$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2e47f08-49cf-362d-9887-e57a2620fee5.roa File: a2e47f08-49cf-362d-9887-e57a2620fee5.roa (raw, json) Hash identifier: ku1fjaaWaZRN/mS4DdDD+cspaY2CPtsfdjaJrisPOTI= Subject key identifier: 9D:9F:E2:CA:4F:5A:BF:23:6A:4A:E3:7F:C6:2C:78:70:A8:FA:CD:FB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B434C67E89B33A2104D2E7D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2e47f08-49cf-362d-9887-e57a2620fee5.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 396596 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:67:e8:9b:33:a2:10:4d:2e:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=4e1ab6b0-2880-4716-be63-d2ba18e324be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:a0:0b:5e:48:ee:b6:0b:08:f5:2b:82:db: cc:c9:8c:7c:2e:eb:09:16:eb:18:52:05:87:82:e1: 3c:5f:7c:67:a0:c7:6b:ef:83:58:cc:7c:9d:5a:e9: 02:3a:5e:e6:a2:8f:e5:95:39:53:67:ab:39:23:b3: 6d:34:cf:08:50:00:cd:58:db:73:89:06:ac:8a:06: a2:dd:2d:e8:29:b7:38:fc:b6:93:4b:0d:5f:1b:62: d7:ce:cf:5f:9f:6b:9f:c1:ef:e0:40:30:7c:bc:d1: d8:24:7e:6b:52:c1:03:55:63:8f:9e:03:62:33:20: 53:b8:3c:15:bc:48:57:f6:fc:e0:56:fd:5c:fd:8a: ed:14:e4:3d:46:bf:c2:20:12:26:24:b8:e5:a9:ee: 25:c9:3b:cc:59:22:60:31:77:3d:d7:7a:d4:d8:34: a5:bf:56:d0:24:82:00:a7:41:82:44:3a:87:66:80: bd:ca:76:b7:fb:96:f5:84:fc:b7:09:02:c6:47:05: f1:58:7a:13:7f:d1:0a:cf:81:ec:54:a0:70:5f:05: c6:ce:af:9f:88:d3:61:84:5f:98:de:e4:26:03:29: 2d:42:ad:a9:a4:74:3c:64:84:60:6c:77:75:b4:dc: 49:f1:b8:f9:24:4f:9d:9f:3a:04:bc:7f:1d:3a:b2: f5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9F:E2:CA:4F:5A:BF:23:6A:4A:E3:7F:C6:2C:78:70:A8:FA:CD:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2e47f08-49cf-362d-9887-e57a2620fee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:67:a0:97:97:a0:53:75:34:95:6f:12:78:3a:a9:0f:8f:a5: e2:27:86:61:27:e3:8e:92:c7:8a:85:c3:d0:05:5a:61:00:d9: 8f:4e:84:b3:cc:b1:16:e9:c1:91:8f:2d:66:e4:d3:07:51:1d: 3b:33:bd:cd:ea:91:23:a9:b8:dc:85:b9:36:58:44:70:3d:8c: aa:c3:70:df:3d:1d:1b:7d:97:10:8b:40:b1:78:ba:25:4a:94: 4b:c9:6a:05:aa:b0:8c:28:52:3f:52:11:a2:d3:51:db:bf:50: a3:7f:f1:73:af:56:cf:c5:21:21:91:11:d6:e0:4d:6c:3d:fd: 04:d1:b9:f0:65:ed:2c:5a:5e:7e:c3:8f:ab:9a:2a:d5:8d:05: ca:f8:12:35:12:cc:77:9e:4d:5f:12:5b:23:4f:6a:7e:8f:7a: dc:87:00:aa:0c:86:cf:6b:ad:02:fb:9c:90:ff:a6:df:87:49: 4e:bb:d5:42:28:9b:eb:d7:bb:0d:f1:4b:36:22:57:e7:52:22: 8e:97:64:24:ca:7d:91:49:69:ea:3e:81:68:1c:ab:ef:d0:99: b9:36:40:7a:75:a4:27:a7:87:cb:67:35:c8:c7:a4:2e:1d:8b: 05:22:f7:d2:96:e0:bc:18:fe:78:ab:9c:11:9c:d9:69:a0:b1: 0f:35:6b:07 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtDTGfomzOiEE0ufYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NGUxYWI2YjAtMjg4MC00NzE2LWJlNjMtZDJiYTE4ZTMyNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHCgC15I7rYLCPUrgtvMyYx8LusJFusYUgWH guE8X3xnoMdr74NYzHydWukCOl7moo/llTlTZ6s5I7NtNM8IUADNWNtziQasigai 3S3oKbc4/LaTSw1fG2LXzs9fn2ufwe/gQDB8vNHYJH5rUsEDVWOPngNiMyBTuDwV vEhX9vzgVv1c/YrtFOQ9Rr/CIBImJLjlqe4lyTvMWSJgMXc913rU2DSlv1bQJIIA p0GCRDqHZoC9yna3+5b1hPy3CQLGRwXxWHoTf9EKz4HsVKBwXwXGzq+fiNNhhF+Y 3uQmAyktQq2ppHQ8ZIRgbHd1tNxJ8bj5JE+dnzoEvH8dOrL1JQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJ2f4spPWr8jakrjf8YseHCo+s37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTJlNDdmMDgtNDljZi0z NjJkLTk4ODctZTU3YTI2MjBmZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCnZ6CXl6BTdTSVbxJ4OqkPj6XiJ4ZhJ+OOkseK hcPQBVphANmPToSzzLEW6cGRjy1m5NMHUR07M73N6pEjqbjchbk2WERwPYyqw3Df PR0bfZcQi0CxeLolSpRLyWoFqrCMKFI/UhGi01Hbv1Cjf/Fzr1bPxSEhkRHW4E1s Pf0E0bnwZe0sWl5+w4+rmirVjQXK+BI1Esx3nk1fElsjT2p+j3rchwCqDIbPa60C +5yQ/6bfh0lOu9VCKJvr17sN8Us2IlfnUiKOl2Qkyn2RSWnqPoFoHKvv0Jm5NkB6 daQnp4fLZzXIx6QuHYsFIvfSluC8GP54q5wRnNlpoLEPNWsH -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:15 2025 by rpki-client