$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3528bc16-3253-3c9e-abae-aa52ad8149d4.roa File: 3528bc16-3253-3c9e-abae-aa52ad8149d4.roa (raw, json) Hash identifier: Q1ovK3Z8FpEEN10vKLKzwV4c1LxQc6j1C3mASYP5yxA= Subject key identifier: 9A:47:99:17:EF:41:09:A8:3E:1F:EA:A6:4A:A1:D9:44:69:ED:1D:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF2568F895E39852BB0A6FB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3528bc16-3253-3c9e-abae-aa52ad8149d4.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 19836 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:8f:89:5e:39:85:2b:b0:a6:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=157d3759-fc0c-46a7-be9f-d2bfd3179dc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:8e:a9:b3:95:bb:68:3e:2a:55:03:12:e4: 94:be:dc:56:2d:f6:6b:5f:5b:62:44:8b:df:7f:81: 8f:da:8c:0a:a8:f4:c6:03:a1:29:6a:7b:52:7e:36: 1a:2f:e0:7a:3e:20:3d:5c:eb:70:e2:4d:ed:d6:ae: c5:e4:da:41:21:20:cf:e1:15:54:d4:c5:d1:59:35: 8e:88:20:51:b5:3d:06:a1:30:40:01:b4:3e:8f:ad: c8:3e:b6:42:e4:fc:73:5d:b6:09:ef:6b:a2:b3:50: 7b:60:06:4f:ef:db:c4:ce:bd:83:72:b4:a7:9a:9c: 41:53:64:4a:4c:ca:c3:32:e7:56:a9:6a:20:34:32: 99:7f:c8:d5:74:b6:84:1a:cb:b6:5b:48:bc:46:bb: 8e:be:d9:0e:91:cc:e7:70:b4:13:2d:b3:03:72:de: 96:70:47:aa:31:21:17:94:c6:e9:6c:25:b4:d5:a3: 6b:fa:98:16:ce:7d:34:3a:6d:38:27:44:48:79:ca: 49:92:38:bc:a7:92:55:23:f5:fe:3b:19:d7:98:5b: 57:24:ec:d4:e8:73:ad:b4:1c:b8:de:3d:5a:65:6e: 5c:56:94:72:2e:18:8c:a4:dd:47:0a:6c:f2:44:06: 24:a3:16:91:14:64:a1:f2:82:2d:9a:28:ad:d1:db: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:99:17:EF:41:09:A8:3E:1F:EA:A6:4A:A1:D9:44:69:ED:1D:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3528bc16-3253-3c9e-abae-aa52ad8149d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:00:0f:97:71:ef:7e:12:34:d6:23:67:6b:27:e8:ca:2b:f1: 7a:cd:08:68:bf:a0:4d:7e:5a:de:75:42:1a:7b:69:a9:45:f9: d3:83:69:26:bd:15:46:2b:bb:95:4d:26:39:97:4c:86:8e:9e: 5c:6b:54:5c:40:0f:0d:72:9c:42:15:29:5b:4e:5d:b9:4c:d9: 41:70:d3:c2:86:f3:a1:7b:7e:b1:1c:a7:8d:c0:db:db:ab:63: 68:ea:67:75:27:0d:44:bd:1f:67:53:e0:53:77:b0:27:7a:02: af:54:9f:00:f9:9f:c8:fc:99:05:32:20:a2:c1:2d:ca:5d:1a: 4b:db:ee:96:9f:b2:c5:ee:2c:e6:3f:8a:86:67:77:c0:21:67: 7c:25:f1:69:9a:16:bd:72:c2:bb:30:c6:41:0b:12:eb:8e:a8: 72:b3:14:77:99:36:b2:9b:07:45:b6:32:1f:01:36:eb:42:f2: 19:7f:eb:05:d5:b0:bf:e2:42:cf:de:f3:09:c9:ed:86:04:88: 78:37:2d:65:61:e5:92:fb:06:87:8c:9a:17:f4:0d:a6:7d:e1: b6:47:56:fe:d0:3d:e7:f1:e8:44:9b:90:c2:e9:cd:62:c9:be: ff:42:a4:c5:00:2e:2f:97:fa:49:f2:f5:e1:14:dd:ac:35:f7: 32:d5:dc:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVo+JXjmFK7Cm+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MTU3ZDM3NTktZmMwYy00NmE3LWJlOWYtZDJiZmQzMTc5ZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT+OqbOVu2g+KlUDEuSUvtxWLfZrX1tiRIvf f4GP2owKqPTGA6EpantSfjYaL+B6PiA9XOtw4k3t1q7F5NpBISDP4RVU1MXRWTWO iCBRtT0GoTBAAbQ+j63IPrZC5PxzXbYJ72uis1B7YAZP79vEzr2DcrSnmpxBU2RK TMrDMudWqWogNDKZf8jVdLaEGsu2W0i8RruOvtkOkczncLQTLbMDct6WcEeqMSEX lMbpbCW01aNr+pgWzn00Om04J0RIecpJkji8p5JVI/X+OxnXmFtXJOzU6HOttBy4 3j1aZW5cVpRyLhiMpN1HCmzyRAYkoxaRFGSh8oItmiit0dvYIwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJpHmRfvQQmoPh/qpkqh2URp7R1bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzUyOGJjMTYtMzI1My0z YzllLWFiYWUtYWE1MmFkODE0OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB6AA+Xce9+EjTWI2drJ+jKK/F6zQhov6BNflre dUIae2mpRfnTg2kmvRVGK7uVTSY5l0yGjp5ca1RcQA8NcpxCFSlbTl25TNlBcNPC hvOhe36xHKeNwNvbq2No6md1Jw1EvR9nU+BTd7AnegKvVJ8A+Z/I/JkFMiCiwS3K XRpL2+6Wn7LF7izmP4qGZ3fAIWd8JfFpmha9csK7MMZBCxLrjqhysxR3mTaymwdF tjIfATbrQvIZf+sF1bC/4kLP3vMJye2GBIh4Ny1lYeWS+waHjJoX9A2mfeG2R1b+ 0D3n8ehEm5DC6c1iyb7/QqTFAC4vl/pJ8vXhFN2sNfcy1dxG -----END CERTIFICATE-----Generated at Sat Aug 23 18:42:04 2025 by rpki-client