$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff999aee-5f2c-3af5-b3c4-4fdc20bbda92.roa File: ff999aee-5f2c-3af5-b3c4-4fdc20bbda92.roa (raw, json) Hash identifier: AjiYpOWv2yPrcJgrIy+gFVtlKNjIyM8jScWPf0GDZT4= Subject key identifier: 64:84:2D:23:08:C8:96:51:5F:3F:51:9D:B5:92:06:91:35:AB:B8:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEB8B88F59D3F82E9A8395C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff999aee-5f2c-3af5-b3c4-4fdc20bbda92.roa Signing time: Wed 20 Aug 2025 14:36:52 +0000 ROA not before: Wed 20 Aug 2025 14:36:52 +0000 ROA not after: Tue 18 Nov 2025 15:36:52 +0000 asID: 396609 IP address blocks: 2001:502:7094::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:8b:88:f5:9d:3f:82:e9:a8:39:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 14:36:52 2025 GMT Not After : Nov 18 15:36:52 2025 GMT Subject: CN=11394f40-577d-4e55-9716-108a05f9046c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4b:ae:0c:74:75:56:dd:52:0d:08:e8:65:34: 53:69:44:33:6d:2f:4d:be:c0:d9:26:55:d7:b4:61: a4:a8:54:8d:7d:15:4c:21:c4:6a:00:5b:7f:01:f1: ce:ba:9f:ae:5b:f1:d7:39:a4:ab:b6:dd:72:aa:79: 8d:6f:c4:23:0c:4b:1e:d9:9a:b9:3d:df:05:02:ff: 10:16:29:03:4b:c6:56:dd:da:9b:91:82:c6:87:b0: d2:fb:b1:2d:a5:24:9b:cd:c3:c4:97:01:0c:05:f8: 21:01:0f:7f:d7:1a:08:c3:f6:33:43:2b:da:49:2a: 5c:41:0a:e6:44:ac:4c:3d:d1:65:06:a9:41:da:7a: aa:a4:0a:25:ae:e8:9b:73:e0:e3:66:9b:fc:65:61: 52:2b:20:86:84:64:95:7a:54:88:72:de:7b:f2:7f: 17:54:ac:e8:11:c2:ea:f3:5e:19:ab:86:06:d3:86: f9:04:dc:bb:ad:21:2a:39:d7:68:d4:00:e6:6d:04: e3:15:ef:8b:18:f8:10:44:56:68:46:45:54:14:bb: ff:39:15:1a:ae:e4:36:44:84:fd:f3:44:d5:e5:a8: f9:ff:99:80:61:c2:5c:d2:dc:82:a1:e7:d7:09:c6: 28:44:e9:26:08:a8:eb:13:82:3c:b0:1c:02:64:70: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:84:2D:23:08:C8:96:51:5F:3F:51:9D:B5:92:06:91:35:AB:B8:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff999aee-5f2c-3af5-b3c4-4fdc20bbda92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:59:94:bb:d4:5e:8f:d2:cf:d6:9c:36:b0:b8:cc:45:e6:39: 9c:ba:7c:eb:a6:fa:c5:54:2f:d9:35:06:f4:0e:6d:8a:d4:e0: 47:85:13:e3:bc:4d:96:48:e6:6e:03:ea:5b:90:d8:47:c3:ad: 66:dd:c1:c1:46:43:70:ba:e4:03:e5:45:9d:e7:ef:28:6f:de: 4b:4f:6a:9d:d7:1d:78:d9:90:08:30:1e:c9:80:0c:ed:a2:fc: 5d:bf:23:75:b3:ec:3a:82:b2:be:5e:0d:7c:a5:15:7e:af:01: 34:b3:65:22:10:a4:40:17:9e:b2:4f:f8:5e:b5:69:37:73:43: 4b:2d:2f:4f:45:2a:16:63:e6:be:5c:b4:61:49:8c:e6:01:42: 76:88:64:8f:78:58:1e:ca:8b:93:3a:f1:e8:7e:e7:09:32:91: 90:f9:2b:4b:87:9a:6d:b0:ff:d0:7d:59:e9:90:a4:24:7e:17: 02:9b:bf:20:0c:6e:5a:a3:bf:5a:4b:da:24:4b:2e:20:ad:b1: 88:b3:ee:3f:68:89:00:4c:58:f7:1e:b4:46:b1:54:2a:68:38: a6:d6:da:be:41:be:19:77:68:d4:78:20:ce:2d:f1:6d:fe:1a: 0f:38:90:cb:76:97:32:4b:1b:38:10:f7:c8:a2:d2:6a:57:93: 2b:db:49:e7 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErri4j1nT+C6ag5XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDE0MzY1MloXDTI1MTExODE1MzY1MlowLzEtMCsGA1UEAxMk MTEzOTRmNDAtNTc3ZC00ZTU1LTk3MTYtMTA4YTA1ZjkwNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0uuDHR1Vt1SDQjoZTRTaUQzbS9NvsDZJlXX tGGkqFSNfRVMIcRqAFt/AfHOup+uW/HXOaSrtt1yqnmNb8QjDEse2Zq5Pd8FAv8Q FikDS8ZW3dqbkYLGh7DS+7EtpSSbzcPElwEMBfghAQ9/1xoIw/YzQyvaSSpcQQrm RKxMPdFlBqlB2nqqpAolruibc+DjZpv8ZWFSKyCGhGSVelSIct578n8XVKzoEcLq 814Zq4YG04b5BNy7rSEqOddo1ADmbQTjFe+LGPgQRFZoRkVUFLv/ORUaruQ2RIT9 80TV5aj5/5mAYcJc0tyCoefXCcYoROkmCKjrE4I8sBwCZHDEVwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGSELSMIyJZRXz9RnbWSBpE1q7gxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY5OTlhZWUtNWYyYy0z YWY1LWIzYzQtNGZkYzIwYmJkYTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAaWZS71F6P0s/WnDawuMxF5jmcunzrpvrFVC/Z NQb0Dm2K1OBHhRPjvE2WSOZuA+pbkNhHw61m3cHBRkNwuuQD5UWd5+8ob95LT2qd 1x142ZAIMB7JgAztovxdvyN1s+w6grK+Xg18pRV+rwE0s2UiEKRAF56yT/hetWk3 c0NLLS9PRSoWY+a+XLRhSYzmAUJ2iGSPeFgeyouTOvHofucJMpGQ+StLh5ptsP/Q fVnpkKQkfhcCm78gDG5ao79aS9okSy4grbGIs+4/aIkATFj3HrRGsVQqaDim1tq+ Qb4Zd2jUeCDOLfFt/hoPOJDLdpcySxs4EPfIotJqV5Mr20nn -----END CERTIFICATE-----Generated at Wed Oct 29 07:00:07 2025 by rpki-client