$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa File: 28f4fc42-3f49-332d-9bd5-b4434487e138.roa (raw, json) Hash identifier: LanOaheH9NMcEgPmTYQKrxDOVVHytPYE9Eh5B9P+vts= Subject key identifier: 71:CF:71:79:01:48:A3:DA:BE:18:65:A3:06:B2:15:C3:F1:EF:23:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C8B5E0240BF594F2C980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa Signing time: Thu 21 Aug 2025 12:31:04 +0000 ROA not before: Thu 21 Aug 2025 12:31:04 +0000 ROA not after: Wed 19 Nov 2025 13:31:04 +0000 asID: 396586 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c8:b5:e0:24:0b:f5:94:f2:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:04 2025 GMT Not After : Nov 19 13:31:04 2025 GMT Subject: CN=7f2aef66-f832-4460-87db-0e569a53e725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d6:e8:65:94:e6:bc:25:01:0e:ff:4e:53:28: 1c:69:5d:9e:f5:ac:fb:80:0d:ca:38:c7:41:b8:36: 1d:8b:ef:6a:2e:d2:f9:76:d4:d5:aa:3d:ac:f8:a8: 6d:81:5f:20:5a:f5:1e:bd:1a:49:2e:29:70:a1:ae: 93:ae:e2:fb:d2:ed:53:52:83:1f:16:dc:47:8e:f4: cb:ed:32:a4:0d:ea:3a:92:9e:e6:81:c3:bb:4b:6f: 6c:d4:2e:57:bb:da:fe:d1:d8:29:68:1d:62:65:1f: 29:3e:db:d3:a2:b5:cb:d6:5c:1a:1f:27:70:c2:cd: 99:d4:63:0b:24:bb:7f:a2:57:62:20:90:b5:be:c8: 1e:16:5b:40:c6:33:f0:8c:df:27:1d:69:ed:e3:70: 82:71:44:b3:69:bb:fc:b0:99:c3:dc:c8:9f:3f:3a: 49:f6:71:8d:03:76:9f:3e:32:89:04:79:96:ec:f9: b0:4f:4d:72:29:3a:c3:e7:29:05:e2:b1:a4:22:25: d2:03:48:90:b5:11:d0:ad:f8:c0:06:e8:d1:60:06: 61:d8:52:0b:d0:6e:1a:3e:95:51:cb:33:9e:a3:62: 82:96:4e:9c:62:bf:39:8e:15:b2:f6:20:cf:d7:11: 26:3f:06:b7:6b:d9:73:28:03:52:64:ed:be:04:fe: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CF:71:79:01:48:A3:DA:BE:18:65:A3:06:B2:15:C3:F1:EF:23:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28f4fc42-3f49-332d-9bd5-b4434487e138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e9:b4:37:45:e8:32:33:0e:27:7d:2f:6c:a2:e1:cc:f0:08: a7:b3:63:9f:55:db:de:33:24:c1:95:ac:ae:1b:6d:50:66:5d: d9:f9:b2:c0:ee:1e:d4:0b:8a:cb:84:76:00:07:2d:5f:99:da: c3:94:cb:cc:cd:19:50:63:4a:ad:bf:5c:7f:e5:ae:0a:d3:61: 4d:13:f5:e6:09:f8:96:48:2f:d7:53:74:4b:9d:48:73:15:fb: 67:07:7a:dc:95:b6:8f:ce:9c:ec:8f:3c:5a:aa:52:cd:b7:f2: f9:11:fd:c8:4b:c8:3a:11:3d:9e:0b:26:93:92:08:be:00:cc: cd:64:aa:66:16:72:52:96:69:f1:56:b0:b7:f9:ba:9d:8b:80: b3:9e:32:0a:25:b4:36:b0:9f:7d:34:4f:8c:24:17:f4:ea:93: 68:7d:fc:60:a3:71:a6:ef:38:bb:99:1d:ef:fb:08:22:2a:50: 12:35:c7:1c:0c:d4:57:d5:c2:cd:bf:7c:95:ce:c7:87:b8:4d: 63:ed:0f:85:b2:72:8f:ca:16:fe:06:92:ac:bb:00:70:21:39: fd:2e:fc:60:3a:ec:d1:22:9c:7a:2f:e3:26:01:18:b1:8e:87: 8c:f8:06:e4:5c:77:f7:c7:47:a3:3e:4f:ab:b8:20:0a:f5:c6: 2a:fd:2e:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8i14CQL9ZTyyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwNFoXDTI1MTExOTEzMzEwNFowLzEtMCsGA1UEAxMk N2YyYWVmNjYtZjgzMi00NDYwLTg3ZGItMGU1NjlhNTNlNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9boZZTmvCUBDv9OUygcaV2e9az7gA3KOMdB uDYdi+9qLtL5dtTVqj2s+KhtgV8gWvUevRpJLilwoa6TruL70u1TUoMfFtxHjvTL 7TKkDeo6kp7mgcO7S29s1C5Xu9r+0dgpaB1iZR8pPtvTorXL1lwaHydwws2Z1GML JLt/oldiIJC1vsgeFltAxjPwjN8nHWnt43CCcUSzabv8sJnD3MifPzpJ9nGNA3af PjKJBHmW7PmwT01yKTrD5ykF4rGkIiXSA0iQtRHQrfjABujRYAZh2FIL0G4aPpVR yzOeo2KClk6cYr85jhWy9iDP1xEmPwa3a9lzKANSZO2+BP4cgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHHPcXkBSKPavhhlowayFcPx7yM8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhmNGZjNDItM2Y0OS0z MzJkLTliZDUtYjQ0MzQ0ODdlMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLptDdF6DIzDid9L2yi4czwCKezY59V294zJMGVrK4bbVBmXdn5 ssDuHtQLisuEdgAHLV+Z2sOUy8zNGVBjSq2/XH/lrgrTYU0T9eYJ+JZIL9dTdEud SHMV+2cHetyVto/OnOyPPFqqUs238vkR/chLyDoRPZ4LJpOSCL4AzM1kqmYWclKW afFWsLf5up2LgLOeMgoltDawn300T4wkF/Tqk2h9/GCjcabvOLuZHe/7CCIqUBI1 xxwM1FfVws2/fJXOx4e4TWPtD4Wyco/KFv4Gkqy7AHAhOf0u/GA67NEinHov4yYB GLGOh4z4BuRcd/fHR6M+T6u4IAr1xir9Lmc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:26:09 2025 by rpki-client