$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b3e4574-8a31-369d-9a35-5cdfc6185194.roa File: 0b3e4574-8a31-369d-9a35-5cdfc6185194.roa (raw, json) Hash identifier: QLcgK41peYfk/0SrWqXgAJhydFoN31f2KTTedOVUPPY= Subject key identifier: 68:B6:BA:60:64:8A:83:1F:AE:E8:B3:F1:BF:A6:3C:B5:30:9B:88:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C8581A00FD1C681BA580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b3e4574-8a31-369d-9a35-5cdfc6185194.roa Signing time: Thu 21 Aug 2025 12:31:04 +0000 ROA not before: Thu 21 Aug 2025 12:31:04 +0000 ROA not after: Wed 19 Nov 2025 13:31:04 +0000 asID: 396587 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c8:58:1a:00:fd:1c:68:1b:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:04 2025 GMT Not After : Nov 19 13:31:04 2025 GMT Subject: CN=179d30f7-e30a-465a-9a2f-f075d90e3767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:c2:48:4b:c1:84:7b:e5:98:b4:f6:d7:91: ba:2f:1f:f8:bb:e3:05:aa:c0:49:5e:92:37:4f:e9: 49:5c:5e:0d:71:f9:41:58:87:ca:28:a7:8c:1e:20: 6e:de:35:bd:2e:e8:36:cf:5a:f7:90:2c:a5:df:0c: 5b:c1:e5:8a:80:ec:9e:62:07:42:18:d8:62:1a:8c: 59:ae:3a:90:c2:6e:15:72:02:5f:51:29:5b:1a:70: 54:f6:4a:0d:4b:13:16:ce:93:eb:e5:48:59:ff:2a: 63:28:8b:7c:ef:e5:0e:39:4f:24:04:ae:fd:2e:27: b7:75:3a:9e:45:d0:32:c6:aa:99:96:ee:f2:73:6e: fc:c2:3e:46:e8:e3:14:fe:a3:a5:a5:98:b3:fc:83: 60:92:92:14:87:16:8d:74:37:3c:c8:79:37:3d:60: ce:c1:39:8a:47:2b:d1:47:27:55:c5:2b:4c:c6:dc: 62:db:2d:6b:d7:28:65:c3:0d:da:16:4d:b2:f6:7c: b8:97:ef:5b:4a:3b:d4:ad:ee:06:22:7f:9a:9d:15: 92:6c:64:f8:75:87:49:30:c5:19:db:92:6a:eb:1d: 3e:d4:5e:c4:a3:11:f0:f8:4c:0d:4a:97:43:81:9e: 87:17:f0:87:8c:3d:9e:5c:9f:d7:70:90:e3:60:05: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B6:BA:60:64:8A:83:1F:AE:E8:B3:F1:BF:A6:3C:B5:30:9B:88:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b3e4574-8a31-369d-9a35-5cdfc6185194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:bc:2b:a3:fe:89:88:96:b1:10:11:98:83:53:9a:8b:8b: e7:42:d8:ce:31:6a:8f:71:be:8a:51:a5:a6:38:00:db:8c:ee: 35:a6:e5:a0:4a:0a:50:d1:73:33:84:96:e9:14:45:b4:06:06: 37:4f:fe:0a:da:7c:cd:60:c1:cc:78:35:f5:21:54:48:a7:bb: 25:90:fa:fb:57:3a:cd:e7:ff:a5:5c:2e:fe:85:62:0b:2c:6c: 9d:a8:42:57:3f:f5:22:57:0b:7c:2d:89:2a:95:03:94:3e:06: d7:b6:34:7b:a6:a8:af:53:a7:8f:96:a5:2c:89:f5:bb:5c:7e: b0:e2:86:e9:d3:76:f4:91:64:6d:58:22:92:cb:e7:dc:ab:d7: b4:35:b3:b1:75:71:a9:41:18:78:e9:85:23:b2:ce:ee:79:a6: 45:01:1c:17:5e:3a:cb:a6:38:6a:51:e7:29:80:c6:68:6f:fd: 31:6f:c2:b9:27:86:26:52:25:db:a2:25:55:59:48:6a:0d:cf: 39:37:3d:5a:2c:86:9d:1a:83:ec:42:db:5e:23:41:29:7a:f5: eb:2c:1c:f0:19:31:13:0f:7e:4d:70:43:05:6b:c8:25:3e:ae: 88:83:fb:f7:b0:28:fb:ce:cc:2a:7b:5f:e4:3e:c5:17:cd:b1: a8:12:a7:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8hYGgD9HGgbpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwNFoXDTI1MTExOTEzMzEwNFowLzEtMCsGA1UEAxMk MTc5ZDMwZjctZTMwYS00NjVhLTlhMmYtZjA3NWQ5MGUzNzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHbCSEvBhHvlmLT215G6Lx/4u+MFqsBJXpI3 T+lJXF4NcflBWIfKKKeMHiBu3jW9Lug2z1r3kCyl3wxbweWKgOyeYgdCGNhiGoxZ rjqQwm4VcgJfUSlbGnBU9koNSxMWzpPr5UhZ/ypjKIt87+UOOU8kBK79Lie3dTqe RdAyxqqZlu7yc278wj5G6OMU/qOlpZiz/INgkpIUhxaNdDc8yHk3PWDOwTmKRyvR RydVxStMxtxi2y1r1yhlww3aFk2y9ny4l+9bSjvUre4GIn+anRWSbGT4dYdJMMUZ 25Jq6x0+1F7EoxHw+EwNSpdDgZ6HF/CHjD2eXJ/XcJDjYAWpFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGi2umBkioMfruiz8b+mPLUwm4isMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGIzZTQ1NzQtOGEzMS0z NjlkLTlhMzUtNWNkZmM2MTg1MTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9uvCuj/omIlrEQEZiDU5qLi+dC2M4xao9xvopRpaY4ANuM7jWm 5aBKClDRczOElukURbQGBjdP/grafM1gwcx4NfUhVEinuyWQ+vtXOs3n/6VcLv6F YgssbJ2oQlc/9SJXC3wtiSqVA5Q+Bte2NHumqK9Tp4+WpSyJ9btcfrDihunTdvSR ZG1YIpLL59yr17Q1s7F1calBGHjphSOyzu55pkUBHBdeOsumOGpR5ymAxmhv/TFv wrknhiZSJduiJVVZSGoNzzk3PVoshp0ag+xC214jQSl69essHPAZMRMPfk1wQwVr yCU+roiD+/ewKPvOzCp7X+Q+xRfNsagSp60= -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:06 2025 by rpki-client