$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd68236-9621-373f-824d-28209f73ab00.roa File: 7dd68236-9621-373f-824d-28209f73ab00.roa (raw, json) Hash identifier: DP6uvyzBnt8EYVp11nC4vLTySwWeofpvikCkUDzd2kM= Subject key identifier: 94:3F:0E:B9:79:D3:B6:58:37:6D:91:C2:FC:21:8A:C8:C9:33:63:DC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2FC1803950F168CD8CCA5680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd68236-9621-373f-824d-28209f73ab00.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 396540 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:80:39:50:f1:68:cd:8c:ca:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=aa5855c1-5be4-4017-a2cf-1623235e4a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:5c:9b:96:bd:90:2c:7b:f4:22:30:eb:54: 81:46:bc:29:9d:20:6c:13:c5:5c:5d:2c:6a:09:3e: 97:77:ea:37:df:a8:70:d7:83:04:97:4d:ef:1b:7b: ea:20:9d:44:75:3c:87:fa:58:7b:57:34:3d:c7:34: 4a:5f:19:48:3d:71:23:03:61:6b:1d:f9:ab:0e:bc: 9e:71:e0:a0:d7:b8:7e:79:33:6e:1f:cc:0f:e1:bd: 73:70:73:6a:1e:2f:c6:77:d0:70:23:ce:f5:8d:a2: 62:92:48:20:48:96:0d:8a:3d:29:2a:25:f6:d1:d1: 8b:52:38:42:23:12:dd:82:13:8f:cb:a1:0c:66:39: 99:c5:de:de:44:b4:bc:36:94:3e:f0:a4:09:ba:37: 41:e2:c2:ff:9a:ba:71:55:5c:f8:e6:09:52:6c:4d: 12:33:7b:72:76:18:09:29:00:45:d6:81:3a:1a:da: b1:f6:f2:de:25:c2:7b:a0:f9:19:cc:72:45:6f:3a: 2e:ff:11:c7:21:97:0f:ef:84:de:d4:ee:a2:20:ef: c6:4a:b2:77:29:fa:ec:e3:89:43:b8:67:57:4a:dd: fb:90:11:41:89:be:1a:f5:57:b7:51:d0:f0:25:94: 8c:5f:26:eb:61:b8:4f:11:d2:70:0f:18:a4:7f:aa: a3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3F:0E:B9:79:D3:B6:58:37:6D:91:C2:FC:21:8A:C8:C9:33:63:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dd68236-9621-373f-824d-28209f73ab00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:c8:09:ed:a2:7f:93:6a:24:83:80:ac:87:e3:dd:b7:d2:e2: 2f:13:dc:30:9c:fc:2a:76:9a:a3:1b:a1:5f:b7:4e:ba:50:49: 4d:cf:1c:6a:04:0d:f4:ee:53:80:09:4f:b0:89:7a:60:f5:cb: f6:c0:24:9d:9d:91:60:94:7f:ba:4b:5c:8f:6e:3d:d3:dd:d3: de:ae:20:75:d5:ea:07:34:15:88:b1:b8:a8:4f:82:52:ec:2e: e3:d2:8e:fe:b2:cd:11:e5:84:f1:3e:3f:31:4a:0d:3d:6b:fd: fc:51:67:15:20:4c:3d:80:7c:38:37:4b:bc:bc:c3:ba:94:f9: 37:2f:39:bc:56:31:b3:b1:87:9a:74:1e:b0:01:f0:6b:7d:77: cd:cc:b4:dd:13:67:3b:2c:56:ff:18:08:6f:57:9f:0e:a0:07: a4:03:35:69:41:89:c1:57:ed:00:a2:27:11:19:a5:e4:7e:5d: a7:be:c1:09:37:34:3c:f6:03:bd:19:87:9a:3e:8c:f5:83:a7: c8:f1:4a:e7:8e:fc:49:e1:3d:73:2b:65:47:fa:42:8d:24:07: 45:1b:24:3e:7c:14:70:f5:32:48:b7:82:5c:cb:5b:59:63:d7: 4d:38:48:c6:c9:b3:58:be:6b:95:a0:49:e3:5e:ed:0e:8b:a4: e9:cf:69:b8 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsvwYA5UPFozYzKVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YWE1ODU1YzEtNWJlNC00MDE3LWEyY2YtMTYyMzIzNWU0YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzJcm5a9kCx79CIw61SBRrwpnSBsE8VcXSxq CT6Xd+o336hw14MEl03vG3vqIJ1EdTyH+lh7VzQ9xzRKXxlIPXEjA2FrHfmrDrye ceCg17h+eTNuH8wP4b1zcHNqHi/Gd9BwI871jaJikkggSJYNij0pKiX20dGLUjhC IxLdghOPy6EMZjmZxd7eRLS8NpQ+8KQJujdB4sL/mrpxVVz45glSbE0SM3tydhgJ KQBF1oE6Gtqx9vLeJcJ7oPkZzHJFbzou/xHHIZcP74Te1O6iIO/GSrJ3Kfrs44lD uGdXSt37kBFBib4a9Ve3UdDwJZSMXybrYbhPEdJwDxikf6qj3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJQ/Drl507ZYN22RwvwhisjJM2PcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RkNjgyMzYtOTYyMS0z NzNmLTgyNGQtMjgyMDlmNzNhYjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCXyAnton+TaiSDgKyH49230uIvE9wwnPwqdpqj G6Fft066UElNzxxqBA307lOACU+wiXpg9cv2wCSdnZFglH+6S1yPbj3T3dPeriB1 1eoHNBWIsbioT4JS7C7j0o7+ss0R5YTxPj8xSg09a/38UWcVIEw9gHw4N0u8vMO6 lPk3Lzm8VjGzsYeadB6wAfBrfXfNzLTdE2c7LFb/GAhvV58OoAekAzVpQYnBV+0A oicRGaXkfl2nvsEJNzQ89gO9GYeaPoz1g6fI8UrnjvxJ4T1zK2VH+kKNJAdFGyQ+ fBRw9TJIt4Jcy1tZY9dNOEjGybNYvmuVoEnjXu0Oi6Tpz2m4 -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:00 2025 by rpki-client