$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85912367-a091-390c-b227-fa5b3aef5f7b.roa File: 85912367-a091-390c-b227-fa5b3aef5f7b.roa (raw, json) Hash identifier: o9DIeQadEeo9x2jjq2Tp/7pEsVp3Ka33phmiYeixzoo= Subject key identifier: E8:A5:F0:DB:1F:42:C8:C4:1D:89:26:A6:BF:7F:A3:29:80:E3:41:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B83820CB31B7FED4F8E5E7980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85912367-a091-390c-b227-fa5b3aef5f7b.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396613 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:0c:b3:1b:7f:ed:4f:8e:5e:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=62318b56-5717-4501-9839-b588884ebc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:63:e7:13:6a:19:c0:68:b5:b7:0f:7f:09: 54:9c:71:eb:be:28:73:3e:b8:2e:6a:15:25:c7:83: c5:97:d0:8e:d9:59:5f:be:87:63:a0:5a:f3:1d:69: 18:6e:55:53:c2:bf:1e:f0:97:45:a4:19:e3:70:d8: 6b:4b:76:58:14:60:6a:97:51:29:81:17:2f:20:70: 71:96:b4:81:92:ee:82:cf:b1:bc:28:b7:d2:1c:5c: 3e:f3:6d:86:04:20:d7:ea:4a:46:c6:6f:80:0e:1d: c6:49:ac:aa:cd:83:15:01:e5:d5:7a:7e:5b:67:78: 26:88:19:e0:0f:b5:1c:53:64:15:7c:8e:8e:4a:ca: 24:98:d4:f4:74:f7:2b:dc:72:a9:bf:3e:8b:8a:74: a1:14:34:93:d7:3a:dc:06:fd:18:9d:72:21:93:7d: 02:36:33:7f:c9:cc:f9:73:5c:ec:e2:ce:61:44:f4: ca:6b:09:a8:b2:0f:90:27:7f:3b:9f:e0:0f:44:cf: ca:8c:c0:43:9e:ef:58:39:4f:9c:c1:75:16:d2:9f: 5c:48:bc:3e:d7:46:91:c3:d0:7c:6b:53:82:08:a2: fe:2d:17:55:4c:44:a9:2f:96:80:10:74:05:da:7b: b1:53:b4:81:75:4b:36:dc:2f:61:11:f7:00:87:68: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A5:F0:DB:1F:42:C8:C4:1D:89:26:A6:BF:7F:A3:29:80:E3:41:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85912367-a091-390c-b227-fa5b3aef5f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:b2:8d:8a:4f:d5:23:a9:f6:ce:32:d6:a7:45:7f:b8:05:05: db:2d:0c:ab:dc:88:37:61:77:a4:38:45:07:44:db:e2:54:38: 1e:26:5c:64:e4:90:0f:29:0b:25:7b:dc:b9:79:63:f0:a4:18: 08:2d:c1:1b:3b:61:78:5f:91:c6:5b:d0:a9:7d:a9:46:92:93: 4b:fc:15:fa:72:98:c4:70:71:a7:fb:01:2c:d7:af:ce:8d:1f: a0:3b:cd:69:89:df:bc:2f:dd:a1:a2:1a:46:53:60:38:8f:f4: b0:cb:1d:4c:ac:b4:ce:b4:4e:3f:5e:0d:11:e4:db:38:7a:e2: b9:1b:1a:d8:4d:24:53:5d:05:73:4e:63:fe:be:01:c9:ce:26: a4:3f:f0:73:db:df:71:71:98:10:71:78:2b:8f:c8:bd:e0:23: 4d:26:bb:15:b9:20:c0:9d:02:f5:87:b2:66:e2:b4:2b:37:17: e7:27:84:bd:86:3d:7b:d1:15:48:ba:cd:c8:d4:c7:40:c9:b6: 49:f8:38:02:73:dc:6b:bd:78:6a:f8:3d:44:c8:13:c5:14:8e: 1e:55:b0:9f:d3:56:f5:db:da:4f:99:45:61:23:80:d3:7f:f0: 5f:68:e9:f3:5a:d0:fc:80:db:68:bf:e3:ca:20:a7:ca:a5:d6: 5a:5f:8f:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDggyzG3/tT45eeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk NjIzMThiNTYtNTcxNy00NTAxLTk4MzktYjU4ODg4NGViYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoutj5xNqGcBotbcPfwlUnHHrvihzPrguahUl x4PFl9CO2VlfvodjoFrzHWkYblVTwr8e8JdFpBnjcNhrS3ZYFGBql1EpgRcvIHBx lrSBku6Cz7G8KLfSHFw+822GBCDX6kpGxm+ADh3GSayqzYMVAeXVen5bZ3gmiBng D7UcU2QVfI6OSsokmNT0dPcr3HKpvz6LinShFDST1zrcBv0YnXIhk30CNjN/ycz5 c1zs4s5hRPTKawmosg+QJ387n+APRM/KjMBDnu9YOU+cwXUW0p9cSLw+10aRw9B8 a1OCCKL+LRdVTESpL5aAEHQF2nuxU7SBdUs23C9hEfcAh2hLBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOil8NsfQsjEHYkmpr9/oymA40EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU5MTIzNjctYTA5MS0z OTBjLWIyMjctZmE1YjNhZWY1ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6yjYpP1SOp9s4y1qdFf7gFBdstDKvciDdhd6Q4RQdE2+JUOB4m XGTkkA8pCyV73Ll5Y/CkGAgtwRs7YXhfkcZb0Kl9qUaSk0v8FfpymMRwcaf7ASzX r86NH6A7zWmJ37wv3aGiGkZTYDiP9LDLHUystM60Tj9eDRHk2zh64rkbGthNJFNd BXNOY/6+AcnOJqQ/8HPb33FxmBBxeCuPyL3gI00muxW5IMCdAvWHsmbitCs3F+cn hL2GPXvRFUi6zcjUx0DJtkn4OAJz3Gu9eGr4PUTIE8UUjh5VsJ/TVvXb2k+ZRWEj gNN/8F9o6fNa0PyA22i/48ogp8ql1lpfj0w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:13 2025 by rpki-client