$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23b944b7-6a87-3987-91d6-0cf5ee06c6af.roa File: 23b944b7-6a87-3987-91d6-0cf5ee06c6af.roa (raw, json) Hash identifier: DPzZNIX3+iHfkYqg4A31BShmOUhEnmBOhZyBXUOop4o= Subject key identifier: 13:47:12:B5:5A:0B:E6:D2:DC:A4:C6:BE:FE:F5:82:FF:26:46:E1:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF2569098F31BC6EA06E7CDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23b944b7-6a87-3987-91d6-0cf5ee06c6af.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396615 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:90:98:f3:1b:c6:ea:06:e7:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=2a07c4ea-3a4b-4e40-84cf-470df5d60271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4b:09:85:a2:af:54:fc:ca:d7:6c:67:d7:f8: ab:2f:fc:ee:80:00:70:15:a7:35:d9:4f:f2:a5:ad: 0e:5e:38:48:10:ba:c8:8b:98:6e:68:14:f1:16:5d: 75:f7:e3:d9:14:dd:53:a8:d7:c6:3d:e4:f6:fc:f1: 9c:7f:83:c3:42:64:87:10:4b:08:4b:e2:d3:e2:4c: 65:2c:95:c1:a1:f3:93:b5:d3:f0:04:d0:91:f8:cb: 75:56:7d:36:eb:cc:60:da:1b:1b:e3:71:8e:0c:36: 5a:07:5c:f8:a3:92:08:19:e0:98:2f:de:4e:2d:d8: 74:d9:e7:eb:8b:36:34:30:7d:d0:6e:9d:c1:57:d9: f5:33:33:05:0f:13:64:39:b7:96:bc:2e:16:6e:48: 40:b4:a9:b2:a2:6d:7c:f1:6a:98:d1:f0:db:92:bd: 6c:4c:52:ef:07:60:79:17:22:b6:2f:a9:09:91:18: 9a:f9:83:4d:eb:34:84:22:e9:dd:e8:d5:c1:b1:ae: b5:14:21:cf:f1:e0:09:76:f9:f7:c8:4f:c5:50:2a: a6:52:52:f8:54:ee:3a:ea:68:e7:9c:20:2d:fd:56: 09:e7:f6:41:fc:ca:d3:a1:f9:3a:b5:f0:0e:d8:7f: 08:b2:87:ad:69:5c:7b:0f:ab:f3:70:9d:47:0d:ff: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:47:12:B5:5A:0B:E6:D2:DC:A4:C6:BE:FE:F5:82:FF:26:46:E1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23b944b7-6a87-3987-91d6-0cf5ee06c6af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e5:62:5f:0c:8a:97:62:16:6f:06:57:3e:34:cf:ba:d2:b8: d5:c6:46:00:c3:0d:60:7b:a8:6c:b7:65:31:cd:b8:cd:0f:78: 08:4e:da:93:23:61:cf:33:dc:9d:5c:79:d3:74:41:6a:4e:e1: 57:d8:54:57:a9:6e:02:04:9f:35:01:bc:bd:65:b3:14:17:f9: 0a:1a:f2:e1:3b:01:32:a1:82:4e:21:89:05:d6:9d:e4:77:6f: cb:6f:e4:ae:4f:90:74:0c:15:65:53:5c:00:d1:97:ac:5e:92: d4:2e:7b:5b:16:f6:4e:eb:6d:e8:f7:00:83:08:a7:6d:59:71: dc:d7:52:44:83:c2:a8:b4:63:99:6b:11:94:00:d5:78:91:55: b0:ff:3c:54:6e:85:83:16:5d:2d:13:cb:46:55:c6:34:0d:2b: ef:55:9e:3b:32:34:ab:e9:32:b6:07:d8:c9:6f:44:b1:3c:29: a2:eb:35:02:32:c7:51:39:71:4a:60:aa:a5:aa:18:b4:11:5d: 0f:a4:53:ae:af:d5:d9:c5:44:80:f5:83:13:4e:bc:f4:ba:c3: 74:0f:38:c6:f1:22:1f:83:66:dd:06:43:7f:d9:a7:57:ab:a4: ea:09:b4:ad:e0:fd:62:dd:b5:92:07:56:c2:b1:87:0b:c1:c6: 38:f2:18:81 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpCY8xvG6gbnzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MmEwN2M0ZWEtM2E0Yi00ZTQwLTg0Y2YtNDcwZGY1ZDYwMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0sJhaKvVPzK12xn1/irL/zugABwFac12U/y pa0OXjhIELrIi5huaBTxFl119+PZFN1TqNfGPeT2/PGcf4PDQmSHEEsIS+LT4kxl LJXBofOTtdPwBNCR+Mt1Vn0268xg2hsb43GODDZaB1z4o5IIGeCYL95OLdh02efr izY0MH3Qbp3BV9n1MzMFDxNkObeWvC4WbkhAtKmyom188WqY0fDbkr1sTFLvB2B5 FyK2L6kJkRia+YNN6zSEIund6NXBsa61FCHP8eAJdvn3yE/FUCqmUlL4VO466mjn nCAt/VYJ5/ZB/MrTofk6tfAO2H8IsoetaVx7D6vzcJ1HDf/aGwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBNHErVaC+bS3KTGvv71gv8mRuGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNiOTQ0YjctNmE4Ny0z OTg3LTkxZDYtMGNmNWVlMDZjNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBQ5WJfDIqXYhZvBlc+NM+60rjVxkYAww1ge6hs t2UxzbjND3gITtqTI2HPM9ydXHnTdEFqTuFX2FRXqW4CBJ81Aby9ZbMUF/kKGvLh OwEyoYJOIYkF1p3kd2/Lb+SuT5B0DBVlU1wA0ZesXpLULntbFvZO623o9wCDCKdt WXHc11JEg8KotGOZaxGUANV4kVWw/zxUboWDFl0tE8tGVcY0DSvvVZ47MjSr6TK2 B9jJb0SxPCmi6zUCMsdROXFKYKqlqhi0EV0PpFOur9XZxUSA9YMTTrz0usN0DzjG 8SIfg2bdBkN/2adXq6TqCbSt4P1i3bWSB1bCsYcLwcY48hiB -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:19 2025 by rpki-client