$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6198256-9ea8-3ff7-9928-e7dae9cbf534.roa File: f6198256-9ea8-3ff7-9928-e7dae9cbf534.roa (raw, json) Hash identifier: bhQtYwk+kefNBMqpDlNI5K1z1hUHDv9ebxOHWihMoKc= Subject key identifier: 31:AC:D4:E8:32:DC:DA:4E:DC:7A:57:29:2C:85:09:D1:9C:45:3A:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0A11963A3251378DA0E85000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6198256-9ea8-3ff7-9928-e7dae9cbf534.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 396542 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:96:3a:32:51:37:8d:a0:e8:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=7b3c56b0-aa7a-4d75-939c-c7c30cae2610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:d4:29:54:17:70:fa:40:e0:80:fb:eb:2b: de:39:56:b2:e2:28:ce:91:ef:15:d6:30:2b:a0:ac: 6a:6c:dd:e8:e7:e8:7c:f3:4a:15:98:ca:49:ea:64: 9e:26:73:da:1d:f1:49:8d:e4:fb:4b:10:2e:92:36: e1:47:2d:d9:ed:b9:df:cf:cc:85:35:f9:55:2a:80: de:1f:5b:61:4e:0b:c5:1c:c0:03:f6:3f:9e:7e:50: 01:5b:09:37:85:f0:f7:6a:e0:d6:51:c4:02:14:b6: e6:51:f8:89:6c:eb:00:87:0a:2a:96:b1:a0:05:5a: cf:d2:d4:f9:be:94:73:5f:79:96:07:8b:b5:ff:d1: 1e:eb:f3:9d:9f:74:4a:e5:cc:cd:e8:b3:1d:84:b7: 52:a7:9f:bd:b6:c9:69:14:da:08:38:03:e8:0b:40: 0b:18:91:22:a9:5f:5c:92:0d:d3:d4:83:67:75:4d: 25:bf:e8:f6:32:09:91:f1:c0:74:c4:1f:4e:0a:d4: 7a:25:36:26:58:a9:a5:11:a9:ee:7b:7e:80:b9:59: 32:53:05:de:68:88:33:b2:32:f7:b0:c5:8f:71:47: ec:4f:74:9d:af:12:34:b4:d2:b8:89:6a:3e:2d:05: 5f:04:b8:ab:61:78:e7:88:15:9f:82:b2:25:5b:94: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:AC:D4:E8:32:DC:DA:4E:DC:7A:57:29:2C:85:09:D1:9C:45:3A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6198256-9ea8-3ff7-9928-e7dae9cbf534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1e:bd:a6:83:88:2d:aa:f9:18:09:c4:d1:fe:ce:b9:fd:c4: ef:fb:c5:af:83:e5:84:da:fc:68:c9:ac:f5:40:a9:6a:ad:68: d4:69:3e:5d:f5:9d:ef:ef:b3:4b:ae:87:d8:d8:05:54:d8:14: 2d:65:ad:7e:09:43:2e:bd:67:e7:7b:27:c0:09:34:97:b7:68: 26:d2:07:fa:c5:1f:75:2b:f8:83:be:b5:cd:e3:00:92:af:29: c0:61:b7:c6:e9:cd:37:2f:57:39:86:03:5b:b8:23:32:66:1c: cf:88:5d:c0:39:97:3c:bd:a3:12:97:7c:5e:1f:95:d5:d1:c0: e9:2b:89:4c:8d:b8:98:f6:11:b7:0a:30:1d:06:44:bc:52:17: 11:d6:74:c0:bd:97:65:e3:07:12:f9:6e:03:ef:22:1c:a9:46: ab:d7:bd:d6:f5:77:08:fb:6b:f0:3f:86:10:2f:cc:b8:33:89: 9f:07:86:7c:ee:9e:c6:63:a2:44:9c:b0:7a:c0:2e:be:07:39: 9a:01:aa:a3:6b:74:7a:e9:89:68:3c:67:d9:84:25:72:45:20: 77:23:d1:d1:3e:34:3d:9a:8d:7f:35:f0:4a:81:67:2c:82:7e: 3a:60:7d:d3:13:2c:07:1d:8f:79:5d:f5:3a:dd:7d:d9:29:97: b9:59:e0:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsKEZY6MlE3jaDoUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk N2IzYzU2YjAtYWE3YS00ZDc1LTkzOWMtYzdjMzBjYWUyNjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbvUKVQXcPpA4ID76yveOVay4ijOke8V1jAr oKxqbN3o5+h880oVmMpJ6mSeJnPaHfFJjeT7SxAukjbhRy3Z7bnfz8yFNflVKoDe H1thTgvFHMAD9j+eflABWwk3hfD3auDWUcQCFLbmUfiJbOsAhwoqlrGgBVrP0tT5 vpRzX3mWB4u1/9Ee6/Odn3RK5czN6LMdhLdSp5+9tslpFNoIOAPoC0ALGJEiqV9c kg3T1INndU0lv+j2MgmR8cB0xB9OCtR6JTYmWKmlEanue36AuVkyUwXeaIgzsjL3 sMWPcUfsT3SdrxI0tNK4iWo+LQVfBLirYXjniBWfgrIlW5QNqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGs1Ogy3NpO3HpXKSyFCdGcRTo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjYxOTgyNTYtOWVhOC0z ZmY3LTk5MjgtZTdkYWU5Y2JmNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC4evaaDiC2q+RgJxNH+zrn9xO/7xa+D5YTa/GjJrPVAqWqtaNRp Pl31ne/vs0uuh9jYBVTYFC1lrX4JQy69Z+d7J8AJNJe3aCbSB/rFH3Ur+IO+tc3j AJKvKcBht8bpzTcvVzmGA1u4IzJmHM+IXcA5lzy9oxKXfF4fldXRwOkriUyNuJj2 EbcKMB0GRLxSFxHWdMC9l2XjBxL5bgPvIhypRqvXvdb1dwj7a/A/hhAvzLgziZ8H hnzunsZjokScsHrALr4HOZoBqqNrdHrpiWg8Z9mEJXJFIHcj0dE+ND2ajX818EqB ZyyCfjpgfdMTLAcdj3ld9Trdfdkpl7lZ4MI= -----END CERTIFICATE-----Generated at Wed Sep 10 17:53:16 2025 by rpki-client