$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa File: 8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa (raw, json) Hash identifier: DCkT6WvwWYK1Vu8+EK4+D0biGTDRbJW1XOdg8HrKfFc= Subject key identifier: A7:8C:23:5C:4C:4B:4D:9A:7D:45:06:F6:7A:4A:F7:99:61:10:A0:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C8D5DF951B0EB3D8BA80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa Signing time: Thu 21 Aug 2025 12:31:04 +0000 ROA not before: Thu 21 Aug 2025 12:31:04 +0000 ROA not after: Wed 19 Nov 2025 13:31:04 +0000 asID: 396617 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c8:d5:df:95:1b:0e:b3:d8:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:04 2025 GMT Not After : Nov 19 13:31:04 2025 GMT Subject: CN=43c7278f-5dc2-4160-b340-fe596ccc720a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:e8:2b:5f:da:2a:86:4c:29:c1:1f:74:37: 5d:e7:01:5b:31:47:1d:55:c7:04:85:a9:65:d9:fb: ec:fa:8d:82:b1:dc:0f:de:24:1e:83:8b:cf:b8:8f: 7c:55:fd:54:92:28:b7:c8:43:4b:be:71:c4:5d:c2: a0:5a:7d:fc:c9:37:84:64:2c:48:3b:b7:ce:92:6e: f5:fa:5c:e2:15:e2:8c:49:cb:13:7e:9a:e3:f9:ac: 34:e2:bf:09:e8:c7:96:87:09:9c:4a:37:50:4a:a0: 5e:b2:d7:58:7a:12:81:ce:c1:1a:0f:16:45:b8:9d: 87:56:8f:d0:58:57:83:c6:87:dd:08:df:d6:0e:06: ce:ca:a5:ff:41:ab:bc:e1:d2:65:23:e9:cf:10:b6: 46:dd:59:f8:83:46:6e:16:be:22:34:2c:d3:f0:01: 09:79:da:6b:1f:33:7f:61:9b:96:48:85:bf:7e:ad: 42:80:98:31:f8:f9:a4:fb:b4:a7:a8:f4:d9:ab:c6: a0:43:62:75:7d:eb:b8:bb:dc:32:be:3d:d2:a5:c3: d4:37:1d:c0:d0:94:66:f7:e2:6f:4f:58:26:30:ff: c7:59:e7:4e:08:46:69:47:f4:4b:b1:52:2d:ae:43: a8:dc:66:20:1f:15:db:9d:df:de:81:bb:89:95:e0: d2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8C:23:5C:4C:4B:4D:9A:7D:45:06:F6:7A:4A:F7:99:61:10:A0:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8aff1ae4-4c53-3ede-ab24-ade089c9e5fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:8d:f5:48:86:eb:4a:72:54:71:2d:23:14:f8:80:fa:05:b8: 01:08:03:ad:c6:a9:69:dd:66:60:9f:21:45:1b:ca:20:b7:69: 6a:12:e8:52:79:b2:e5:3b:15:8e:95:b8:e1:cd:e8:b0:f9:d1: 05:da:01:6c:96:fd:53:66:1d:71:da:8d:43:b6:58:3c:0e:e0: 98:ec:09:b2:4b:ae:c1:82:f5:3a:2f:27:6c:88:b7:59:c8:f6: 06:4a:a8:80:1f:54:bd:f9:7d:34:46:e2:68:ce:4d:b0:6d:c3: 58:9c:59:63:68:05:ad:c6:46:bc:32:53:af:30:1d:70:1f:8c: 4d:02:80:92:f7:ba:ee:c9:65:a9:42:1d:ea:59:d0:58:e4:a4: ca:b5:ee:3d:87:c7:54:1f:c7:35:eb:2e:1c:2e:75:c4:6e:fb: b8:17:a3:91:a7:90:17:44:01:7f:c8:f2:4a:60:d7:7c:b5:5d: f3:6b:28:f3:00:ce:a8:e6:33:43:3d:e8:43:73:a7:0b:c7:a0: 97:94:86:61:44:7b:87:97:bf:b6:b1:ff:c2:96:18:0a:14:e4: d5:70:7d:6a:6e:40:3e:4d:8b:bf:38:7d:a4:cc:76:15:16:e1: ee:4e:b5:0b:1c:b3:bf:dc:21:3d:0b:aa:c7:02:32:fe:c8:c0: 18:5c:87:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8jV35UbDrPYuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwNFoXDTI1MTExOTEzMzEwNFowLzEtMCsGA1UEAxMk NDNjNzI3OGYtNWRjMi00MTYwLWIzNDAtZmU1OTZjY2M3MjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwnoK1/aKoZMKcEfdDdd5wFbMUcdVccEhall 2fvs+o2CsdwP3iQeg4vPuI98Vf1Ukii3yENLvnHEXcKgWn38yTeEZCxIO7fOkm71 +lziFeKMScsTfprj+aw04r8J6MeWhwmcSjdQSqBestdYehKBzsEaDxZFuJ2HVo/Q WFeDxofdCN/WDgbOyqX/Qau84dJlI+nPELZG3Vn4g0ZuFr4iNCzT8AEJedprHzN/ YZuWSIW/fq1CgJgx+Pmk+7SnqPTZq8agQ2J1feu4u9wyvj3SpcPUNx3A0JRm9+Jv T1gmMP/HWedOCEZpR/RLsVItrkOo3GYgHxXbnd/egbuJleDSwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKeMI1xMS02afUUG9npK95lhEKDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGFmZjFhZTQtNGM1My0z ZWRlLWFiMjQtYWRlMDg5YzllNWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+N9UiG60pyVHEtIxT4gPoFuAEIA63GqWndZmCfIUUbyiC3aWoS 6FJ5suU7FY6VuOHN6LD50QXaAWyW/VNmHXHajUO2WDwO4JjsCbJLrsGC9TovJ2yI t1nI9gZKqIAfVL35fTRG4mjOTbBtw1icWWNoBa3GRrwyU68wHXAfjE0CgJL3uu7J ZalCHepZ0FjkpMq17j2Hx1QfxzXrLhwudcRu+7gXo5GnkBdEAX/I8kpg13y1XfNr KPMAzqjmM0M96ENzpwvHoJeUhmFEe4eXv7ax/8KWGAoU5NVwfWpuQD5Ni784faTM dhUW4e5OtQscs7/cIT0LqscCMv7IwBhch5k= -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:40 2025 by rpki-client