I4HLLIpm6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCpd4XEXbJSnK8bEiNiyHULYNIzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDRlODE3MzktYmU0NC0z ZDZiLThjZGItOTgzMTIyZTgxZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzuuuh7j4XG4jXQKUk6uV0o8NXUSR3gLFL2hDV6hqnKCYlAqcqb kCgWbZfxbWItObpHdjX9mMCM1GKej1R2aieCWg+qfQFzHjfI4sjzNfYw5ia6cMk9 jKj7HYYB3kZqmHcf3BeUr+Tw9kxCVS9OWoNtB99bQKsvDDbYRkC2jej60Cxx//ZL 9ezq/bU6YDQERE8WI01iRRJUcb1YWf7JnLpsOfgk5dAqr5SvRslsQYaXPYON43PW iqwGsp83tXzMksFsQaDSwq5Df6d2HuBbw5p5mtByrWk4YY0xltJh8E/zaqBJk1Bz C743NUbsRFQoHJr92ERkdx6B6IWZOUNzfxg= -----END CERTIFICATE-----Generated at Wed Sep 10 17:50:54 2025 by rpki-client