$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff025e6a-1f89-358d-b8e9-2cab54c12ae6.roa File: ff025e6a-1f89-358d-b8e9-2cab54c12ae6.roa (raw, json) Hash identifier: PkRuT1nzte6ctBpyvKQdualIYN0KYg5yef9Icpp51gw= Subject key identifier: 9E:CC:35:F8:D5:44:40:82:B7:5C:72:B7:1B:6A:E3:E4:90:17:15:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC0B6EE8941616E53FA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff025e6a-1f89-358d-b8e9-2cab54c12ae6.roa Signing time: Tue 26 Aug 2025 12:32:11 +0000 ROA not before: Tue 26 Aug 2025 12:32:11 +0000 ROA not after: Mon 24 Nov 2025 13:32:11 +0000 asID: 396560 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c0:b6:ee:89:41:61:6e:53:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:11 2025 GMT Not After : Nov 24 13:32:11 2025 GMT Subject: CN=e242b813-5b00-43df-b4e2-7a372f594c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:88:a3:52:44:68:7c:db:8b:5e:b0:54:f1: 96:f7:55:1d:59:02:ac:88:80:df:44:96:91:7f:8c: b5:e1:13:80:7c:e6:71:80:e3:99:7c:26:39:0c:09: d4:b6:b7:dc:42:3c:cf:75:1f:6a:65:41:6c:6e:f7: 2c:97:01:ed:20:38:67:07:a8:56:b6:36:dd:33:6b: 0b:05:23:3d:7d:e5:85:62:0b:09:6f:b4:7a:bd:3e: 4a:19:55:ea:9c:04:5b:8a:65:71:ca:ab:b7:9b:0c: 60:78:63:ba:fb:97:0d:bf:20:83:12:c7:cf:48:67: ef:4a:1d:52:c9:28:23:a6:c1:09:7b:27:97:da:32: 8d:c3:5a:10:61:99:82:70:19:73:6c:41:a8:a1:e6: 48:c8:b4:bb:03:a6:92:af:5a:09:16:af:6c:0a:cf: 67:2c:84:87:ff:75:46:b4:cf:29:1c:95:4f:dc:4b: fa:98:ca:c5:ac:ea:22:18:c2:48:45:8e:aa:5c:25: 00:05:e3:33:63:b1:fa:91:05:9e:13:ce:b2:ad:9d: 71:52:e7:d6:b3:48:7e:51:4c:22:68:9b:2f:a1:91: 1a:fe:c8:93:ba:b8:11:e2:93:7c:57:41:d0:62:5b: 67:67:7b:cd:e8:dd:0c:63:57:d8:68:8f:11:10:60: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CC:35:F8:D5:44:40:82:B7:5C:72:B7:1B:6A:E3:E4:90:17:15:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff025e6a-1f89-358d-b8e9-2cab54c12ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:67:b5:03:97:10:0b:80:39:aa:1b:df:26:fc:99:17:f5:1b: a7:c5:96:8c:61:5d:7e:8c:4f:dc:ea:8b:a8:99:fc:14:62:f6: be:4a:3d:01:ea:88:b0:15:5c:eb:04:54:c4:98:4a:17:9f:94: da:97:e7:60:cc:25:fb:ee:05:78:7d:18:50:c1:31:ae:dd:c1: 0f:9f:8b:e8:b5:5e:93:71:d7:ca:63:15:1d:ab:ae:0a:bd:55: c1:db:0d:7a:75:04:73:3a:dd:3b:07:41:ef:e2:6b:cb:c9:31: 68:df:fb:65:1c:58:80:13:1d:d2:ba:a0:9b:9e:fd:5b:bb:42: 2c:8d:9d:c8:ea:05:aa:5e:d8:bd:86:ac:6a:de:08:e6:3c:1e: 7c:4d:a4:26:45:9e:5d:14:40:3d:3d:01:66:3c:e6:0c:73:13: 09:db:02:46:4f:4e:ce:02:80:67:5b:6e:02:39:2b:16:10:59: 39:5e:1b:48:9c:f0:38:20:94:eb:e0:4d:74:85:4c:12:72:ee: 73:3c:f3:f9:e5:6b:7e:ad:6c:62:30:32:4e:24:3f:a6:fb:ac: f3:d7:1c:0a:8a:ad:3e:65:d0:e7:50:f6:f0:c8:11:f9:c2:f1: ad:c6:5b:39:ff:86:4f:db:e8:90:2c:9d:23:d2:6e:da:11:d4: 64:e6:2e:18 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr8DcC27olBYW5T+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMVoXDTI1MTEyNDEzMzIxMVowLzEtMCsGA1UEAxMk ZTI0MmI4MTMtNWIwMC00M2RmLWI0ZTItN2EzNzJmNTk0YzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9KIo1JEaHzbi16wVPGW91UdWQKsiIDfRJaR f4y14ROAfOZxgOOZfCY5DAnUtrfcQjzPdR9qZUFsbvcslwHtIDhnB6hWtjbdM2sL BSM9feWFYgsJb7R6vT5KGVXqnARbimVxyqu3mwxgeGO6+5cNvyCDEsfPSGfvSh1S ySgjpsEJeyeX2jKNw1oQYZmCcBlzbEGooeZIyLS7A6aSr1oJFq9sCs9nLISH/3VG tM8pHJVP3Ev6mMrFrOoiGMJIRY6qXCUABeMzY7H6kQWeE86yrZ1xUufWs0h+UUwi aJsvoZEa/siTurgR4pN8V0HQYltnZ3vN6N0MY1fYaI8REGBTcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7MNfjVRECCt1xytxtq4+SQFxWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmYwMjVlNmEtMWY4OS0z NThkLWI4ZTktMmNhYjU0YzEyYWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABNntQOXEAuAOaob3yb8mRf1G6fFloxhXX6MT9zqi6iZ/BRi9r5K PQHqiLAVXOsEVMSYSheflNqX52DMJfvuBXh9GFDBMa7dwQ+fi+i1XpNx18pjFR2r rgq9VcHbDXp1BHM63TsHQe/ia8vJMWjf+2UcWIATHdK6oJue/Vu7QiyNncjqBape 2L2GrGreCOY8HnxNpCZFnl0UQD09AWY85gxzEwnbAkZPTs4CgGdbbgI5KxYQWTle G0ic8DgglOvgTXSFTBJy7nM88/nla36tbGIwMk4kP6b7rPPXHAqKrT5l0OdQ9vDI EfnC8a3GWzn/hk/b6JAsnSPSbtoR1GTmLhg= -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:50 2025 by rpki-client