$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa File: 4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa (raw, json) Hash identifier: 2OK0gca0BSKUQuQvRBai3sWWY6NRj96w9RVuE4gRxNA= Subject key identifier: 2D:27:CB:2A:EB:C9:91:7C:7D:9F:7C:A8:B7:7D:C9:83:27:AA:2D:C1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2FC1B7ABB407B15FCBD3C380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 396588 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:b7:ab:b4:07:b1:5f:cb:d3:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=4fe1acc1-66d1-4ad3-89cd-a3348c8436a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:e4:ba:0d:e5:9b:13:47:24:f1:ea:5a:57: 7b:de:4e:35:d1:51:d7:14:01:0a:c2:2f:00:2c:e5: 1b:e5:c6:9a:f3:43:c7:bc:96:20:45:a6:7f:41:82: 82:f4:4f:46:f9:7e:d9:7e:68:f4:d5:7c:d1:a0:c5: ea:a2:84:b5:fd:bf:ca:02:14:e4:bd:35:12:d6:3c: 73:dc:42:7c:f3:fa:1f:bb:75:58:92:70:b7:78:9b: 52:b7:26:66:64:28:e5:40:83:ca:5e:6c:2f:32:e0: 57:8e:82:0f:75:e6:0b:16:45:04:61:9c:99:89:3b: 10:15:bd:b0:73:d9:c5:74:21:c6:fb:16:d0:b1:a5: 87:7d:01:25:b3:6b:db:06:c5:62:e3:58:72:42:b4: bb:a4:b0:f0:7f:aa:49:78:d8:c9:b2:16:2a:69:53: 12:bf:10:4b:50:8e:18:07:b8:46:2a:7d:f8:32:fc: 8c:b2:9e:ae:66:2d:dc:14:7e:32:54:6c:fb:01:d7: 75:01:33:23:9f:36:3a:f8:27:dd:e0:69:e5:dd:7e: dd:62:fa:12:5c:5d:4d:b2:ae:fb:04:9e:4e:1a:a6: e2:d8:99:af:7f:27:f1:77:48:de:84:db:54:87:de: c5:cb:c1:bd:b0:02:cf:ab:b8:32:73:04:d5:27:15: a4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:27:CB:2A:EB:C9:91:7C:7D:9F:7C:A8:B7:7D:C9:83:27:AA:2D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ce21b84-7ee2-3847-8f8d-421cc0e53ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ab:02:43:82:82:84:e2:c3:37:d8:ab:ab:f9:b8:09:41:19: 21:cf:56:23:d6:34:00:ab:c4:73:16:02:ad:e7:d9:14:d3:0a: 3d:57:f6:cc:ea:66:75:9e:8e:e5:eb:b1:43:8a:1c:44:e7:1d: 8f:18:ff:66:d6:0c:d4:5f:19:e7:cf:78:81:69:27:d2:e1:43: 7f:62:f4:b3:5f:58:ab:80:47:e7:9f:ef:9e:11:6d:bd:2c:54: 8d:67:ca:c1:de:71:f3:62:5c:81:9f:20:33:42:42:e7:8e:e4: 3d:9b:ca:3e:a5:02:f0:1f:fe:f1:15:fd:9c:68:89:c3:52:eb: bc:e1:e0:7f:05:06:b3:c5:d5:b3:1f:a5:4b:8e:e4:94:2d:eb: ef:b5:6a:b9:05:64:fe:bd:b4:e5:76:40:36:41:d7:18:e2:09: 3c:be:3c:74:6c:84:1d:ef:23:8e:6b:92:2e:6c:ff:d5:51:26: 0a:9e:69:2b:8c:69:36:47:36:22:28:34:0d:99:36:02:5b:8c: 7b:0c:c2:7a:64:4a:be:03:42:fa:c7:fe:e4:3e:d8:8a:03:da: a7:6f:cc:ed:67:69:d2:b5:9f:42:c1:b9:ec:7c:e1:f7:e5:63: f7:b0:4e:1a:be:76:d6:69:1a:9d:24:58:82:93:4d:9d:36:1b: 80:b4:17:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsvwbertAexX8vTw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk NGZlMWFjYzEtNjZkMS00YWQzLTg5Y2QtYTMzNDhjODQzNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCLkug3lmxNHJPHqWld73k410VHXFAEKwi8A LOUb5caa80PHvJYgRaZ/QYKC9E9G+X7Zfmj01XzRoMXqooS1/b/KAhTkvTUS1jxz 3EJ88/ofu3VYknC3eJtStyZmZCjlQIPKXmwvMuBXjoIPdeYLFkUEYZyZiTsQFb2w c9nFdCHG+xbQsaWHfQEls2vbBsVi41hyQrS7pLDwf6pJeNjJshYqaVMSvxBLUI4Y B7hGKn34MvyMsp6uZi3cFH4yVGz7Add1ATMjnzY6+Cfd4Gnl3X7dYvoSXF1Nsq77 BJ5OGqbi2Jmvfyfxd0jehNtUh97Fy8G9sALPq7gycwTVJxWkRQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC0nyyrryZF8fZ98qLd9yYMnqi3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGNlMjFiODQtN2VlMi0z ODQ3LThmOGQtNDIxY2MwZTUzZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC5qwJDgoKE4sM32Kur+bgJQRkhz1Yj1jQAq8Rz FgKt59kU0wo9V/bM6mZ1no7l67FDihxE5x2PGP9m1gzUXxnnz3iBaSfS4UN/YvSz X1irgEfnn++eEW29LFSNZ8rB3nHzYlyBnyAzQkLnjuQ9m8o+pQLwH/7xFf2caInD Uuu84eB/BQazxdWzH6VLjuSULevvtWq5BWT+vbTldkA2QdcY4gk8vjx0bIQd7yOO a5IubP/VUSYKnmkrjGk2RzYiKDQNmTYCW4x7DMJ6ZEq+A0L6x/7kPtiKA9qnb8zt Z2nStZ9CwbnsfOH35WP3sE4avnbWaRqdJFiCk02dNhuAtBcE -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:06 2025 by rpki-client