$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d90c41c2-0bbf-35df-8f91-2f4a6a0a7313.roa File: d90c41c2-0bbf-35df-8f91-2f4a6a0a7313.roa (raw, json) Hash identifier: zl190WPybpvWyFmUhPmAlzGQy5FVfEN/7nZAmwVpMV4= Subject key identifier: 85:5F:7E:CC:D8:91:70:CA:5B:DD:D1:D2:68:C6:D1:B9:8E:A2:CD:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A119BCF21218FD44B332E3C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d90c41c2-0bbf-35df-8f91-2f4a6a0a7313.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396552 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:9b:cf:21:21:8f:d4:4b:33:2e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=b33908b5-7835-4f61-8408-247ec40a341a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:34:25:6a:81:25:75:2a:e3:30:a3:9b:40: 47:4a:81:0e:6f:79:fd:11:03:de:34:84:03:a2:e2: c9:d0:ad:3b:6e:6d:7e:94:0b:56:1f:d0:b4:8d:fc: 01:c4:16:5e:db:af:f7:81:ba:6e:47:74:98:c0:b5: b8:f5:5a:2e:32:21:e4:1c:75:04:ae:17:bb:56:3a: 1b:eb:b8:4a:19:80:53:76:28:e3:69:f7:3f:f7:51: a5:1e:83:4d:31:4e:4d:f5:d6:d7:62:47:c7:3c:47: bb:e3:42:17:a1:b8:37:60:78:db:b8:b1:ce:2c:3a: 0e:3a:36:35:26:a2:7a:9b:00:e1:0a:b1:d7:b7:7c: 12:cd:72:ed:46:b1:0f:2d:0f:09:dd:b0:9e:54:a6: 89:b4:38:ee:a6:a0:5b:66:13:c6:09:61:39:39:cb: 3d:a5:4d:e7:b6:e9:30:44:d7:36:50:7d:b5:ad:49: f9:38:14:3d:10:cd:f7:83:56:a3:46:cd:3b:37:27: 6a:62:d5:8f:a1:76:03:83:b4:c1:08:b0:60:eb:77: bb:4a:91:9e:9b:31:16:5e:c8:d3:41:8e:f1:b9:3b: e6:d7:cb:b3:22:0b:86:66:a0:58:f5:20:3f:5e:1f: a5:14:2b:40:e4:89:c0:b4:3b:c1:23:3d:cc:6a:dc: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5F:7E:CC:D8:91:70:CA:5B:DD:D1:D2:68:C6:D1:B9:8E:A2:CD:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d90c41c2-0bbf-35df-8f91-2f4a6a0a7313.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:7e:b9:16:a0:2e:32:93:5f:cc:71:51:31:e5:ec:61:45:c4: d9:bf:7d:9f:0b:ad:8b:e4:e7:73:60:21:17:ff:2e:95:78:c4: e4:85:5d:e1:b1:9e:67:79:33:fe:03:98:fb:80:a8:0a:80:47: 44:0b:ca:30:b2:09:79:84:9a:70:e6:02:63:39:85:e7:d5:9e: 69:32:c4:2f:fb:29:79:a8:4d:41:7c:84:7e:a7:ca:74:b8:7e: c7:da:c1:7c:6b:e3:3a:e9:ce:38:65:bc:a8:db:d0:bd:9e:81: 32:83:67:96:df:34:c5:8d:13:e6:f6:0c:a6:13:3b:f9:a3:8b: bd:42:e1:8f:86:60:74:14:2b:46:2b:05:74:05:72:fb:fd:af: fa:8a:31:11:22:c7:29:7a:f1:a9:d8:a1:5e:40:8a:b8:66:46: e1:c9:7d:42:2d:d7:12:3a:0f:87:63:13:c3:e0:77:2d:b4:65: 88:14:23:64:73:c1:20:e6:fd:5b:e4:88:68:cf:cf:33:d8:00: 7a:40:75:db:c4:c2:de:3c:8d:3c:f9:0b:94:ab:13:2f:d1:4e: be:32:da:90:fb:ea:18:68:06:95:a8:55:1f:e4:14:d7:15:3b: 13:88:95:2a:67:8a:4f:1f:54:3a:6e:cd:c5:9e:75:4a:16:30: 4c:32:4a:22 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZvPISGP1EszLjwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YjMzOTA4YjUtNzgzNS00ZjYxLTg0MDgtMjQ3ZWM0MGEzNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGI0JWqBJXUq4zCjm0BHSoEOb3n9EQPeNIQD ouLJ0K07bm1+lAtWH9C0jfwBxBZe26/3gbpuR3SYwLW49VouMiHkHHUErhe7Vjob 67hKGYBTdijjafc/91GlHoNNMU5N9dbXYkfHPEe740IXobg3YHjbuLHOLDoOOjY1 JqJ6mwDhCrHXt3wSzXLtRrEPLQ8J3bCeVKaJtDjupqBbZhPGCWE5Ocs9pU3ntukw RNc2UH21rUn5OBQ9EM33g1ajRs07NydqYtWPoXYDg7TBCLBg63e7SpGemzEWXsjT QY7xuTvm18uzIguGZqBY9SA/Xh+lFCtA5InAtDvBIz3MatwcLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIVffszYkXDKW93R0mjG0bmOos3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDkwYzQxYzItMGJiZi0z NWRmLThmOTEtMmY0YTZhMGE3MzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJh+uRagLjKTX8xxUTHl7GFFxNm/fZ8LrYvk53NgIRf/LpV4xOSF XeGxnmd5M/4DmPuAqAqAR0QLyjCyCXmEmnDmAmM5hefVnmkyxC/7KXmoTUF8hH6n ynS4fsfawXxr4zrpzjhlvKjb0L2egTKDZ5bfNMWNE+b2DKYTO/mji71C4Y+GYHQU K0YrBXQFcvv9r/qKMREixyl68anYoV5AirhmRuHJfUIt1xI6D4djE8Pgdy20ZYgU I2RzwSDm/VvkiGjPzzPYAHpAddvEwt48jTz5C5SrEy/RTr4y2pD76hhoBpWoVR/k FNcVOxOIlSpnik8fVDpuzcWedUoWMEwySiI= -----END CERTIFICATE-----Generated at Wed Oct 29 09:11:58 2025 by rpki-client