$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa File: f09e69da-b086-3a26-b789-5a8b5ddee439.roa (raw, json) Hash identifier: UHDgF6F1ws2vz6EsIRLnfqnfjyoz/PRT7lwL7mznZps= Subject key identifier: 22:88:7D:60:4F:38:1E:D3:B4:A1:BE:88:B8:A8:CD:DE:3D:C1:E5:35 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACE0BA8D4329AC4C819C27A20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa Signing time: Sun 10 Aug 2025 01:00:32 +0000 ROA not before: Sun 10 Aug 2025 01:00:32 +0000 ROA not after: Sat 08 Nov 2025 02:00:32 +0000 asID: 7342 IP address blocks: 2001:502:be98::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:0b:a8:d4:32:9a:c4:c8:19:c2:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 01:00:32 2025 GMT Not After : Nov 8 02:00:32 2025 GMT Subject: CN=1a01ed52-b799-4678-af26-b3c60e746cab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:57:82:1d:7a:1c:a8:28:0c:a0:35:54:14:28: 2d:62:93:2f:5e:86:74:08:8e:0f:d2:76:05:83:3b: b4:a4:18:50:e0:da:8e:3c:01:cf:d7:f0:66:44:7e: ef:d0:49:5c:1f:40:19:d7:f8:c4:0c:ba:94:ab:5a: 38:ae:3c:c2:86:e1:30:e7:79:a8:a7:ec:56:af:dc: 2f:de:b9:1b:cf:33:a4:3f:23:bf:86:4f:34:56:5e: 21:c7:ee:98:8a:03:4b:9a:0e:30:ea:68:2d:83:2f: e2:3e:f2:66:fb:b2:74:fd:30:b3:04:2a:dd:c7:68: 49:4d:2c:69:96:64:e6:f7:b2:68:5e:dc:f4:cc:2e: 43:b9:ef:60:aa:10:93:9e:c2:01:65:05:6f:5b:c0: 1c:1c:ae:3c:9e:e2:35:40:c6:38:7d:d4:ea:e6:59: 13:e9:1b:d7:0f:c7:ca:2d:ce:fe:03:67:55:20:22: 2e:58:dd:65:8e:79:4d:40:3f:00:cb:52:9b:4e:6a: e3:11:3c:d2:aa:9d:48:3e:43:31:db:33:7c:fc:3b: ce:1c:a7:08:b8:f5:57:4b:e9:15:ad:33:a1:d3:d5: a2:49:4d:fe:ab:34:95:de:99:87:81:be:77:ad:f2: ea:7c:b5:7a:89:cb:6b:3b:45:4e:6d:54:b5:52:43: 70:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:88:7D:60:4F:38:1E:D3:B4:A1:BE:88:B8:A8:CD:DE:3D:C1:E5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09e69da-b086-3a26-b789-5a8b5ddee439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:be98::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d4:6e:c4:b8:23:35:9d:a1:58:4f:f7:5a:e1:41:8a:9b:9e: 21:fb:29:28:d0:70:0b:c6:84:02:4a:a5:62:38:ee:72:28:ec: 70:3e:e9:46:fb:fa:d4:2a:5b:5e:8b:1d:06:2c:61:c1:2a:44: d4:5f:57:97:73:0a:94:3f:51:8c:9c:ca:ac:c0:1e:55:0a:51: 5f:fb:40:e3:e4:df:99:4b:5f:0f:aa:3a:2f:e2:00:8c:fa:c4: 3b:28:a8:58:e1:f3:f7:3e:bb:c9:e7:5c:de:a9:a6:77:f3:f4: 45:43:dc:9b:57:ef:ae:32:b6:e0:33:6c:79:83:8e:cf:68:b7: 6d:d5:73:d7:6c:0f:d4:3f:70:52:4d:91:cd:22:1a:9e:b5:a1: 41:4d:29:88:35:09:e6:f0:6c:aa:f2:e4:e4:d5:f7:84:53:14: db:a6:e2:09:6a:29:fb:d5:93:4d:14:29:a7:8f:ed:7e:3f:b3: ae:fc:13:50:68:2f:de:dd:96:3e:86:55:36:70:d8:cb:32:05: eb:4c:80:b2:2b:16:d8:02:44:95:f2:74:c2:c0:00:08:9c:1b: 43:22:03:fc:13:e6:30:0b:f3:57:09:09:d2:58:85:d8:ef:8d: f1:14:41:20:da:64:26:14:a2:7c:8d:a1:1e:bd:29:a8:8b:f2: 81:d9:8c:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErOC6jUMprEyBnCeiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMDAxMDAzMloXDTI1MTEwODAyMDAzMlowLzEtMCsGA1UEAxMk MWEwMWVkNTItYjc5OS00Njc4LWFmMjYtYjNjNjBlNzQ2Y2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1eCHXocqCgMoDVUFCgtYpMvXoZ0CI4P0nYF gzu0pBhQ4NqOPAHP1/BmRH7v0ElcH0AZ1/jEDLqUq1o4rjzChuEw53mop+xWr9wv 3rkbzzOkPyO/hk80Vl4hx+6YigNLmg4w6mgtgy/iPvJm+7J0/TCzBCrdx2hJTSxp lmTm97JoXtz0zC5Due9gqhCTnsIBZQVvW8AcHK48nuI1QMY4fdTq5lkT6RvXD8fK Lc7+A2dVICIuWN1ljnlNQD8Ay1KbTmrjETzSqp1IPkMx2zN8/DvOHKcIuPVXS+kV rTOh09WiSU3+qzSV3pmHgb53rfLqfLV6ictrO0VObVS1UkNwLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCKIfWBPOB7TtKG+iLiozd49weU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjA5ZTY5ZGEtYjA4Ni0z YTI2LWI3ODktNWE4YjVkZGVlNDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAr6Y MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPUbsS4IzWdoVhP91rhQYqbniH7KSjQcAvGhAJKpWI47nIo7HA+ 6Ub7+tQqW16LHQYsYcEqRNRfV5dzCpQ/UYycyqzAHlUKUV/7QOPk35lLXw+qOi/i AIz6xDsoqFjh8/c+u8nnXN6ppnfz9EVD3JtX764ytuAzbHmDjs9ot23Vc9dsD9Q/ cFJNkc0iGp61oUFNKYg1CebwbKry5OTV94RTFNum4glqKfvVk00UKaeP7X4/s678 E1BoL97dlj6GVTZw2MsyBetMgLIrFtgCRJXydMLAAAicG0MiA/wT5jAL81cJCdJY hdjvjfEUQSDaZCYUonyNoR69KaiL8oHZjE4= -----END CERTIFICATE-----Generated at Wed Oct 29 09:14:47 2025 by rpki-client