$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/569f9a04-9ba7-3dba-87c4-2cd39f03053c.roa File: 569f9a04-9ba7-3dba-87c4-2cd39f03053c.roa (raw, json) Hash identifier: Gix5cXD+j7MsKGW57ENmaSYv+pj+qgKyPRBuj8QZOJ4= Subject key identifier: 01:61:24:83:C8:AD:76:B9:78:81:60:E5:F5:37:59:08:03:92:18:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C6C774D28F957DDB9560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/569f9a04-9ba7-3dba-87c4-2cd39f03053c.roa Signing time: Thu 21 Aug 2025 12:31:03 +0000 ROA not before: Thu 21 Aug 2025 12:31:03 +0000 ROA not after: Wed 19 Nov 2025 13:31:03 +0000 asID: 20172 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c6:c7:74:d2:8f:95:7d:db:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:03 2025 GMT Not After : Nov 19 13:31:03 2025 GMT Subject: CN=fb5518a4-50c3-4213-a28f-35eb1cfa8ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5f:3b:24:fe:34:31:0d:9d:1b:b2:03:39:3b: 97:ec:51:e6:46:bb:b2:ed:d9:64:a6:98:ab:6a:f7: 9a:28:eb:c1:9e:b0:1e:ae:87:67:29:0e:9f:27:6f: b5:fd:d9:49:49:6d:6c:cb:d2:c0:4d:0e:ac:b4:f1: aa:3b:9f:2c:c3:51:19:79:a0:36:55:85:3b:77:2d: 7b:25:c4:ca:9e:35:41:80:2e:30:72:5a:c0:0e:d5: d4:46:2c:09:f9:da:77:59:85:2b:2c:b4:dd:92:72: c3:9e:17:43:80:c1:b5:7c:28:81:87:a3:25:03:0e: 6d:75:cc:f1:3e:e3:fb:52:25:bd:2d:5a:71:36:b1: da:dc:ab:41:75:18:64:c0:a6:07:55:3a:88:99:29: a0:e8:51:78:6e:44:59:6a:0c:1a:d4:bb:b4:c1:02: bd:25:0a:a6:c3:3b:0c:d4:71:17:e8:60:4c:1d:7d: 91:b1:a5:aa:ad:a4:3d:3b:62:50:51:85:6b:7f:29: 91:b7:5f:a1:50:29:69:61:3d:2b:44:cf:03:32:ef: 0a:6f:15:6f:03:1a:40:9a:45:3d:3f:9d:01:72:88: 14:0b:9e:c6:15:10:e9:cb:0d:78:12:e8:32:84:99: b8:04:0e:69:20:19:b1:a6:6c:39:2a:27:7d:b1:15: 9a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:61:24:83:C8:AD:76:B9:78:81:60:E5:F5:37:59:08:03:92:18:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/569f9a04-9ba7-3dba-87c4-2cd39f03053c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7b:57:84:d7:41:e0:2e:17:ca:72:90:23:1d:f1:cc:c6:7f: ee:ef:3e:ec:36:39:80:fc:bb:09:1a:11:84:0a:ba:8b:f9:9a: db:63:d9:da:3b:dc:79:65:22:4b:c4:9d:b6:df:b3:e6:a7:45: 49:38:f7:ef:81:25:0a:7c:38:08:ad:33:e9:a7:ec:ff:a3:2d: 76:c1:b5:cc:ac:d2:6f:60:75:c4:08:d4:84:f7:b7:7d:f1:83: a2:41:1c:8c:9e:92:a8:84:ef:00:36:2d:b1:de:81:c6:7b:d8: e7:db:8c:a7:88:63:bd:7b:1c:af:de:af:a4:60:ac:49:b8:c9: 9f:71:23:a5:a2:44:78:44:b0:be:9a:e0:dd:73:4f:72:ca:53: 23:80:f7:be:ee:e1:bb:e9:e1:4f:76:3b:19:0f:9e:79:59:4a: ae:b4:53:8e:bb:ce:d8:e6:74:ea:a2:07:8b:81:4b:04:7e:c1: fd:e6:ef:83:43:f3:da:59:50:b2:21:3b:7b:55:08:11:3e:a1: b0:1e:8b:51:d2:69:e5:12:75:4a:7e:d9:a5:b1:56:00:ac:d6: c4:27:a2:3b:13:71:de:73:bc:e4:18:1b:27:61:9e:e3:74:42: 77:6f:20:c2:7b:12:06:a4:d7:8c:db:fc:02:a0:5c:6f:ad:dd: 1f:46:64:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8bHdNKPlX3blWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwM1oXDTI1MTExOTEzMzEwM1owLzEtMCsGA1UEAxMk ZmI1NTE4YTQtNTBjMy00MjEzLWEyOGYtMzVlYjFjZmE4ZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll87JP40MQ2dG7IDOTuX7FHmRruy7dlkppir aveaKOvBnrAerodnKQ6fJ2+1/dlJSW1sy9LATQ6stPGqO58sw1EZeaA2VYU7dy17 JcTKnjVBgC4wclrADtXURiwJ+dp3WYUrLLTdknLDnhdDgMG1fCiBh6MlAw5tdczx PuP7UiW9LVpxNrHa3KtBdRhkwKYHVTqImSmg6FF4bkRZagwa1Lu0wQK9JQqmwzsM 1HEX6GBMHX2RsaWqraQ9O2JQUYVrfymRt1+hUClpYT0rRM8DMu8KbxVvAxpAmkU9 P50BcogUC57GFRDpyw14EugyhJm4BA5pIBmxpmw5Kid9sRWa6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAFhJIPIrXa5eIFg5fU3WQgDkhiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTY5ZjlhMDQtOWJhNy0z ZGJhLTg3YzQtMmNkMzlmMDMwNTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIJ7V4TXQeAuF8pykCMd8czGf+7vPuw2OYD8uwkaEYQKuov5mttj 2do73HllIkvEnbbfs+anRUk49++BJQp8OAitM+mn7P+jLXbBtcys0m9gdcQI1IT3 t33xg6JBHIyekqiE7wA2LbHegcZ72OfbjKeIY717HK/er6RgrEm4yZ9xI6WiRHhE sL6a4N1zT3LKUyOA977u4bvp4U92OxkPnnlZSq60U467ztjmdOqiB4uBSwR+wf3m 74ND89pZULIhO3tVCBE+obAei1HSaeUSdUp+2aWxVgCs1sQnojsTcd5zvOQYGydh nuN0QndvIMJ7Egak14zb/AKgXG+t3R9GZOM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:37 2025 by rpki-client