$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ce03172-d757-3c50-a31e-2c71552c3b40.roa File: 9ce03172-d757-3c50-a31e-2c71552c3b40.roa (raw, json) Hash identifier: aoRqmmU1goLo825jTWBkjVXDpD16AnffWg+zI1TuGYw= Subject key identifier: D5:7F:9E:A8:5F:43:5E:CB:63:69:9D:9C:BA:D0:2D:E9:20:7C:6F:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE883FB2FEE1499703BA462A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ce03172-d757-3c50-a31e-2c71552c3b40.roa Signing time: Tue 19 Aug 2025 12:34:14 +0000 ROA not before: Tue 19 Aug 2025 12:34:14 +0000 ROA not after: Mon 17 Nov 2025 13:34:14 +0000 asID: 25485 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:83:fb:2f:ee:14:99:70:3b:a4:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 12:34:14 2025 GMT Not After : Nov 17 13:34:14 2025 GMT Subject: CN=ede3305b-5492-4401-aa18-1c6876300ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:bc:19:67:32:ad:ac:be:99:c4:d6:a5:5f: 5c:93:5e:bd:e6:bb:2f:4a:49:f6:53:d8:fb:27:d9: 06:ba:94:bf:09:b4:56:aa:04:91:c9:9a:0a:6a:5d: b1:b1:a7:68:90:09:cf:e4:77:d8:64:f0:25:e6:05: 93:60:25:8c:43:48:e1:43:59:e4:22:5c:9c:48:e1: ce:32:a2:0b:fc:5e:dc:98:40:72:60:1a:05:c1:43: cd:77:af:07:79:a4:65:d1:3d:c9:60:ea:f3:b4:8b: 21:eb:38:74:8c:c2:3c:99:4e:0c:50:ec:f4:29:6e: bf:95:3f:ec:72:06:6b:09:53:ae:a6:bf:2b:6d:c3: 09:25:56:67:45:89:43:09:27:94:2e:76:e9:82:9d: 54:76:b0:29:cd:e8:85:08:c3:21:82:28:00:3d:eb: c9:b2:b3:0a:e3:b2:79:d6:55:2b:8f:6a:b9:99:d9: 78:cd:7d:0f:e5:1d:fa:21:ea:a0:34:90:6c:be:2e: ab:5d:b5:7f:80:d8:6e:f4:18:9a:a3:be:30:d9:b3: d4:01:02:2b:32:d7:1f:ab:fa:f3:bc:0f:a8:da:de: 54:db:43:92:c9:50:9b:a9:ac:bf:d0:0b:6f:b1:42: e0:51:39:fa:5d:e1:44:47:36:9c:8e:24:1d:e2:32: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7F:9E:A8:5F:43:5E:CB:63:69:9D:9C:BA:D0:2D:E9:20:7C:6F:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ce03172-d757-3c50-a31e-2c71552c3b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:19:1c:b0:12:b9:4d:15:1e:38:24:18:da:ab:29:e8:ec:fc: 7c:3f:b4:33:bf:0b:1b:4f:97:bc:bf:0a:3b:a2:b8:2b:be:6d: 7c:f1:79:56:cd:4f:38:76:de:6f:dc:bf:da:92:e4:2b:bd:e3: 8a:f5:64:1c:d1:d9:e1:66:c5:d1:8d:26:84:ba:04:4e:b5:d8: b6:47:19:35:cb:1a:fa:ea:16:8d:91:91:3c:b3:3a:fb:08:42: f8:3d:29:95:28:3b:30:c0:d7:11:f1:24:a9:ac:19:f1:43:00: 8a:96:2f:04:2b:51:22:8a:d8:80:f5:16:25:3f:75:06:cd:7a: 76:23:5d:67:d8:b2:44:8b:7e:e6:12:ee:f8:b9:c6:49:7a:86: f6:61:f7:b2:50:1f:76:cf:6b:0a:bf:88:c3:23:24:57:f9:85: ff:6e:8b:59:69:ab:37:e3:ba:46:16:19:bf:5a:9b:59:5f:0b: a2:57:81:9f:57:c4:20:0c:ed:9a:c5:3d:eb:12:72:cb:41:d7: 1c:54:45:2b:87:c4:8b:68:b5:2a:63:15:eb:ac:f2:3a:48:ad: 45:08:9c:e5:35:fc:fa:4b:45:30:f2:e3:9e:a2:4a:d7:2c:17: 41:fb:3b:58:21:77:80:ee:8d:b8:d2:f7:d1:0e:f0:2c:99:7f: d1:d4:67:61 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/sv7hSZcDukYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxOTEyMzQxNFoXDTI1MTExNzEzMzQxNFowLzEtMCsGA1UEAxMk ZWRlMzMwNWItNTQ5Mi00NDAxLWFhMTgtMWM2ODc2MzAwZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZO8GWcyray+mcTWpV9ck1695rsvSkn2U9j7 J9kGupS/CbRWqgSRyZoKal2xsadokAnP5HfYZPAl5gWTYCWMQ0jhQ1nkIlycSOHO MqIL/F7cmEByYBoFwUPNd68HeaRl0T3JYOrztIsh6zh0jMI8mU4MUOz0KW6/lT/s cgZrCVOupr8rbcMJJVZnRYlDCSeULnbpgp1UdrApzeiFCMMhgigAPevJsrMK47J5 1lUrj2q5mdl4zX0P5R36IeqgNJBsvi6rXbV/gNhu9Biao74w2bPUAQIrMtcfq/rz vA+o2t5U20OSyVCbqay/0AtvsULgUTn6XeFERzacjiQd4jIPhQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNV/nqhfQ17LY2mdnLrQLekgfG/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWNlMDMxNzItZDc1Ny0z YzUwLWEzMWUtMmM3MTU1MmMzYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB4GRywErlNFR44JBjaqyno7Px8P7QzvwsbT5e8 vwo7orgrvm188XlWzU84dt5v3L/akuQrveOK9WQc0dnhZsXRjSaEugROtdi2Rxk1 yxr66haNkZE8szr7CEL4PSmVKDswwNcR8SSprBnxQwCKli8EK1EiitiA9RYlP3UG zXp2I11n2LJEi37mEu74ucZJeob2YfeyUB92z2sKv4jDIyRX+YX/botZaas347pG Fhm/WptZXwuiV4GfV8QgDO2axT3rEnLLQdccVEUrh8SLaLUqYxXrrPI6SK1FCJzl Nfz6S0Uw8uOeokrXLBdB+ztYIXeA7o240vfRDvAsmX/R1Gdh -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:47 2025 by rpki-client