$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7deca1f6-289d-34f6-baeb-3ce811ea951b.roa File: 7deca1f6-289d-34f6-baeb-3ce811ea951b.roa (raw, json) Hash identifier: kSqnUAQWFGGiOzusnXRiXwAc2bVPCY/ol6kOF3C3Zks= Subject key identifier: 5C:1D:92:ED:D5:F9:EB:CD:0A:94:F8:D0:03:D6:43:BE:61:68:CA:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C503E33BC013E9BE3800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7deca1f6-289d-34f6-baeb-3ce811ea951b.roa Signing time: Thu 21 Aug 2025 12:31:03 +0000 ROA not before: Thu 21 Aug 2025 12:31:03 +0000 ROA not after: Wed 19 Nov 2025 13:31:03 +0000 asID: 396574 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c5:03:e3:3b:c0:13:e9:be:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:03 2025 GMT Not After : Nov 19 13:31:03 2025 GMT Subject: CN=03514416-7e3c-417c-9306-2eea3ad18136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d1:eb:0e:3b:94:4b:12:4a:78:46:a5:5c:15: b9:1a:1e:59:2a:2a:e3:ff:4b:74:6d:1b:26:29:d1: ea:b8:df:d5:e0:c2:4a:a5:2a:f3:bd:0c:a7:a0:29: 95:b6:30:39:7e:6b:84:2a:fb:9e:72:f5:3c:37:da: 77:7f:97:c6:cb:99:f7:fa:f9:22:af:9d:08:69:85: 18:6f:5d:a6:ac:0b:09:11:19:4c:29:cc:e5:9a:da: df:8e:4f:99:40:31:e8:8c:e4:3d:04:0c:20:58:35: cc:ea:09:04:ea:9a:5f:fe:8f:3e:a3:42:8a:9e:12: a1:a2:c7:5c:55:6a:b0:a5:92:c8:27:db:51:b2:21: 09:21:42:10:80:82:55:7d:71:69:fa:76:36:3a:b9: ce:f4:8f:5d:45:f9:84:70:09:66:7d:14:0c:da:a5: 85:ec:9d:71:4a:ef:5a:9d:bf:ab:b6:e1:50:86:d7: 50:ca:c3:40:ca:34:05:97:f6:37:ad:36:78:c9:05: 6d:d0:16:6f:b1:4e:1f:db:3e:f4:f3:1d:e4:e5:c1: 9b:43:12:0f:44:fa:2e:d2:af:82:fa:e8:61:9b:d9: 93:80:5a:f0:5b:ab:b4:72:3f:57:15:37:12:bd:b8: e1:7e:8f:c5:92:aa:27:d1:da:72:52:4b:33:8d:10: 1c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1D:92:ED:D5:F9:EB:CD:0A:94:F8:D0:03:D6:43:BE:61:68:CA:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7deca1f6-289d-34f6-baeb-3ce811ea951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:88:68:67:f9:c8:3e:fc:0d:96:3c:34:13:df:1e:4d:d7:bc: c3:76:1f:e3:59:8d:38:f5:a9:cb:9c:6c:15:3d:d8:1d:36:6f: 7b:43:77:58:46:18:ae:09:be:78:18:e5:81:91:21:4f:ce:25: 83:03:e0:f7:2d:57:81:3b:12:35:2a:2f:3e:6f:c3:ac:54:e5: ee:d1:1f:24:09:2f:54:ad:a8:e2:dd:f9:5f:44:68:1e:bc:c2: e2:c7:ad:bd:7e:91:94:3e:a4:fa:58:c7:74:07:50:aa:17:cb: 92:70:40:59:e6:df:47:bd:a2:65:06:d3:57:c7:07:f7:8d:25: 52:c4:67:43:c9:c4:88:d3:71:61:64:3a:6c:30:6d:ca:3d:25: 70:31:65:49:ce:f8:6a:18:a4:74:6c:7e:cc:ee:04:d9:35:dc: 85:99:dc:7f:c1:ba:bf:8b:d5:27:de:fd:82:94:13:c1:d7:55: ad:9a:ad:92:84:18:d7:39:e0:a4:a7:e0:62:1a:5b:78:04:4e: 9c:d6:b6:e8:9e:d6:50:32:0c:cb:46:3c:f9:6b:74:66:83:10: 83:1a:f2:d6:a4:a4:c5:2d:1a:4e:dd:2a:4a:23:96:16:82:63: bf:19:16:47:51:17:14:53:e1:60:2e:8e:c6:05:aa:ec:97:32: 28:6a:2e:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8UD4zvAE+m+OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwM1oXDTI1MTExOTEzMzEwM1owLzEtMCsGA1UEAxMk MDM1MTQ0MTYtN2UzYy00MTdjLTkzMDYtMmVlYTNhZDE4MTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitHrDjuUSxJKeEalXBW5Gh5ZKirj/0t0bRsm KdHquN/V4MJKpSrzvQynoCmVtjA5fmuEKvuecvU8N9p3f5fGy5n3+vkir50IaYUY b12mrAsJERlMKczlmtrfjk+ZQDHojOQ9BAwgWDXM6gkE6ppf/o8+o0KKnhKhosdc VWqwpZLIJ9tRsiEJIUIQgIJVfXFp+nY2OrnO9I9dRfmEcAlmfRQM2qWF7J1xSu9a nb+rtuFQhtdQysNAyjQFl/Y3rTZ4yQVt0BZvsU4f2z708x3k5cGbQxIPRPou0q+C +uhhm9mTgFrwW6u0cj9XFTcSvbjhfo/Fkqon0dpyUkszjRAcBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFwdku3V+evNCpT40APWQ75haMpiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2RlY2ExZjYtMjg5ZC0z NGY2LWJhZWItM2NlODExZWE5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHeIaGf5yD78DZY8NBPfHk3XvMN2H+NZjTj1qcucbBU92B02b3tD d1hGGK4JvngY5YGRIU/OJYMD4PctV4E7EjUqLz5vw6xU5e7RHyQJL1StqOLd+V9E aB68wuLHrb1+kZQ+pPpYx3QHUKoXy5JwQFnm30e9omUG01fHB/eNJVLEZ0PJxIjT cWFkOmwwbco9JXAxZUnO+GoYpHRsfszuBNk13IWZ3H/Bur+L1Sfe/YKUE8HXVa2a rZKEGNc54KSn4GIaW3gETpzWtuie1lAyDMtGPPlrdGaDEIMa8takpMUtGk7dKkoj lhaCY78ZFkdRFxRT4WAujsYFquyXMihqLrY= -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:43 2025 by rpki-client