$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2689a7f-1253-3bbf-84f9-116fc1144231.roa File: f2689a7f-1253-3bbf-84f9-116fc1144231.roa (raw, json) Hash identifier: 1mRRiQPTu3tKSxZZpS4iYiD5GfsYR9kOWAh5g4c8pVQ= Subject key identifier: BC:A4:28:31:69:9D:2C:6A:7F:A8:31:AA:8F:F8:C2:05:9C:F6:60:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC686FA78281F95FF7210 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2689a7f-1253-3bbf-84f9-116fc1144231.roa Signing time: Tue 26 Aug 2025 12:32:13 +0000 ROA not before: Tue 26 Aug 2025 12:32:13 +0000 ROA not after: Mon 24 Nov 2025 13:32:13 +0000 asID: 21313 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c6:86:fa:78:28:1f:95:ff:72:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:13 2025 GMT Not After : Nov 24 13:32:13 2025 GMT Subject: CN=9c1c3361-ed79-4fad-b2b5-72f21214a57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:05:47:ec:76:b0:b0:3f:36:d8:2c:52:be: 71:f9:12:0c:bf:73:6c:7a:ab:e6:79:24:b5:c0:f8: 39:b8:f6:3d:c8:70:9f:d3:ea:71:d1:1b:0b:4a:a0: 97:21:b8:49:27:fe:f4:3e:89:e8:e7:2b:9e:e9:3a: bf:91:d4:4c:b3:ad:7e:bb:f8:c2:78:31:72:9d:84: b4:8d:26:70:43:94:09:85:6f:60:8d:20:30:03:d5: 46:40:5f:99:4c:1b:79:b0:a2:67:dd:e1:df:0f:0c: c8:54:0d:d3:f5:f0:05:d7:9c:38:7e:d9:bc:f2:d8: 8b:26:57:17:2a:88:aa:c4:f4:ed:0c:53:7b:e0:01: 5b:89:d2:a9:58:70:9d:b0:68:e4:6c:8c:3c:8d:27: 26:f7:91:db:c1:45:48:63:01:13:f4:ec:68:78:0d: 6e:e8:2a:48:d3:6c:71:dc:38:7e:45:d4:3b:e0:5f: 87:45:3c:20:4f:f1:0a:28:42:9d:c5:8a:22:7e:96: 9a:0d:12:f1:c6:7e:2f:3c:93:2e:ba:d6:67:a6:aa: 39:1d:77:ca:7d:8e:d3:13:36:3f:be:aa:b4:30:1d: 2b:e4:72:bf:ae:0c:bc:02:f1:4b:0e:61:19:e6:b9: 0f:fd:7e:05:9f:13:be:a0:f6:78:1d:d3:ea:30:ec: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A4:28:31:69:9D:2C:6A:7F:A8:31:AA:8F:F8:C2:05:9C:F6:60:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2689a7f-1253-3bbf-84f9-116fc1144231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b8:6e:75:ce:bd:66:b8:36:9d:8b:43:32:b3:64:cf:7d:63: 98:b1:b8:a0:81:ce:23:9b:8f:6b:23:39:68:92:a8:57:3a:33: 00:68:48:71:25:b9:82:02:33:2a:13:92:1b:f3:2f:4d:6d:96: e0:28:ea:7e:b3:17:63:41:c3:e4:67:c5:13:86:b4:12:5f:4e: 17:05:62:17:b6:b9:98:b9:2d:1c:88:95:8b:1c:40:14:d4:79: bf:dd:9f:df:4d:7b:66:07:f0:08:5d:0d:c1:32:6f:1f:4d:df: 59:7e:17:87:d5:29:aa:27:89:2a:88:00:25:c5:a0:bf:3f:98: 76:0a:42:41:c4:16:13:9d:dd:c4:4c:5d:c5:b3:e2:44:27:cd: da:37:17:55:35:e5:7c:2f:d0:da:0f:5e:a0:14:11:29:92:8b: 57:5b:5c:84:36:ca:84:94:4e:91:cc:d3:bf:07:0a:1c:64:04: 5c:90:72:1c:8f:51:54:bf:24:f1:51:65:e3:35:db:23:2e:db: a8:e1:47:69:46:34:ea:52:9a:0a:eb:10:61:8e:91:43:4a:00: ad:66:94:c4:06:17:bf:db:39:74:0f:51:f5:56:09:ff:7d:25: 52:b4:b0:38:b6:bf:9b:4c:5c:1c:93:fa:75:84:8b:84:b4:0f: 86:2e:e6:db -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcaG+ngoH5X/chAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxM1oXDTI1MTEyNDEzMzIxM1owLzEtMCsGA1UEAxMk OWMxYzMzNjEtZWQ3OS00ZmFkLWIyYjUtNzJmMjEyMTRhNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi4FR+x2sLA/NtgsUr5x+RIMv3NseqvmeSS1 wPg5uPY9yHCf0+px0RsLSqCXIbhJJ/70Pono5yue6Tq/kdRMs61+u/jCeDFynYS0 jSZwQ5QJhW9gjSAwA9VGQF+ZTBt5sKJn3eHfDwzIVA3T9fAF15w4ftm88tiLJlcX KoiqxPTtDFN74AFbidKpWHCdsGjkbIw8jScm95HbwUVIYwET9OxoeA1u6CpI02xx 3Dh+RdQ74F+HRTwgT/EKKEKdxYoifpaaDRLxxn4vPJMuutZnpqo5HXfKfY7TEzY/ vqq0MB0r5HK/rgy8AvFLDmEZ5rkP/X4FnxO+oPZ4HdPqMOwkuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLykKDFpnSxqf6gxqo/4wgWc9mDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjI2ODlhN2YtMTI1My0z YmJmLTg0ZjktMTE2ZmMxMTQ0MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGy4bnXOvWa4Np2LQzKzZM99Y5ixuKCBziObj2sjOWiSqFc6MwBo SHEluYICMyoTkhvzL01tluAo6n6zF2NBw+RnxROGtBJfThcFYhe2uZi5LRyIlYsc QBTUeb/dn99Ne2YH8AhdDcEybx9N31l+F4fVKaoniSqIACXFoL8/mHYKQkHEFhOd 3cRMXcWz4kQnzdo3F1U15Xwv0NoPXqAUESmSi1dbXIQ2yoSUTpHM078HChxkBFyQ chyPUVS/JPFRZeM12yMu26jhR2lGNOpSmgrrEGGOkUNKAK1mlMQGF7/bOXQPUfVW Cf99JVK0sDi2v5tMXByT+nWEi4S0D4Yu5ts= -----END CERTIFICATE-----Generated at Wed Sep 10 18:03:13 2025 by rpki-client