$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ecbbf87-92ac-3db7-b3a6-6edb5789deaf.roa File: 8ecbbf87-92ac-3db7-b3a6-6edb5789deaf.roa (raw, json) Hash identifier: sGfQJo3pD6stKM9aeBzS+omIYo/oDBkcO8SasFABUq0= Subject key identifier: E7:05:E8:D5:C0:EC:A1:23:4C:36:24:F0:30:0E:2D:49:EF:E2:32:CE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2FC17FBA804F83084F53AD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ecbbf87-92ac-3db7-b3a6-6edb5789deaf.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 396554 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:7f:ba:80:4f:83:08:4f:53:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=8d8b8935-d6b4-4f14-975a-fd395ccbb1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:49:d3:00:46:99:9d:4b:f7:04:4f:b9:5a: f5:58:b1:3b:1a:44:c6:81:ec:6a:40:aa:4c:64:15: 30:ce:fc:e1:4a:5b:c9:dd:7c:ad:fe:af:7b:7f:79: c9:ac:07:bf:49:d1:21:be:12:c1:86:6c:5f:74:3c: 22:4a:97:18:3f:50:c2:ae:a6:42:89:2a:b4:08:7e: 79:32:ac:d5:6f:d7:b6:3e:1a:89:7d:6f:4c:2a:89: 96:5c:eb:d1:20:89:7e:5e:35:bd:de:65:8b:ca:45: 70:95:4e:73:29:9f:cd:15:9c:36:06:5b:9e:74:20: 64:ee:91:05:d2:08:11:a0:6f:e1:01:51:ee:8b:63: 72:49:c1:56:75:bf:9d:b9:54:ff:18:9b:66:92:fd: 1d:9d:12:2f:96:26:b9:28:51:9f:a7:37:69:5d:82: 85:49:99:1e:03:4b:19:8d:58:06:50:e9:eb:66:20: 9b:f5:6a:3e:6d:98:6b:ac:7e:1b:2b:34:5f:ae:ca: 2e:2d:38:60:3d:04:2b:6d:13:9a:37:31:2a:e0:fe: 9d:44:cb:96:3d:37:63:25:30:3c:f4:e2:41:6d:d6: 26:1f:66:b6:ea:21:c2:a9:1f:7d:33:cd:44:0a:e3: ac:5c:39:38:ab:d8:f9:f9:ee:08:09:fc:a8:6a:27: 99:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:05:E8:D5:C0:EC:A1:23:4C:36:24:F0:30:0E:2D:49:EF:E2:32:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ecbbf87-92ac-3db7-b3a6-6edb5789deaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ad:61:81:4b:47:ae:e5:59:21:81:59:de:b1:89:1b:54:6a: c1:3f:18:9e:28:8c:aa:37:38:9d:c8:4d:10:40:56:ac:89:60: 43:cc:72:b1:a9:47:1c:ee:20:27:af:16:d0:03:2d:30:16:69: e6:06:28:e0:24:20:cd:99:e8:fc:84:a3:1d:50:95:e2:81:87: 42:9e:bb:88:4c:dd:a3:3c:28:a8:d8:45:da:c9:3d:cd:32:cb: ad:36:31:6c:5e:30:dc:e9:8e:9a:c2:15:55:f4:7e:f1:69:57: 75:2d:fa:4c:5d:f4:e4:e8:63:76:5e:37:57:96:0b:8a:6a:d6: f4:89:20:98:3f:9b:1e:09:92:89:10:d1:77:78:be:a0:b5:0b: af:34:b7:62:23:43:05:f4:87:2d:7e:0c:1b:96:c3:c6:4f:60: 6a:0a:a7:ef:8f:1b:e1:8a:2c:5b:9c:6d:93:01:49:29:39:5a: de:ff:cf:c0:46:12:22:7d:82:a1:d6:c0:7e:71:57:d4:26:a5: db:4e:69:15:4a:44:e0:63:96:64:6f:24:0c:17:19:3d:5d:0c: 82:8c:70:a5:a5:a7:af:07:71:e7:41:2c:81:62:9b:14:16:1e: 96:0b:38:9b:5e:97:9d:2b:d2:95:40:b5:d4:f7:90:30:b1:22: f6:aa:38:6c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsvwX+6gE+DCE9TrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk OGQ4Yjg5MzUtZDZiNC00ZjE0LTk3NWEtZmQzOTVjY2JiMWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/RJ0wBGmZ1L9wRPuVr1WLE7GkTGgexqQKpM ZBUwzvzhSlvJ3Xyt/q97f3nJrAe/SdEhvhLBhmxfdDwiSpcYP1DCrqZCiSq0CH55 MqzVb9e2PhqJfW9MKomWXOvRIIl+XjW93mWLykVwlU5zKZ/NFZw2BluedCBk7pEF 0ggRoG/hAVHui2NyScFWdb+duVT/GJtmkv0dnRIvlia5KFGfpzdpXYKFSZkeA0sZ jVgGUOnrZiCb9Wo+bZhrrH4bKzRfrsouLThgPQQrbROaNzEq4P6dRMuWPTdjJTA8 9OJBbdYmH2a26iHCqR99M81ECuOsXDk4q9j5+e4ICfyoaieZ5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOcF6NXA7KEjTDYk8DAOLUnv4jLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGVjYmJmODctOTJhYy0z ZGI3LWIzYTYtNmVkYjU3ODlkZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBurWGBS0eu5VkhgVnesYkbVGrBPxieKIyqNzid yE0QQFasiWBDzHKxqUcc7iAnrxbQAy0wFmnmBijgJCDNmej8hKMdUJXigYdCnruI TN2jPCio2EXayT3NMsutNjFsXjDc6Y6awhVV9H7xaVd1LfpMXfTk6GN2XjdXlguK atb0iSCYP5seCZKJENF3eL6gtQuvNLdiI0MF9IctfgwblsPGT2BqCqfvjxvhiixb nG2TAUkpOVre/8/ARhIifYKh1sB+cVfUJqXbTmkVSkTgY5ZkbyQMFxk9XQyCjHCl paevB3HnQSyBYpsUFh6WCzibXpedK9KVQLXU95AwsSL2qjhs -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:23 2025 by rpki-client