$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8498a046-6697-33c2-a53a-ebc4d5dcc6a3.roa File: 8498a046-6697-33c2-a53a-ebc4d5dcc6a3.roa (raw, json) Hash identifier: m+a87AN5uvDOJtNh1lA9Ck8i5W84O0oMNi8h6lDfOj4= Subject key identifier: 86:04:DC:96:C2:97:B7:25:72:A6:5D:76:33:12:38:32:E8:5B:C1:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF25692CEE57CD2ED3646CE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8498a046-6697-33c2-a53a-ebc4d5dcc6a3.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396571 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:92:ce:e5:7c:d2:ed:36:46:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d503513c-6358-416f-bdea-08c44aae7ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:30:20:ad:ae:80:7a:34:00:58:f6:f1:1e: a6:d7:ec:02:a7:89:df:5c:01:a3:ca:02:d9:ca:43: 06:ab:8f:06:9b:81:1b:61:d1:04:ab:6c:f7:ce:72: af:0b:47:4c:81:e3:94:be:8b:eb:d7:f9:9e:a6:58: ed:fb:fb:2a:8e:de:97:83:2f:3c:c4:f2:bc:5e:0d: 63:f5:e1:c2:cf:39:a1:68:24:45:64:3b:ef:22:30: e4:34:0d:2f:05:7a:5f:e0:4b:51:c5:39:38:57:32: ce:df:fe:f5:bd:71:2d:e2:04:38:ab:aa:3a:fb:65: dd:69:9c:73:01:b1:16:da:3f:b8:e6:f3:3b:de:e3: 03:04:df:03:df:e3:53:01:76:95:b2:17:4f:76:e1: f9:35:f1:9c:20:65:f8:cb:a7:c9:ed:69:1f:0c:08: 8e:cf:7d:cc:e0:65:d8:f1:95:53:8b:f6:52:6c:ac: 9f:4f:cc:46:3e:6d:54:94:67:f8:d8:f3:3f:24:74: c3:79:26:71:65:c2:b3:5e:ed:ab:7f:02:09:41:44: ed:2e:19:10:b1:c4:53:9c:3c:b0:80:6d:21:5e:23: 6a:82:f5:bd:60:cb:06:94:95:40:35:3a:5f:1f:8d: a3:93:2d:20:3d:e4:ab:d1:3d:6b:5c:a6:55:c9:af: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:04:DC:96:C2:97:B7:25:72:A6:5D:76:33:12:38:32:E8:5B:C1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8498a046-6697-33c2-a53a-ebc4d5dcc6a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:96:00:e8:9b:95:9d:e2:32:66:e8:93:c7:5b:4f:0b:da:d7: fe:db:f1:e3:95:10:c6:ed:c3:df:5d:3f:e0:c1:70:d7:cc:b4: 40:84:cc:d4:43:3d:12:9a:d6:28:63:91:c9:c1:b0:42:6f:86: ac:99:c1:57:61:79:b5:87:7e:f7:77:a0:4c:d8:42:09:65:fe: 66:89:bb:6a:fe:9d:cd:d8:6f:86:94:0a:67:72:6c:2a:57:96: 03:ae:7e:b1:4e:b6:7b:4a:33:21:b6:19:e4:c9:f0:eb:74:e2: bf:5d:81:76:f4:83:a5:30:3b:05:4f:70:e9:4c:fd:3b:be:85: 61:ce:d3:34:87:ea:22:26:b7:01:e9:a5:36:c8:2e:2b:9f:2b: 69:c5:b0:dc:45:bf:cb:17:5d:00:e7:d0:b9:82:6e:fc:a7:2e: 05:2a:0c:d1:9a:c8:9a:51:2f:a1:82:e7:63:d7:50:83:c5:4d: a5:01:74:3c:0f:7a:a9:7b:87:8b:fb:6f:e5:bf:96:7b:0d:89: 19:8a:33:ed:8a:36:aa:39:10:dd:12:37:a4:72:98:9d:10:ae: 4e:ad:02:f1:62:c0:48:a3:0c:46:bc:f0:66:5a:23:82:1e:2b: 4c:48:8b:0b:9a:a6:27:09:2b:ad:e9:21:25:03:27:c0:03:3b: 84:4a:fb:2e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpLO5XzS7TZGzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDUwMzUxM2MtNjM1OC00MTZmLWJkZWEtMDhjNDRhYWU3ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrIwIK2ugHo0AFj28R6m1+wCp4nfXAGjygLZ ykMGq48Gm4EbYdEEq2z3znKvC0dMgeOUvovr1/mepljt+/sqjt6Xgy88xPK8Xg1j 9eHCzzmhaCRFZDvvIjDkNA0vBXpf4EtRxTk4VzLO3/71vXEt4gQ4q6o6+2XdaZxz AbEW2j+45vM73uMDBN8D3+NTAXaVshdPduH5NfGcIGX4y6fJ7WkfDAiOz33M4GXY 8ZVTi/ZSbKyfT8xGPm1UlGf42PM/JHTDeSZxZcKzXu2rfwIJQUTtLhkQscRTnDyw gG0hXiNqgvW9YMsGlJVANTpfH42jky0gPeSr0T1rXKZVya+P/QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIYE3JbCl7clcqZddjMSODLoW8EEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQ5OGEwNDYtNjY5Ny0z M2MyLWE1M2EtZWJjNGQ1ZGNjNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCtlgDom5Wd4jJm6JPHW08L2tf+2/HjlRDG7cPf XT/gwXDXzLRAhMzUQz0SmtYoY5HJwbBCb4asmcFXYXm1h373d6BM2EIJZf5mibtq /p3N2G+GlApncmwqV5YDrn6xTrZ7SjMhthnkyfDrdOK/XYF29IOlMDsFT3DpTP07 voVhztM0h+oiJrcB6aU2yC4rnytpxbDcRb/LF10A59C5gm78py4FKgzRmsiaUS+h gudj11CDxU2lAXQ8D3qpe4eL+2/lv5Z7DYkZijPtijaqORDdEjekcpidEK5OrQLx YsBIowxGvPBmWiOCHitMSIsLmqYnCSut6SElAyfAAzuESvsu -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:39 2025 by rpki-client