$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a556502-419f-3bd7-afd4-3376a485fa78.roa File: 5a556502-419f-3bd7-afd4-3376a485fa78.roa (raw, json) Hash identifier: ckAogHg/RK6Bfk9xnd+aiSV8DFuU6xhnex/jd7HoCm4= Subject key identifier: 01:06:2F:4E:9B:E7:22:01:54:67:00:C4:5C:86:9F:3A:D0:FC:7F:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B838212B1C5670390FFB4EB40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a556502-419f-3bd7-afd4-3376a485fa78.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396596 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:12:b1:c5:67:03:90:ff:b4:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=2342f209-5d75-4aa4-8e22-9097305734c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:1e:45:39:cc:a2:24:27:f0:b9:00:43:3c: d5:db:f1:f2:12:50:1e:c1:bb:26:e0:54:88:27:4b: 07:d5:93:83:72:81:33:58:92:a0:b5:99:4f:d2:6c: da:1a:6c:26:a6:48:3b:88:31:11:b9:51:97:c8:ba: 85:6b:aa:66:31:5e:9b:b8:16:be:4b:c5:36:47:07: 0a:88:f7:47:72:6d:7b:ef:58:9b:f8:a5:4f:ca:c6: 31:fb:10:ed:74:54:8b:a3:b1:a3:3f:1c:42:10:bb: 31:54:bd:f3:41:9d:71:37:2e:ab:d9:98:2d:d5:f0: ef:63:e1:9d:be:80:78:d9:03:77:4b:b2:0b:72:e6: 2e:81:66:10:14:b6:21:39:73:b2:47:5d:10:cb:b6: 40:58:cb:62:dc:0a:07:4b:7d:87:00:a3:d4:60:f2: ca:96:97:2d:05:8b:57:4c:d6:ec:3a:63:d8:be:ef: dc:5e:d2:25:29:9b:0b:37:d1:c8:8e:f4:71:a6:d3: 50:fa:8f:74:92:39:bf:f4:1d:fc:58:54:09:36:f5: 1e:ca:75:b6:b4:7a:e7:23:bd:fc:06:83:82:1c:0d: 07:a7:63:ab:84:67:fb:5f:46:3e:5b:08:97:cd:a6: aa:1b:79:59:9f:eb:8b:12:d9:26:d3:e7:ef:5b:21: 42:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:2F:4E:9B:E7:22:01:54:67:00:C4:5C:86:9F:3A:D0:FC:7F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a556502-419f-3bd7-afd4-3376a485fa78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d7:7e:90:bc:f3:b4:0a:8f:f0:e6:54:8c:53:ed:77:c8:da: 68:77:14:a2:bc:c9:0a:34:b1:aa:e8:f0:3c:8e:bd:04:d6:48: 19:48:80:99:40:8f:20:3e:a1:19:cc:e1:54:4e:13:14:f8:2d: 0f:9f:1d:e2:3c:56:89:e3:79:48:b7:57:d6:36:e1:16:c4:f5: f9:38:53:0e:7f:79:0d:6b:d8:e9:24:bf:97:c5:27:0d:bc:a4: d9:cf:af:f2:ce:80:b9:f7:49:8d:c7:e7:76:94:f1:fa:29:e5: aa:8d:99:d9:9b:ae:3d:42:18:3c:b6:03:41:ad:d9:b4:ff:0d: dd:00:e2:c8:d7:22:a2:dc:88:63:f4:80:32:ef:b3:79:1e:07: d2:5d:f9:2c:e9:ed:6f:69:3d:a6:cd:a1:1f:5b:0b:15:f7:42: 7d:da:19:53:12:8f:78:ab:f8:9d:88:1a:f9:48:68:2e:12:ab: ea:8c:3c:7f:d6:32:84:78:44:b4:26:bd:a2:47:37:0c:82:3e: eb:d8:36:92:08:eb:64:5c:2e:48:b9:61:bf:95:4a:c5:07:b6: ce:51:84:f0:bc:e1:08:e1:bd:f7:48:77:27:5c:a5:ad:96:9f: 36:76:b0:2f:9d:6d:2a:4a:c9:aa:8e:a5:6b:29:9b:24:84:f2: c3:0c:55:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDghKxxWcDkP+060AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk MjM0MmYyMDktNWQ3NS00YWE0LThlMjItOTA5NzMwNTczNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueMeRTnMoiQn8LkAQzzV2/HyElAewbsm4FSI J0sH1ZODcoEzWJKgtZlP0mzaGmwmpkg7iDERuVGXyLqFa6pmMV6buBa+S8U2RwcK iPdHcm1771ib+KVPysYx+xDtdFSLo7GjPxxCELsxVL3zQZ1xNy6r2Zgt1fDvY+Gd voB42QN3S7ILcuYugWYQFLYhOXOyR10Qy7ZAWMti3AoHS32HAKPUYPLKlpctBYtX TNbsOmPYvu/cXtIlKZsLN9HIjvRxptNQ+o90kjm/9B38WFQJNvUeynW2tHrnI738 BoOCHA0Hp2OrhGf7X0Y+WwiXzaaqG3lZn+uLEtkm0+fvWyFC6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAEGL06b5yIBVGcAxFyGnzrQ/H87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWE1NTY1MDItNDE5Zi0z YmQ3LWFmZDQtMzM3NmE0ODVmYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAADXfpC887QKj/DmVIxT7XfI2mh3FKK8yQo0saro8DyOvQTWSBlI gJlAjyA+oRnM4VROExT4LQ+fHeI8VonjeUi3V9Y24RbE9fk4Uw5/eQ1r2Okkv5fF Jw28pNnPr/LOgLn3SY3H53aU8fop5aqNmdmbrj1CGDy2A0Gt2bT/Dd0A4sjXIqLc iGP0gDLvs3keB9Jd+Szp7W9pPabNoR9bCxX3Qn3aGVMSj3ir+J2IGvlIaC4Sq+qM PH/WMoR4RLQmvaJHNwyCPuvYNpII62RcLki5Yb+VSsUHts5RhPC84QjhvfdIdydc pa2WnzZ2sC+dbSpKyaqOpWspmySE8sMMVRA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:02 2025 by rpki-client