$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa File: 7c76ecf2-2297-3c26-9f04-12848583062a.roa (raw, json) Hash identifier: WUnXAOkF69tgEY8uIzeD73lw6wtP4RRgpcJmMTnyV0U= Subject key identifier: 98:57:48:8A:DA:CE:A6:77:7C:B0:C0:32:4E:D5:DC:4E:5F:25:C8:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B76F25E1EA8D0BD363E3E16C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 7342 IP address blocks: 2001:502:8c25::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:5e:1e:a8:d0:bd:36:3e:3e:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=e552739f-197f-460e-b635-1673d0f9afb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:57:0f:3a:23:30:02:25:d3:c4:7b:24:c3:b5: fb:7e:50:1d:f5:3a:a9:ba:dd:f8:78:55:d5:7f:87: 8c:6b:02:fb:65:7d:1b:7a:f3:74:5e:ce:23:28:b8: 16:47:88:bc:e9:e9:29:d5:93:70:80:c0:51:80:8e: 80:14:1c:99:76:9f:d5:3d:0a:db:e6:f7:53:83:7f: b3:7e:37:9a:7d:a7:e3:a1:7c:9e:cf:c4:95:f8:95: 0e:9f:2b:d9:21:06:3c:b4:88:45:85:47:85:53:64: 3e:cc:92:7a:be:fa:6f:93:b6:d1:53:82:6c:70:14: 90:91:81:f0:01:34:12:ac:66:b5:46:8b:9c:27:51: 2a:99:a5:b2:4a:5d:fa:a5:fe:2f:fc:69:4b:8a:cd: 89:48:54:33:52:a7:82:0a:b8:9c:08:7d:0b:ad:0f: 4e:e6:52:57:db:58:50:27:d2:14:6b:45:98:31:dd: 14:44:b9:7e:fd:dd:6f:73:d5:8a:d1:37:ad:a1:ab: ec:e5:e3:02:5d:fc:55:76:16:3f:85:59:0a:87:2f: ba:bc:76:d6:b7:d7:b7:e1:b6:a6:10:78:22:d9:93: 42:c7:29:e3:26:f4:8a:5e:10:d3:75:ca:2e:43:d9: 41:a1:3b:72:e9:d8:a6:27:67:4a:c1:50:62:1c:0b: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:57:48:8A:DA:CE:A6:77:7C:B0:C0:32:4E:D5:DC:4E:5F:25:C8:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8c25::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d9:89:cc:f4:35:dc:e8:0f:5b:8c:0f:7f:1a:a4:09:6c:17: 65:4a:28:12:1a:d4:5c:ea:5f:e5:56:6b:2c:f3:9c:e4:d4:1e: 82:5c:c2:25:9a:8d:c4:e1:49:24:4d:6b:9c:f9:1b:85:2a:f9: 62:9b:ad:6a:87:8a:39:72:1b:cb:3a:a5:e4:75:4e:49:c4:11: 83:33:a1:0b:5e:3e:82:37:fa:77:ae:db:b3:09:98:bc:92:55: be:74:68:09:2b:8d:59:4b:fa:b8:06:0b:68:40:a4:5f:b1:e2: 40:70:d7:2b:c3:00:ec:93:d3:7f:40:22:f9:be:cb:16:9c:5c: 11:72:69:97:ed:6a:c0:f5:55:9b:be:a5:5b:6f:c2:4a:cd:9e: 22:d4:58:dd:25:93:02:b5:fd:1b:7e:ed:19:aa:73:ce:ce:99: c4:a6:62:04:34:7d:73:4b:df:d2:f1:bb:8f:b3:a1:51:ef:32: b7:da:d9:bb:b2:4e:dc:c1:61:81:71:2d:58:2a:9e:93:b3:16: 00:f9:eb:76:62:42:47:9f:45:87:8b:d6:26:d2:2a:16:5e:81: dc:03:18:cf:88:45:a5:97:0b:66:b1:af:8e:6a:58:da:40:39: a8:6b:36:5a:b1:9e:11:77:b6:6a:ca:d5:d3:47:10:cb:ca:81: ae:64:b2:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28l4eqNC9Nj4+FsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZTU1MjczOWYtMTk3Zi00NjBlLWI2MzUtMTY3M2QwZjlhZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlcPOiMwAiXTxHskw7X7flAd9Tqput34eFXV f4eMawL7ZX0bevN0Xs4jKLgWR4i86ekp1ZNwgMBRgI6AFByZdp/VPQrb5vdTg3+z fjeafafjoXyez8SV+JUOnyvZIQY8tIhFhUeFU2Q+zJJ6vvpvk7bRU4JscBSQkYHw ATQSrGa1RoucJ1EqmaWySl36pf4v/GlLis2JSFQzUqeCCricCH0LrQ9O5lJX21hQ J9IUa0WYMd0URLl+/d1vc9WK0Tetoavs5eMCXfxVdhY/hVkKhy+6vHbWt9e34bam EHgi2ZNCxynjJvSKXhDTdcouQ9lBoTty6dimJ2dKwVBiHAsOuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJhXSIrazqZ3fLDAMk7V3E5fJcjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2M3NmVjZjItMjI5Ny0z YzI2LTlmMDQtMTI4NDg1ODMwNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAowl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE7Zicz0NdzoD1uMD38apAlsF2VKKBIa1FzqX+VWayzznOTUHoJc wiWajcThSSRNa5z5G4Uq+WKbrWqHijlyG8s6peR1TknEEYMzoQtePoI3+neu27MJ mLySVb50aAkrjVlL+rgGC2hApF+x4kBw1yvDAOyT039AIvm+yxacXBFyaZftasD1 VZu+pVtvwkrNniLUWN0lkwK1/Rt+7Rmqc87OmcSmYgQ0fXNL39Lxu4+zoVHvMrfa 2buyTtzBYYFxLVgqnpOzFgD563ZiQkefRYeL1ibSKhZegdwDGM+IRaWXC2axr45q WNpAOahrNlqxnhF3tmrK1dNHEMvKga5kspU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:28 2025 by rpki-client