$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9189385-3aa6-3f4c-958d-130c1866a4a7.roa File: f9189385-3aa6-3f4c-958d-130c1866a4a7.roa (raw, json) Hash identifier: DFxAJzIOD3718xONhni5OkZZrA+aN78UYAj3zS6/JgE= Subject key identifier: DB:B6:59:DB:63:CE:4E:B5:81:4B:C1:81:38:E6:E6:B2:77:8E:A1:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC71D2F1FDA20AC50BD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9189385-3aa6-3f4c-958d-130c1866a4a7.roa Signing time: Tue 26 Aug 2025 12:32:14 +0000 ROA not before: Tue 26 Aug 2025 12:32:14 +0000 ROA not after: Mon 24 Nov 2025 13:32:14 +0000 asID: 396585 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c7:1d:2f:1f:da:20:ac:50:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:14 2025 GMT Not After : Nov 24 13:32:14 2025 GMT Subject: CN=25059ff6-c5cf-4773-9a23-bd17b96b25ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4a:f0:6b:f2:02:ab:ba:9d:c4:84:68:07:d4: 58:d0:7b:8c:6a:7c:c8:ad:bb:ea:c3:c2:13:15:81: a0:83:bb:46:b1:f7:b1:81:2b:05:b7:cc:2f:c6:dd: a6:05:b4:2d:87:1a:9c:63:41:aa:da:78:7b:d8:75: 25:ca:72:f3:6a:65:93:31:f6:d3:7f:99:49:de:64: d8:0b:16:bd:e3:2f:58:2f:e1:4e:ca:9f:a3:ca:42: 7c:0c:06:e1:dc:3b:d6:00:e9:67:d8:cd:0d:65:84: 57:3e:8c:54:8e:eb:4f:05:ae:5d:2f:78:70:71:cf: a9:98:85:fb:47:0e:89:0b:32:37:02:7b:e9:53:88: 16:97:b0:6d:68:35:03:9e:09:33:bc:be:16:55:e5: 8e:7f:86:b9:a8:90:69:4b:db:77:09:87:8d:b0:20: 4a:95:e9:ca:93:8d:a1:5c:cd:6a:7f:dc:ef:99:17: 1c:7a:74:01:2c:6b:68:3e:28:71:3c:59:ae:34:25: 4f:a9:84:23:5f:ad:c8:38:a9:8b:8a:c7:18:86:9c: 7b:bb:f6:21:c8:6e:88:52:b8:5e:25:bf:87:80:f6: cd:74:5d:0f:f5:06:dc:94:71:12:48:1c:e0:8a:91: e8:a2:57:29:8e:d6:20:5f:ac:65:d1:a6:e9:e6:14: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B6:59:DB:63:CE:4E:B5:81:4B:C1:81:38:E6:E6:B2:77:8E:A1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9189385-3aa6-3f4c-958d-130c1866a4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0f:6f:df:9c:f6:15:ed:20:bb:2e:99:1b:c1:6c:0d:35:9f: 86:4b:92:2f:e4:83:92:91:f4:96:c3:d4:78:98:77:af:1b:88: cb:27:9c:dc:af:87:96:e8:e8:d1:54:31:39:9b:59:84:9a:1c: e1:2a:ce:27:7f:a0:73:3a:dd:f9:a2:85:32:8b:34:5b:d7:66: cd:03:be:ee:83:a2:53:e8:ba:ec:69:4b:04:e3:e8:92:b0:d1: 8e:2b:ef:ba:61:7c:78:6f:bd:70:ab:cd:39:17:93:21:b6:7b: 15:18:0e:75:3a:d4:a6:ad:32:b8:a5:c6:0b:64:ac:6e:45:42: 26:c0:77:80:cb:4a:0f:28:8a:49:d8:c5:70:77:5a:a2:00:e1: f8:6f:18:07:e7:9a:a4:2c:67:5b:93:02:0c:df:c5:35:20:44: 49:21:ab:d7:04:3c:e2:fd:42:3e:36:16:7b:9b:60:f5:bf:c3: 3b:e9:ba:64:14:78:31:cb:63:5f:3d:29:03:09:13:1c:93:71: 1a:49:f3:84:4f:d8:fe:56:a7:8c:0a:9a:0b:36:55:c3:d1:50: a9:9b:0a:15:1e:a1:7f:91:88:9a:74:82:73:0d:d6:ba:d3:b4: 43:b1:ff:b0:96:8b:93:36:39:d6:16:f0:c3:1c:9f:fd:41:6e: 31:85:cf:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DccdLx/aIKxQvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNFoXDTI1MTEyNDEzMzIxNFowLzEtMCsGA1UEAxMk MjUwNTlmZjYtYzVjZi00NzczLTlhMjMtYmQxN2I5NmIyNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjErwa/ICq7qdxIRoB9RY0HuManzIrbvqw8IT FYGgg7tGsfexgSsFt8wvxt2mBbQthxqcY0Gq2nh72HUlynLzamWTMfbTf5lJ3mTY Cxa94y9YL+FOyp+jykJ8DAbh3DvWAOln2M0NZYRXPoxUjutPBa5dL3hwcc+pmIX7 Rw6JCzI3AnvpU4gWl7BtaDUDngkzvL4WVeWOf4a5qJBpS9t3CYeNsCBKlenKk42h XM1qf9zvmRccenQBLGtoPihxPFmuNCVPqYQjX63IOKmLiscYhpx7u/YhyG6IUrhe Jb+HgPbNdF0P9QbclHESSBzgipHoolcpjtYgX6xl0abp5hRy0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNu2Wdtjzk61gUvBgTjm5rJ3jqH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjkxODkzODUtM2FhNi0z ZjRjLTk1OGQtMTMwYzE4NjZhNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQPb9+c9hXtILsumRvBbA01n4ZLki/kg5KR9JbD1HiYd68biMsn nNyvh5bo6NFUMTmbWYSaHOEqzid/oHM63fmihTKLNFvXZs0Dvu6DolPouuxpSwTj 6JKw0Y4r77phfHhvvXCrzTkXkyG2exUYDnU61KatMrilxgtkrG5FQibAd4DLSg8o iknYxXB3WqIA4fhvGAfnmqQsZ1uTAgzfxTUgREkhq9cEPOL9Qj42FnubYPW/wzvp umQUeDHLY189KQMJExyTcRpJ84RP2P5Wp4wKmgs2VcPRUKmbChUeoX+RiJp0gnMN 1rrTtEOx/7CWi5M2OdYW8MMcn/1BbjGFz4I= -----END CERTIFICATE-----Generated at Wed Sep 10 20:30:51 2025 by rpki-client