$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1f824-8a20-365c-8832-d1cf8b116ad4.roa File: d7a1f824-8a20-365c-8832-d1cf8b116ad4.roa (raw, json) Hash identifier: xcMNwt+sGLJy2qpsnnGkpBE175/qXKxmoBLWje9P/Jc= Subject key identifier: B8:A1:AF:A9:43:E6:FE:21:A4:EE:3F:31:F0:B5:99:78:25:BE:4F:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A1193644F9B78D1F99BAF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1f824-8a20-365c-8832-d1cf8b116ad4.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396586 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:93:64:4f:9b:78:d1:f9:9b:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=9c497819-8069-41af-8332-845492e265b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:43:11:fa:10:7e:40:50:01:5f:c6:6d:c3: ce:70:04:03:b1:bc:5f:72:f3:95:a7:42:a5:1e:f4: bf:f0:0e:5c:f1:0d:1b:e9:75:ed:e0:e0:56:78:ff: a9:a3:75:32:bc:f9:4e:6d:19:5d:9a:45:c0:b6:e9: 77:ff:cb:52:ea:bb:6a:7d:64:f7:c8:1a:47:7f:b8: fb:b3:2e:40:a8:e7:48:c3:04:7a:8c:a2:60:43:7a: f5:dd:6c:1d:58:f5:ec:2a:fe:69:22:e5:20:1d:7e: ee:05:25:d0:af:57:52:b2:4f:57:81:c3:2e:21:17: c6:d0:99:f6:15:3c:29:5b:9f:de:6c:67:6b:d2:7e: 90:a3:b6:00:89:c3:9e:cb:c6:8b:2e:6c:be:df:68: da:52:2b:f1:df:95:e0:8f:22:e1:bc:77:12:d9:2d: 2f:c4:cf:c5:23:ea:72:83:6b:a6:7c:b2:73:70:d9: dc:ec:13:46:3e:33:87:69:3a:07:5c:f0:f3:bf:ed: 02:5b:5e:81:c8:1b:7d:61:ee:28:42:21:12:d8:a1: 78:26:28:bf:40:0a:3d:90:ab:7d:c5:80:34:77:4e: cb:a6:ea:5b:f4:ce:83:2b:de:75:59:c6:12:70:15: 1c:31:59:59:95:45:17:3c:e3:dd:60:cc:e0:4c:27: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A1:AF:A9:43:E6:FE:21:A4:EE:3F:31:F0:B5:99:78:25:BE:4F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1f824-8a20-365c-8832-d1cf8b116ad4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:37:93:a9:0a:73:95:da:7b:5e:73:d6:ec:c3:6f:28:04:b4: 03:de:46:9f:32:40:55:82:05:0f:9c:1e:1f:6d:36:ca:44:87: a3:0c:e8:ff:a2:c5:8b:2f:6a:96:d2:d0:8d:ba:e4:97:a3:39: 8f:a6:f1:80:7d:6a:f0:85:15:9d:89:8c:01:b5:8d:07:88:2e: 90:c3:55:25:ec:40:e5:f1:8a:ef:31:0a:ec:6e:57:16:be:2e: c4:28:a7:b2:11:86:74:a4:9c:de:45:71:67:d8:19:74:1b:3d: 28:44:57:df:ec:56:f2:50:77:72:6c:86:bb:eb:47:f8:7d:65: e6:51:f7:a6:e5:10:70:91:38:10:2c:14:44:5b:99:c8:8b:12: 08:c4:fa:a0:1d:74:c4:aa:76:89:16:d1:59:40:b2:2f:e1:26: bd:40:0b:7d:59:4c:19:dc:ea:b8:6d:96:16:2c:eb:bf:93:9c: 72:94:eb:ca:48:ce:dc:92:dd:fb:c2:09:3b:14:38:0a:ab:46: 74:9e:69:ee:2d:23:63:eb:49:61:22:fe:e3:0b:4b:30:8f:f8: fc:01:1e:11:77:d1:b5:d8:95:87:e6:44:52:cc:95:b1:42:09: 34:8c:90:43:0a:f1:5c:48:4a:62:3d:7e:c7:90:f5:c1:a1:77: 1f:3e:16:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZNkT5t40fmbrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk OWM0OTc4MTktODA2OS00MWFmLTgzMzItODQ1NDkyZTI2NWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+BDEfoQfkBQAV/GbcPOcAQDsbxfcvOVp0Kl HvS/8A5c8Q0b6XXt4OBWeP+po3UyvPlObRldmkXAtul3/8tS6rtqfWT3yBpHf7j7 sy5AqOdIwwR6jKJgQ3r13WwdWPXsKv5pIuUgHX7uBSXQr1dSsk9XgcMuIRfG0Jn2 FTwpW5/ebGdr0n6Qo7YAicOey8aLLmy+32jaUivx35XgjyLhvHcS2S0vxM/FI+py g2umfLJzcNnc7BNGPjOHaToHXPDzv+0CW16ByBt9Ye4oQiES2KF4Jii/QAo9kKt9 xYA0d07Lpupb9M6DK951WcYScBUcMVlZlUUXPOPdYMzgTCcihQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLihr6lD5v4hpO4/MfC1mXglvk/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdhMWY4MjQtOGEyMC0z NjVjLTg4MzItZDFjZjhiMTE2YWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACc3k6kKc5Xae15z1uzDbygEtAPeRp8yQFWCBQ+cHh9tNspEh6MM 6P+ixYsvapbS0I265JejOY+m8YB9avCFFZ2JjAG1jQeILpDDVSXsQOXxiu8xCuxu Vxa+LsQop7IRhnSknN5FcWfYGXQbPShEV9/sVvJQd3JshrvrR/h9ZeZR96blEHCR OBAsFERbmciLEgjE+qAddMSqdokW0VlAsi/hJr1AC31ZTBnc6rhtlhYs67+TnHKU 68pIztyS3fvCCTsUOAqrRnSeae4tI2PrSWEi/uMLSzCP+PwBHhF30bXYlYfmRFLM lbFCCTSMkEMK8VxISmI9fseQ9cGhdx8+FsA= -----END CERTIFICATE-----Generated at Wed Oct 29 07:00:46 2025 by rpki-client