$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32de4ec2-dccd-3d59-9c79-022f7580002d.roa File: 32de4ec2-dccd-3d59-9c79-022f7580002d.roa (raw, json) Hash identifier: 70nkrLjHVXEAl1SM2kd0xFEk7Ir3XZ66IwH7nO7Fh2s= Subject key identifier: D6:42:DC:29:6A:EE:7F:4E:D8:26:C6:BB:53:51:19:81:45:2C:63:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B83820A0071A38115F1DC1EC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32de4ec2-dccd-3d59-9c79-022f7580002d.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396584 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:0a:00:71:a3:81:15:f1:dc:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=fdf29f42-2c2e-46ca-81a9-71872af0013f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b5:e3:96:16:e2:da:46:84:36:c3:d6:a1:d0: cf:71:44:83:40:ca:7e:19:8e:d4:4d:5f:dd:ab:13: 9c:f5:69:8b:ed:d6:5c:91:7d:60:1b:04:9a:24:00: 64:c5:05:0e:c9:bb:b9:e5:18:42:e6:db:01:24:77: 68:cf:b6:02:f5:1c:4c:80:ab:0d:d4:66:c6:38:b4: 44:2b:cb:cb:4f:d4:20:15:77:dd:1f:e7:36:33:30: 4f:15:35:98:b2:b7:8f:52:f5:7d:60:86:37:13:b9: df:3f:00:5d:71:28:3a:62:cc:47:6d:1b:e7:05:88: a8:9d:49:8e:1c:e3:d2:bd:f3:21:ba:de:25:53:ad: 95:3b:d4:b3:00:d8:47:01:95:54:36:df:86:07:65: fd:f1:5f:c8:ba:e9:a9:b1:31:6a:97:24:d1:93:a1: 76:c0:d3:d8:67:e7:76:91:27:f7:e7:9a:0e:88:03: 8c:cc:27:65:0b:16:8a:d4:af:68:40:1e:a8:6b:51: 33:15:5b:e5:d9:34:15:40:26:63:cb:e4:75:a3:6b: 23:d1:49:01:e1:79:96:11:9f:b0:09:a4:5b:0a:1e: b4:10:f0:a8:27:5b:ff:5a:51:b0:8c:6e:c9:d9:c9: 6b:9f:79:62:ac:c2:9b:f6:76:54:32:50:49:a8:d6: 33:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:42:DC:29:6A:EE:7F:4E:D8:26:C6:BB:53:51:19:81:45:2C:63:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32de4ec2-dccd-3d59-9c79-022f7580002d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9c:19:9c:9d:86:1b:84:3f:bb:d6:82:85:df:a2:73:d3:db: 6f:0a:66:34:83:87:f3:31:93:77:83:ff:2b:c1:8c:6b:e1:d6: ec:4d:7c:94:cf:bd:ba:f8:c5:c3:26:55:f7:d2:de:76:4e:d0: 1a:f8:89:df:7a:b4:14:c2:e5:b6:b1:2b:76:71:15:2e:e7:81: f1:7d:85:b4:f4:bf:12:a8:69:96:91:9d:e8:7b:d2:62:96:8a: 43:65:44:fd:18:94:b7:8e:ca:3e:46:8a:11:cf:a6:72:ca:0e: 40:75:ce:ee:6c:ef:de:25:d9:88:a1:93:e6:95:bc:2d:07:e7: 8d:85:74:e4:3b:61:4c:b7:f7:34:07:9f:07:ea:04:44:62:4e: 43:aa:50:2f:d4:d8:bc:57:00:e6:2f:7e:7c:a4:46:f9:ab:9e: 7e:6d:e5:be:d0:fa:3b:37:44:3e:1a:eb:d3:a7:60:af:25:9a: 49:b1:ab:7e:99:9a:41:9b:e1:18:b3:dd:4c:f7:75:f8:29:da: d7:07:5b:61:7f:4b:2c:1f:a5:64:43:8f:3b:77:73:b1:ff:19: 1e:a3:88:94:18:33:21:43:87:c5:a0:ac:d4:b9:68:8d:bd:ea: af:f5:af:b6:47:c1:42:7a:61:66:e1:2a:06:05:2b:8d:54:dd: 97:c4:94:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDggoAcaOBFfHcHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk ZmRmMjlmNDItMmMyZS00NmNhLTgxYTktNzE4NzJhZjAwMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbXjlhbi2kaENsPWodDPcUSDQMp+GY7UTV/d qxOc9WmL7dZckX1gGwSaJABkxQUOybu55RhC5tsBJHdoz7YC9RxMgKsN1GbGOLRE K8vLT9QgFXfdH+c2MzBPFTWYsrePUvV9YIY3E7nfPwBdcSg6YsxHbRvnBYionUmO HOPSvfMhut4lU62VO9SzANhHAZVUNt+GB2X98V/IuumpsTFqlyTRk6F2wNPYZ+d2 kSf355oOiAOMzCdlCxaK1K9oQB6oa1EzFVvl2TQVQCZjy+R1o2sj0UkB4XmWEZ+w CaRbCh60EPCoJ1v/WlGwjG7J2clrn3lirMKb9nZUMlBJqNYzxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZC3Clq7n9O2CbGu1NRGYFFLGOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJkZTRlYzItZGNjZC0z ZDU5LTljNzktMDIyZjc1ODAwMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGcGZydhhuEP7vWgoXfonPT228KZjSDh/Mxk3eD/yvBjGvh1uxN fJTPvbr4xcMmVffS3nZO0Br4id96tBTC5baxK3ZxFS7ngfF9hbT0vxKoaZaRneh7 0mKWikNlRP0YlLeOyj5GihHPpnLKDkB1zu5s794l2Yihk+aVvC0H542FdOQ7YUy3 9zQHnwfqBERiTkOqUC/U2LxXAOYvfnykRvmrnn5t5b7Q+js3RD4a69OnYK8lmkmx q36ZmkGb4Riz3Uz3dfgp2tcHW2F/SywfpWRDjzt3c7H/GR6jiJQYMyFDh8WgrNS5 aI296q/1r7ZHwUJ6YWbhKgYFK41U3ZfElAY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:27:59 2025 by rpki-client