$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a21a2bae-db35-3711-804a-b74a98774cff.roa File: a21a2bae-db35-3711-804a-b74a98774cff.roa (raw, json) Hash identifier: njPAftDjGwg84w8DF9Bipm6lGZdDwJoXyaHxEwsqzEg= Subject key identifier: 36:A5:4A:89:4B:CC:B3:B5:EB:76:E7:9E:62:50:55:AB:4B:F6:91:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEB8B8953F714A8685B8BE000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a21a2bae-db35-3711-804a-b74a98774cff.roa Signing time: Wed 20 Aug 2025 14:36:52 +0000 ROA not before: Wed 20 Aug 2025 14:36:52 +0000 ROA not after: Tue 18 Nov 2025 15:36:52 +0000 asID: 396545 IP address blocks: 2001:502:7094::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:8b:89:53:f7:14:a8:68:5b:8b:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 14:36:52 2025 GMT Not After : Nov 18 15:36:52 2025 GMT Subject: CN=7b57435a-1330-4116-b227-6ed6637cec3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:ba:d1:8b:4f:a0:5b:a5:93:11:31:95:ee: 9a:32:e5:83:60:71:c1:aa:04:c4:57:ce:16:29:24: 15:b1:7d:ee:6b:64:35:e0:61:b0:30:b5:78:4d:78: 88:5e:88:42:c5:a7:f6:f2:ec:e4:4c:3b:42:35:24: 59:5b:17:0e:f8:4f:6c:78:d2:54:f7:14:fe:d4:c0: 54:77:aa:00:1f:b3:02:3b:b4:6d:57:09:f1:6d:30: 03:d9:42:07:8c:07:49:b4:ae:dd:7b:a3:07:4b:e3: 88:1a:41:9a:51:c0:60:67:a5:f9:28:5c:ce:63:7f: b7:52:7b:07:4e:84:c7:25:14:0d:c4:93:99:dd:b4: 4a:e7:c9:b6:16:45:1a:22:e5:94:c3:bb:fa:87:20: 45:32:ee:a5:6d:22:cb:5c:ae:88:87:57:da:a0:9a: 7d:f3:3a:c4:fb:e3:44:4d:8f:c4:db:bb:15:8a:e8: ff:26:dc:17:bc:7f:ea:97:bc:f7:cc:9d:78:f4:78: 4e:db:95:8a:67:df:9a:c2:8c:32:80:e8:ff:0c:cb: 08:37:54:c7:12:00:fa:ee:63:23:0b:44:17:22:56: d3:34:4a:49:b8:a5:de:bc:0a:72:de:09:d8:a6:87: 0a:ab:27:c3:32:b5:93:1f:5d:bc:0e:b6:cc:47:5d: 93:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A5:4A:89:4B:CC:B3:B5:EB:76:E7:9E:62:50:55:AB:4B:F6:91:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a21a2bae-db35-3711-804a-b74a98774cff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:78:34:d9:dc:e9:31:46:85:9e:79:5b:4c:da:46:0a:27:d3: a8:0a:d3:5b:36:be:ff:8b:d1:83:da:c6:93:f6:c5:7f:9a:b3: a3:08:7b:ac:31:9b:91:27:5b:d0:fa:41:ed:a4:59:9f:4a:42: f6:50:19:e5:50:84:84:10:6a:7c:f7:ad:ab:6c:ea:96:8a:c0: ab:99:13:25:51:a4:5a:c8:23:0a:ed:e9:be:27:7c:d1:82:4e: 69:d9:42:c3:95:b4:d8:e9:d7:2e:1d:68:3c:ca:a8:59:dd:e0: 67:a6:b2:a3:54:ec:28:eb:be:19:0f:9e:62:70:a0:d1:30:ab: c2:c2:45:51:71:29:27:18:fa:03:93:ed:fa:d4:b9:51:7d:65: 8b:5e:0b:e6:85:17:a6:b7:cf:ab:15:81:f6:7d:b0:36:38:ae: 35:7f:74:cf:4f:71:fb:45:68:c6:59:cf:d4:fb:c3:44:52:7c: e4:76:2e:f5:b9:51:18:a0:c2:7b:b7:ae:ae:ed:b0:af:9e:a9: 98:54:3c:b8:55:36:37:8e:75:8b:00:85:1b:f4:ab:67:c5:bf: fe:22:6b:c4:ba:36:84:79:6c:48:52:2a:4e:3e:58:72:c9:fd: 49:ab:df:30:d5:3f:f9:fe:47:ef:ba:a2:0a:b1:da:28:c1:f2: 2c:27:27:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErri4lT9xSoaFuL4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDE0MzY1MloXDTI1MTExODE1MzY1MlowLzEtMCsGA1UEAxMk N2I1NzQzNWEtMTMzMC00MTE2LWIyMjctNmVkNjYzN2NlYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOa60YtPoFulkxExle6aMuWDYHHBqgTEV84W KSQVsX3ua2Q14GGwMLV4TXiIXohCxaf28uzkTDtCNSRZWxcO+E9seNJU9xT+1MBU d6oAH7MCO7RtVwnxbTAD2UIHjAdJtK7de6MHS+OIGkGaUcBgZ6X5KFzOY3+3UnsH ToTHJRQNxJOZ3bRK58m2FkUaIuWUw7v6hyBFMu6lbSLLXK6Ih1faoJp98zrE++NE TY/E27sViuj/JtwXvH/ql7z3zJ149HhO25WKZ9+awowygOj/DMsIN1THEgD67mMj C0QXIlbTNEpJuKXevApy3gnYpocKqyfDMrWTH128DrbMR12TMQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDalSolLzLO163bnnmJQVatL9pH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTIxYTJiYWUtZGIzNS0z NzExLTgwNGEtYjc0YTk4Nzc0Y2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBaeDTZ3OkxRoWeeVtM2kYKJ9OoCtNbNr7/i9GD 2saT9sV/mrOjCHusMZuRJ1vQ+kHtpFmfSkL2UBnlUISEEGp8962rbOqWisCrmRMl UaRayCMK7em+J3zRgk5p2ULDlbTY6dcuHWg8yqhZ3eBnprKjVOwo674ZD55icKDR MKvCwkVRcSknGPoDk+361LlRfWWLXgvmhRemt8+rFYH2fbA2OK41f3TPT3H7RWjG Wc/U+8NEUnzkdi71uVEYoMJ7t66u7bCvnqmYVDy4VTY3jnWLAIUb9Ktnxb/+ImvE ujaEeWxIUipOPlhyyf1Jq98w1T/5/kfvuqIKsdoowfIsJycE -----END CERTIFICATE-----Generated at Sat Aug 23 18:05:58 2025 by rpki-client