$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/148e7968-c6cd-3870-a67e-ce18d1f74fde.roa File: 148e7968-c6cd-3870-a67e-ce18d1f74fde.roa (raw, json) Hash identifier: 20iRBdmJXBEWLrTF683iSnq2j/gYYb7jR3cRq+M31nA= Subject key identifier: 92:02:F5:65:B7:CD:5F:2C:6A:9B:09:40:2A:7A:C2:BF:C8:F1:E6:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2FC192C36D6314DD55A6C6C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/148e7968-c6cd-3870-a67e-ce18d1f74fde.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 396827 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:92:c3:6d:63:14:dd:55:a6:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=407138cf-e706-4419-affa-2732e8ee38cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f7:fe:5f:e7:93:f3:49:a0:96:9b:d2:24:19: fb:c0:06:4f:f5:8f:6c:ce:01:36:77:c4:27:90:52: ce:bc:6d:00:1f:08:db:14:83:ba:dc:8d:24:d7:4b: e4:b1:02:73:61:3c:c0:ce:b1:97:4d:dc:25:9f:e3: 3c:4e:81:f3:50:db:49:fe:28:93:65:62:02:96:25: 91:6d:03:5e:d6:70:5f:cc:82:f6:8f:9f:46:19:38: 77:cc:3e:eb:81:38:e7:0d:f9:36:5c:a1:c8:11:90: 99:21:ae:bf:a9:d5:59:11:b4:18:74:00:58:05:c8: 88:24:c3:a2:1a:e8:ff:d0:15:81:80:d0:0a:64:f7: d9:11:a9:78:ca:a0:e4:40:25:dc:67:6c:c3:fe:12: 67:e9:1e:80:97:8b:c5:27:72:7d:99:69:bd:a7:be: e3:51:fd:71:3c:d7:62:c4:cc:6e:20:2b:4b:42:46: 09:b6:b7:a1:10:2c:88:c7:27:f6:6d:4c:96:a7:f0: 3b:e0:1f:f7:ae:1e:8a:74:c5:40:53:4b:e9:d2:1f: 2c:36:d0:ec:6b:f3:33:ee:cd:b5:e2:8c:54:d7:be: 18:02:c0:e7:f1:57:d3:7f:1c:f5:16:66:f6:e2:f3: f6:01:16:3f:25:27:56:dd:09:12:67:63:84:a6:97: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:02:F5:65:B7:CD:5F:2C:6A:9B:09:40:2A:7A:C2:BF:C8:F1:E6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/148e7968-c6cd-3870-a67e-ce18d1f74fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:87:05:6c:3d:d4:1d:4d:f9:6f:45:7c:0a:3b:4a:f4:fa:62: 65:a5:f6:6b:03:55:ec:7c:92:2b:e6:eb:13:0b:dd:42:e3:f4: a8:da:92:67:45:4f:3d:c9:d7:b8:fe:22:96:22:17:8f:b2:7f: 61:bd:e1:37:f8:69:4e:2d:19:9d:d9:12:c9:61:86:40:f8:7c: 33:cd:32:7b:e9:a8:34:c7:f4:ad:2a:ae:d0:6d:6b:d0:6c:78: eb:4d:20:6d:72:3d:c4:aa:7a:a6:64:e2:7a:9c:d4:28:be:d5: d3:b7:47:de:3b:e8:11:5a:70:31:8a:44:bb:31:02:92:b0:6b: 5d:ca:8b:19:78:fa:f6:12:64:38:d1:f4:b2:e7:3e:ad:29:ae: 3c:5c:f4:59:59:59:c7:e2:eb:16:c5:bb:e4:b3:a3:13:4c:d2: d1:d1:34:79:c8:36:ba:b4:d2:62:af:35:d5:1b:c4:b4:d0:3a: 0d:cf:6d:16:65:2d:09:75:33:42:0e:e6:ce:85:f3:02:07:46: 89:00:e4:30:4a:70:16:6a:bd:8e:99:37:40:19:7b:ad:e5:86: 81:7d:90:38:9f:2b:f4:02:a4:b5:35:59:be:1f:b8:49:e4:2e: 69:0c:87:80:f8:76:2f:f8:0a:75:71:d0:44:04:d9:0e:17:57: e1:a1:cc:b6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsvwZLDbWMU3VWmxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NDA3MTM4Y2YtZTcwNi00NDE5LWFmZmEtMjczMmU4ZWUzOGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPf+X+eT80mglpvSJBn7wAZP9Y9szgE2d8Qn kFLOvG0AHwjbFIO63I0k10vksQJzYTzAzrGXTdwln+M8ToHzUNtJ/iiTZWICliWR bQNe1nBfzIL2j59GGTh3zD7rgTjnDfk2XKHIEZCZIa6/qdVZEbQYdABYBciIJMOi Guj/0BWBgNAKZPfZEal4yqDkQCXcZ2zD/hJn6R6Al4vFJ3J9mWm9p77jUf1xPNdi xMxuICtLQkYJtrehECyIxyf2bUyWp/A74B/3rh6KdMVAU0vp0h8sNtDsa/Mz7s21 4oxU174YAsDn8VfTfxz1Fmb24vP2ARY/JSdW3QkSZ2OEppe3MQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJIC9WW3zV8sapsJQCp6wr/I8eY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQ4ZTc5NjgtYzZjZC0z ODcwLWE2N2UtY2UxOGQxZjc0ZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC9hwVsPdQdTflvRXwKO0r0+mJlpfZrA1XsfJIr 5usTC91C4/So2pJnRU89yde4/iKWIhePsn9hveE3+GlOLRmd2RLJYYZA+HwzzTJ7 6ag0x/StKq7QbWvQbHjrTSBtcj3EqnqmZOJ6nNQovtXTt0feO+gRWnAxikS7MQKS sGtdyosZePr2EmQ40fSy5z6tKa48XPRZWVnH4usWxbvks6MTTNLR0TR5yDa6tNJi rzXVG8S00DoNz20WZS0JdTNCDubOhfMCB0aJAOQwSnAWar2OmTdAGXut5YaBfZA4 nyv0AqS1NVm+H7hJ5C5pDIeA+HYv+Ap1cdBEBNkOF1fhocy2 -----END CERTIFICATE-----Generated at Mon Oct 20 07:02:37 2025 by rpki-client