$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dafdcbbb-b3a1-330e-889a-723b5e35d4ac.roa File: dafdcbbb-b3a1-330e-889a-723b5e35d4ac.roa (raw, json) Hash identifier: auqz8JPYoAZsd0Ofe+Sr7kHiOhtnEI26AJvoPk1ZnF8= Subject key identifier: 4E:E6:A3:8D:89:82:1D:73:F9:91:DF:62:93:57:64:61:80:00:8B:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B180700F3586DE44E1D14EB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dafdcbbb-b3a1-330e-889a-723b5e35d4ac.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 397195 IP address blocks: 2001:501:b1f9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:07:00:f3:58:6d:e4:4e:1d:14:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=f2a2968f-e5be-4051-b580-5c65fae8a884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ee:7a:32:3c:df:1b:ce:ec:ae:cc:5e:ea:7e: 8f:d2:ba:6a:e0:a4:f7:e9:01:53:b5:5d:9d:c5:f7: 17:0a:c5:ea:5c:09:b8:5b:bd:77:4c:4f:61:4c:12: 98:e0:3e:ab:e9:be:cf:64:e5:c2:01:82:75:d1:fd: a0:1f:28:32:6e:53:dd:e0:81:3e:71:f7:72:24:66: c5:11:ea:18:33:f0:19:b2:08:fb:24:b5:79:40:71: 97:31:7c:44:d5:98:4a:1e:83:62:a1:fb:44:11:fb: 3a:42:9b:08:b6:5e:77:43:0e:c6:f2:df:c6:bd:11: b6:44:e9:1c:7f:cc:ba:47:3b:b6:44:9d:3c:6b:e5: c9:fb:50:bb:55:d6:45:93:1f:95:f1:94:54:1a:49: 0d:36:39:44:87:5d:e3:b0:b5:7a:36:cd:3b:1f:83: 5c:f2:b9:e6:9e:ed:d8:6f:37:34:2a:2d:ec:9a:be: f8:82:14:f5:13:18:e8:95:e3:ff:72:e7:dd:9a:31: 87:bc:4f:21:cc:a8:27:7f:30:f9:3c:fe:e4:e6:64: 39:39:ba:2e:1c:8e:da:47:f1:62:98:af:78:07:ca: e0:59:70:4a:ca:df:3a:dd:04:db:c3:89:61:b8:68: 52:b8:bc:30:83:e0:b0:f9:83:79:d6:31:27:b6:d5: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E6:A3:8D:89:82:1D:73:F9:91:DF:62:93:57:64:61:80:00:8B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dafdcbbb-b3a1-330e-889a-723b5e35d4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:9c:39:06:6e:4b:5c:99:a7:e7:94:af:44:31:59:a6:2a:72: da:55:16:b3:f3:bb:34:02:00:1c:c6:84:9f:dc:37:95:7c:f9: 24:08:4c:0f:e1:a2:53:87:56:d8:74:12:dd:2a:60:8b:05:c2: 2b:70:90:40:5a:a2:12:c4:90:52:86:42:8d:52:98:17:36:06: 07:e5:46:77:47:c1:ca:b1:d2:92:a7:b1:17:5e:2b:6c:62:66: cd:0b:a8:a5:5c:a8:a9:d0:80:81:0b:22:02:06:f6:8d:d6:e9: 50:87:68:f2:c8:94:5b:58:79:83:27:03:c0:fe:cd:20:b4:7e: a1:c8:b5:01:3f:2a:38:ab:7f:30:90:d8:c3:92:20:1c:21:71: a3:63:74:a7:6b:c6:7c:2f:87:c3:9b:4e:d5:04:97:a6:35:5e: 30:b5:14:b1:0d:7f:19:5b:a8:fa:35:c9:23:33:cf:b6:ed:ce: 46:40:9b:a9:b4:0a:6a:f0:bf:a1:8d:24:8f:69:83:bc:1f:fd: 89:74:74:02:a7:c9:f0:44:c5:71:85:41:ed:e2:2c:93:4f:cb: 5d:78:bb:80:8e:44:1c:21:db:80:8d:1d:74:9b:b0:de:ff:c4: 2b:36:c2:df:69:1d:8f:34:6e:49:19:a5:dd:8b:27:60:25:92: 27:97:28:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBwDzWG3kTh0U64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjJhMjk2OGYtZTViZS00MDUxLWI1ODAtNWM2NWZhZThhODg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+56MjzfG87srsxe6n6P0rpq4KT36QFTtV2d xfcXCsXqXAm4W713TE9hTBKY4D6r6b7PZOXCAYJ10f2gHygyblPd4IE+cfdyJGbF EeoYM/AZsgj7JLV5QHGXMXxE1ZhKHoNioftEEfs6QpsItl53Qw7G8t/GvRG2ROkc f8y6Rzu2RJ08a+XJ+1C7VdZFkx+V8ZRUGkkNNjlEh13jsLV6Ns07H4Nc8rnmnu3Y bzc0Ki3smr74ghT1ExjoleP/cufdmjGHvE8hzKgnfzD5PP7k5mQ5ObouHI7aR/Fi mK94B8rgWXBKyt863QTbw4lhuGhSuLwwg+Cw+YN51jEnttXKUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE7mo42Jgh1z+ZHfYpNXZGGAAIutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGFmZGNiYmItYjNhMS0z MzBlLTg4OWEtNzIzYjVlMzVkNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF6cOQZuS1yZp+eUr0QxWaYqctpVFrPzuzQCABzGhJ/cN5V8+SQI TA/holOHVth0Et0qYIsFwitwkEBaohLEkFKGQo1SmBc2BgflRndHwcqx0pKnsRde K2xiZs0LqKVcqKnQgIELIgIG9o3W6VCHaPLIlFtYeYMnA8D+zSC0fqHItQE/Kjir fzCQ2MOSIBwhcaNjdKdrxnwvh8ObTtUEl6Y1XjC1FLENfxlbqPo1ySMzz7btzkZA m6m0Cmrwv6GNJI9pg7wf/Yl0dAKnyfBExXGFQe3iLJNPy114u4CORBwh24CNHXSb sN7/xCs2wt9pHY80bkkZpd2LJ2AlkieXKNg= -----END CERTIFICATE-----Generated at Wed Sep 10 17:53:12 2025 by rpki-client