$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28b66672-8838-373e-9da2-e67a3a954c48.roa File: 28b66672-8838-373e-9da2-e67a3a954c48.roa (raw, json) Hash identifier: Spb6AMfyk4ko59oC0rGodZBOP9QwoD2T0l3N++c4+CY= Subject key identifier: 13:FA:F4:9C:3D:95:18:5C:2A:F5:37:8C:3C:18:3F:B6:C8:F9:7B:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B434C4A49316108D316FB5600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28b66672-8838-373e-9da2-e67a3a954c48.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 396564 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4a:49:31:61:08:d3:16:fb:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=87d68873-0f15-4330-bc92-c6c5823e8c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:10:49:d0:aa:06:c3:8f:29:29:9e:ba:b0: da:65:17:e7:d5:77:82:3b:09:68:36:5e:a1:e6:87: 89:fd:4b:69:0c:a5:a6:4f:d2:a7:74:c6:5e:48:7f: 87:ff:c6:f0:60:78:cc:75:8a:bb:8b:88:37:57:ff: 2a:ae:58:c9:49:41:f1:30:76:3b:22:b7:fa:38:68: 22:7a:6e:a8:f8:3b:14:4c:e3:e2:a3:ca:90:37:86: a8:68:0b:c1:bc:ad:69:af:48:04:be:70:bd:35:87: 19:cf:d7:b4:17:91:04:34:cd:4b:f6:96:b2:63:16: af:66:13:24:a6:51:03:1a:ba:da:30:d2:19:22:e2: 7a:24:89:e4:bc:05:be:e5:7f:7a:41:9e:ad:b3:bd: b5:0c:50:47:49:0b:62:df:a1:0b:09:0f:24:5b:91: 49:9d:52:f3:c0:4a:e1:e7:48:13:7e:8f:96:ee:4c: 5f:9a:df:d5:e8:47:fd:d3:05:3b:5c:46:1f:33:5f: 03:90:94:5b:5d:55:41:6d:6d:3c:ba:0d:37:84:4f: 54:84:ca:a8:eb:f7:85:0f:e0:08:36:10:d2:3a:61: d2:80:9b:c7:d0:0a:3c:94:be:bf:14:66:40:42:e1: 35:b0:9e:57:e9:35:5f:cb:c6:08:b2:19:18:b7:64: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FA:F4:9C:3D:95:18:5C:2A:F5:37:8C:3C:18:3F:B6:C8:F9:7B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28b66672-8838-373e-9da2-e67a3a954c48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d0:0b:fc:54:81:f0:08:59:fb:54:5c:fd:61:00:b2:6e:2b: 3f:f6:d0:b7:d3:ba:c2:2f:6c:7f:3e:1b:b2:ec:d8:17:e7:8c: 33:c5:8f:99:37:5c:9b:c4:7c:27:71:27:23:f1:7e:fb:42:58: ea:5b:5a:d0:db:68:78:b1:30:58:53:75:c2:56:25:5b:85:e6: 5d:dd:85:c7:a5:fa:32:e7:99:77:2e:27:17:16:f2:03:57:72: d8:f1:0f:18:41:24:f9:ff:16:aa:40:b5:5b:2d:45:4e:57:4d: 65:ab:b6:59:89:f4:44:a5:30:df:03:69:fa:fc:58:ef:80:a7: ee:b7:bf:96:ba:12:a8:c0:99:f9:b4:da:ad:10:43:4e:55:6a: db:16:6b:76:42:10:b7:cb:2c:da:14:4f:8e:5f:ad:02:ea:66: f7:78:04:10:93:67:8d:18:bf:54:d4:e7:0d:04:b8:cb:2e:3b: de:40:04:12:3f:4f:72:6a:8b:07:92:96:c2:45:05:ee:35:15: 2b:95:0d:05:03:58:e7:bf:4e:e2:82:a9:4c:bd:92:4b:9f:50: b2:73:23:1f:43:ef:e7:7d:35:25:12:d5:50:fe:86:78:b0:d1: 6c:27:a7:54:2c:6a:a5:fe:5a:42:eb:0e:5f:09:07:99:fa:69: bf:d9:09:dd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtDTEpJMWEI0xb7VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ODdkNjg4NzMtMGYxNS00MzMwLWJjOTItYzZjNTgyM2U4YzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLUQSdCqBsOPKSmeurDaZRfn1XeCOwloNl6h 5oeJ/UtpDKWmT9KndMZeSH+H/8bwYHjMdYq7i4g3V/8qrljJSUHxMHY7Irf6OGgi em6o+DsUTOPio8qQN4aoaAvBvK1pr0gEvnC9NYcZz9e0F5EENM1L9payYxavZhMk plEDGrraMNIZIuJ6JInkvAW+5X96QZ6ts721DFBHSQti36ELCQ8kW5FJnVLzwErh 50gTfo+W7kxfmt/V6Ef90wU7XEYfM18DkJRbXVVBbW08ug03hE9UhMqo6/eFD+AI NhDSOmHSgJvH0Ao8lL6/FGZAQuE1sJ5X6TVfy8YIshkYt2T7gQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBP69Jw9lRhcKvU3jDwYP7bI+XsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhiNjY2NzItODgzOC0z NzNlLTlkYTItZTY3YTNhOTU0YzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBP0Av8VIHwCFn7VFz9YQCybis/9tC307rCL2x/ Phuy7NgX54wzxY+ZN1ybxHwncScj8X77QljqW1rQ22h4sTBYU3XCViVbheZd3YXH pfoy55l3LicXFvIDV3LY8Q8YQST5/xaqQLVbLUVOV01lq7ZZifREpTDfA2n6/Fjv gKfut7+WuhKowJn5tNqtEENOVWrbFmt2QhC3yyzaFE+OX60C6mb3eAQQk2eNGL9U 1OcNBLjLLjveQAQSP09yaosHkpbCRQXuNRUrlQ0FA1jnv07igqlMvZJLn1CycyMf Q+/nfTUlEtVQ/oZ4sNFsJ6dULGql/lpC6w5fCQeZ+mm/2Qnd -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:56 2025 by rpki-client