$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49c1ed97-ee92-3a1f-b653-e8ccc03fa6c4.roa File: 49c1ed97-ee92-3a1f-b653-e8ccc03fa6c4.roa (raw, json) Hash identifier: Wnx4cHUR7YYUr2WSW2pFs5nv4lCUcc9D4r7EAPt7haM= Subject key identifier: 49:5D:D2:71:7B:B8:8A:51:A6:58:78:10:89:A5:C4:72:0D:14:6E:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE883FAED439207C1CCEB7C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49c1ed97-ee92-3a1f-b653-e8ccc03fa6c4.roa Signing time: Tue 19 Aug 2025 12:34:13 +0000 ROA not before: Tue 19 Aug 2025 12:34:13 +0000 ROA not after: Mon 17 Nov 2025 13:34:13 +0000 asID: 396589 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:83:fa:ed:43:92:07:c1:cc:eb:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 12:34:13 2025 GMT Not After : Nov 17 13:34:13 2025 GMT Subject: CN=ba6728b9-824b-4d71-b84c-c46fb81d6f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:f3:9d:7b:ff:9a:ce:c8:fa:ed:0d:b7:85: 10:d9:8d:d3:a6:63:11:c9:95:57:99:aa:fa:f8:87: 67:ef:7d:cd:04:34:1a:96:88:91:ea:a2:69:47:ba: a5:54:21:ab:92:8d:bd:5a:78:3e:81:3b:b1:f8:3a: d1:c8:4c:d9:de:a6:09:6e:c5:7e:2c:26:5b:1a:a9: f0:c5:87:ae:5e:f1:08:3c:cb:96:06:0d:fa:76:b3: ca:1d:a4:d8:4c:36:d2:b7:1f:88:a2:ca:a9:53:a5: 6d:9e:fb:da:6f:4d:17:e9:6a:1c:dc:8b:a2:a9:20: 2b:75:31:50:ed:3a:2f:c3:d8:2c:12:35:7b:1a:aa: 82:5c:23:86:b7:7e:f9:e0:55:52:87:f2:d9:2c:a1: cb:0c:9e:a8:48:98:03:3a:87:2c:31:47:c1:96:26: 51:b7:c2:ed:a5:e1:da:58:45:30:9b:80:db:17:dc: 19:6b:22:12:7d:36:ba:63:90:0e:41:6e:7f:7b:b0: d5:a3:6c:74:5c:2b:4a:0f:4a:a9:c5:43:7f:05:2b: ea:6d:50:56:d2:80:62:1f:7e:05:0c:13:ea:44:dd: 11:48:9e:62:46:85:6f:3a:85:7d:7e:1c:ed:e2:ef: 42:4d:18:f8:7f:58:8b:00:a1:6c:36:14:22:f2:eb: 2f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:5D:D2:71:7B:B8:8A:51:A6:58:78:10:89:A5:C4:72:0D:14:6E:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49c1ed97-ee92-3a1f-b653-e8ccc03fa6c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:60:fb:0a:02:20:17:bc:1c:84:35:55:fa:10:dd:32:18:b9: 87:85:64:d2:e9:33:fb:78:62:3a:17:06:cd:1b:f3:7a:e2:6b: b9:e9:92:ed:34:c7:a8:59:bc:68:88:85:a1:67:90:e4:99:53: 28:50:40:e9:0f:11:81:f3:fc:b6:08:f7:42:a7:30:e0:47:5a: 0c:93:cc:5b:60:29:c5:eb:bb:53:fd:12:44:e6:37:01:07:82: dd:df:1b:4e:88:56:9c:d4:99:07:c1:fb:65:58:f6:34:8a:db: f1:63:38:32:aa:5b:9f:06:b6:e7:2d:91:8c:a5:45:4e:1f:f4: 43:6a:66:b6:67:2d:c4:fb:f2:d9:18:56:b0:02:c8:93:11:bf: e0:d6:ea:1f:d7:c1:45:aa:e6:a5:54:8e:ea:ca:bf:1f:cf:3d: a6:73:da:67:55:af:80:70:d2:f3:7c:5d:35:72:e7:fc:96:54: f5:a0:8a:1d:dd:58:6b:24:ed:b0:1d:ae:58:93:6b:15:c8:30: 7f:ce:48:96:56:1c:bd:da:97:b7:da:64:d5:55:25:d8:5c:4d: 41:3e:7c:de:96:12:2d:2b:b6:b5:50:a6:d2:77:e6:bc:c3:cb: 80:3b:98:6e:68:9d:19:f7:80:0d:83:d0:70:1a:bb:ff:80:fa: e4:b9:08:f4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/rtQ5IHwczrfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxOTEyMzQxM1oXDTI1MTExNzEzMzQxM1owLzEtMCsGA1UEAxMk YmE2NzI4YjktODI0Yi00ZDcxLWI4NGMtYzQ2ZmI4MWQ2ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3HznXv/ms7I+u0Nt4UQ2Y3TpmMRyZVXmar6 +Idn733NBDQaloiR6qJpR7qlVCGrko29Wng+gTux+DrRyEzZ3qYJbsV+LCZbGqnw xYeuXvEIPMuWBg36drPKHaTYTDbStx+IosqpU6Vtnvvab00X6Woc3IuiqSArdTFQ 7Tovw9gsEjV7GqqCXCOGt3754FVSh/LZLKHLDJ6oSJgDOocsMUfBliZRt8LtpeHa WEUwm4DbF9wZayISfTa6Y5AOQW5/e7DVo2x0XCtKD0qpxUN/BSvqbVBW0oBiH34F DBPqRN0RSJ5iRoVvOoV9fhzt4u9CTRj4f1iLAKFsNhQi8usvVQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEld0nF7uIpRplh4EImlxHINFG7sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDljMWVkOTctZWU5Mi0z YTFmLWI2NTMtZThjY2MwM2ZhNmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBlYPsKAiAXvByENVX6EN0yGLmHhWTS6TP7eGI6 FwbNG/N64mu56ZLtNMeoWbxoiIWhZ5DkmVMoUEDpDxGB8/y2CPdCpzDgR1oMk8xb YCnF67tT/RJE5jcBB4Ld3xtOiFac1JkHwftlWPY0itvxYzgyqlufBrbnLZGMpUVO H/RDama2Zy3E+/LZGFawAsiTEb/g1uof18FFqualVI7qyr8fzz2mc9pnVa+AcNLz fF01cuf8llT1oIod3VhrJO2wHa5Yk2sVyDB/zkiWVhy92pe32mTVVSXYXE1BPnze lhItK7a1UKbSd+a8w8uAO5huaJ0Z94ANg9BwGrv/gPrkuQj0 -----END CERTIFICATE-----Generated at Sat Aug 23 18:04:15 2025 by rpki-client