$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/597f2b56-21dc-3dd8-a5cb-5e2ef345c8d2.roa File: 597f2b56-21dc-3dd8-a5cb-5e2ef345c8d2.roa (raw, json) Hash identifier: 6tE5oDOeH4oBbQ35wNAeUcQ36P+hJ+VSDa3NKsVCzhI= Subject key identifier: 29:F3:73:45:89:BE:37:8A:AA:50:10:5B:3E:1E:00:03:12:3F:22:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF256963245D0643308DBC000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/597f2b56-21dc-3dd8-a5cb-5e2ef345c8d2.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396573 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:96:32:45:d0:64:33:08:db:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=29abdf6e-eb35-4956-8133-6944d55eb419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a3:da:cf:a0:61:29:55:3c:54:91:51:7d:35: 6c:94:0b:12:5a:76:e8:19:63:41:fd:c6:7a:e2:a2: 71:96:30:4c:17:33:96:05:f7:df:fd:7c:23:07:e2: 9e:cf:51:a9:89:70:db:cb:77:2c:ad:90:30:82:bb: 94:c1:05:e3:9a:c2:10:0e:04:cd:a5:98:f8:63:48: bc:f7:c7:fe:f4:94:b2:ee:f1:75:cf:2c:93:b1:b8: 1f:9c:9e:d3:91:fa:a7:82:e2:b3:4b:9c:c0:26:0c: 2d:d8:f5:4a:e3:41:8d:93:d5:84:22:d2:11:00:7e: 3c:7f:f8:42:9d:27:0b:2a:8f:b9:99:96:07:06:cd: 3d:b1:ee:d3:74:e4:ee:20:05:c9:22:c2:0f:19:01: 05:33:87:f0:ca:eb:cc:30:61:76:d1:e7:9e:b8:81: be:19:aa:03:a0:73:c7:14:d3:9e:10:0c:35:c4:88: 11:73:7c:30:6c:b5:52:d7:5f:52:46:6e:d1:0e:b7: ef:18:0d:ba:c5:50:6b:c6:a8:a3:51:e5:f9:32:1f: e0:37:6d:bf:bc:bf:8c:57:ff:95:ec:ae:97:7e:43: 91:f0:11:39:65:e1:c2:23:f5:bf:65:2f:f1:a7:82: 27:5c:8f:f7:b5:a3:db:8c:8e:b1:c8:41:72:7d:a1: 4a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F3:73:45:89:BE:37:8A:AA:50:10:5B:3E:1E:00:03:12:3F:22:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/597f2b56-21dc-3dd8-a5cb-5e2ef345c8d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:f7:cc:fc:2e:bf:73:a0:49:dd:cb:f5:e0:05:52:82:2f:2c: 92:63:e6:a0:4c:94:4f:8b:2c:8b:4a:cf:57:48:72:a2:7b:7e: 44:09:e6:8a:fa:e0:b8:ba:67:76:0b:74:7e:33:64:c0:8a:d0: 37:6e:b7:b5:8c:67:88:07:97:d7:73:6b:8d:cb:ee:ff:f1:4b: 5d:15:af:ee:ab:3e:18:dd:e3:9f:47:81:e3:f1:ab:d3:74:c6: 00:31:93:c6:cd:b6:b8:51:c0:ef:25:56:5e:71:3e:dd:39:8d: 8b:e9:b5:2e:43:1a:65:21:29:ee:7f:92:b5:ff:6c:1a:9d:c0: 10:c4:8d:bd:ee:e3:9a:62:6a:00:00:e9:2c:3c:ea:78:c6:e5: bb:b8:f1:9d:e3:95:82:1a:81:1b:c9:ad:17:0d:7f:fa:82:3d: fd:e3:70:dc:7d:c8:c2:2a:c9:b3:8c:db:c6:02:ec:f4:ee:6d: 75:d6:d9:cd:42:9a:95:53:dd:e6:46:54:98:a0:41:4c:46:d6: 90:f3:82:df:0e:66:3b:94:f6:1f:84:c5:86:a9:92:90:17:79: b2:72:53:53:ba:71:0c:a1:9b:62:95:90:a9:b4:3d:a3:49:1e: 01:f3:3e:18:ab:16:7b:65:db:5f:e2:c2:6b:ac:31:1e:78:99: 4d:d0:47:b5 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpYyRdBkMwjbwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjlhYmRmNmUtZWIzNS00OTU2LTgxMzMtNjk0NGQ1NWViNDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqPaz6BhKVU8VJFRfTVslAsSWnboGWNB/cZ6 4qJxljBMFzOWBfff/XwjB+Kez1GpiXDby3csrZAwgruUwQXjmsIQDgTNpZj4Y0i8 98f+9JSy7vF1zyyTsbgfnJ7TkfqnguKzS5zAJgwt2PVK40GNk9WEItIRAH48f/hC nScLKo+5mZYHBs09se7TdOTuIAXJIsIPGQEFM4fwyuvMMGF20eeeuIG+GaoDoHPH FNOeEAw1xIgRc3wwbLVS119SRm7RDrfvGA26xVBrxqijUeX5Mh/gN22/vL+MV/+V 7K6XfkOR8BE5ZeHCI/W/ZS/xp4InXI/3taPbjI6xyEFyfaFK+QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCnzc0WJvjeKqlAQWz4eAAMSPyItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTk3ZjJiNTYtMjFkYy0z ZGQ4LWE1Y2ItNWUyZWYzNDVjOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCO98z8Lr9zoEndy/XgBVKCLyySY+agTJRPiyyL Ss9XSHKie35ECeaK+uC4umd2C3R+M2TAitA3bre1jGeIB5fXc2uNy+7/8UtdFa/u qz4Y3eOfR4Hj8avTdMYAMZPGzba4UcDvJVZecT7dOY2L6bUuQxplISnuf5K1/2wa ncAQxI297uOaYmoAAOksPOp4xuW7uPGd45WCGoEbya0XDX/6gj3943DcfcjCKsmz jNvGAuz07m111tnNQpqVU93mRlSYoEFMRtaQ84LfDmY7lPYfhMWGqZKQF3myclNT unEMoZtilZCptD2jSR4B8z4YqxZ7Zdtf4sJrrDEeeJlN0Ee1 -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:27 2025 by rpki-client