$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c822d6-1e57-3699-b2fe-e8e2b1c0b144.roa File: c1c822d6-1e57-3699-b2fe-e8e2b1c0b144.roa (raw, json) Hash identifier: gm+Ykv+Ar9tKNeT3LSlpJ8dSiIq3RsA1cCQcgOFJqO0= Subject key identifier: 59:78:D8:4F:33:4E:D9:09:92:5A:39:00:1E:4A:57:D2:3E:CC:3F:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE883FD6E06660B1E2985C480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c822d6-1e57-3699-b2fe-e8e2b1c0b144.roa Signing time: Tue 19 Aug 2025 12:34:15 +0000 ROA not before: Tue 19 Aug 2025 12:34:15 +0000 ROA not after: Mon 17 Nov 2025 13:34:15 +0000 asID: 36623 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:83:fd:6e:06:66:0b:1e:29:85:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 19 12:34:15 2025 GMT Not After : Nov 17 13:34:15 2025 GMT Subject: CN=1b0c28d4-82cf-4ecc-a23b-f5d9fe3bb716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:2f:64:1b:02:2b:30:f6:1d:12:5b:50:c0: 3e:32:1b:b3:d7:20:fc:0e:03:a6:2f:a6:71:b5:b1: 9b:90:65:70:a4:94:66:d1:03:e4:eb:8c:b8:2c:48: 53:33:ec:dd:27:6b:2b:58:e7:bc:0f:15:69:fc:6d: 59:02:4a:de:8b:e0:13:18:90:b8:3f:37:16:08:c2: ce:02:d1:d0:b2:cc:48:71:f4:95:39:96:70:8e:55: 5f:11:b5:ce:44:ba:a5:b2:7c:f1:cb:ab:5a:ca:b3: 99:01:61:e8:38:78:12:89:c5:a4:7a:dd:ea:f8:fa: 51:24:31:28:d8:a1:2b:cc:3e:fc:00:2d:57:4f:52: 10:23:e8:c1:63:4b:62:36:a9:09:60:1e:96:aa:9d: 52:db:ee:79:f8:85:6b:9d:e7:da:fa:9f:59:6e:5c: d6:0f:5c:2c:8e:34:27:00:a4:7f:7d:0a:cd:2d:e5: 0e:eb:9c:35:32:00:1a:b4:fe:3d:61:7c:8f:14:a8: 69:0c:6b:ad:25:11:16:27:08:4c:8c:07:ef:07:f1: 17:cb:1d:bd:1b:36:9b:99:3d:d9:e4:87:06:bb:79: 2b:bf:3a:14:5c:61:03:72:b6:05:5c:b5:82:2a:e7: 8a:2f:c8:b4:58:ae:55:dc:d8:14:e0:16:90:a7:dc: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:78:D8:4F:33:4E:D9:09:92:5A:39:00:1E:4A:57:D2:3E:CC:3F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c822d6-1e57-3699-b2fe-e8e2b1c0b144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:66:73:0a:7b:92:c6:8c:0b:52:a4:a0:d2:f2:67:48:01:91: 03:1b:b4:f6:7f:96:38:50:d3:03:f6:fd:48:1c:1e:05:0e:25: 34:b1:e3:96:9e:e8:50:fe:d1:0c:a0:7c:f2:0c:4e:52:1e:d7: 5f:32:59:9e:b9:e0:dc:e5:9f:af:bc:82:25:fc:87:fd:61:2e: 40:f3:dd:a4:5d:f2:d7:67:bb:4b:1b:01:ad:bd:d0:b4:fd:10: 6c:46:2b:c8:1f:c9:10:30:99:75:b9:fc:9e:75:11:26:23:dd: 4f:28:4e:b8:93:37:76:8b:8e:f0:43:c7:d5:dd:2c:41:1c:90: f8:56:19:61:20:e5:ff:d7:83:f5:7a:e5:c1:bf:97:25:ff:b4: b1:b3:b5:7c:28:19:35:66:7e:1c:bb:c7:df:7f:be:29:e1:45: 1d:33:84:4c:bc:7d:68:4c:23:80:a3:10:4a:af:ee:75:a4:0d: 15:a2:71:eb:76:22:42:7e:23:e8:9a:fd:b1:65:0c:88:55:c0: 0a:9c:e1:71:27:8d:e8:4b:96:d2:2c:61:0f:e3:49:cf:67:76: 62:b1:67:23:b2:bf:cd:2f:0e:e9:d4:af:4c:97:d8:b0:79:a5: 8e:d9:af:37:8d:4d:2b:f4:f1:17:24:5d:c5:3e:38:b8:2d:33: f0:6a:62:0f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/1uBmYLHimFxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxOTEyMzQxNVoXDTI1MTExNzEzMzQxNVowLzEtMCsGA1UEAxMk MWIwYzI4ZDQtODJjZi00ZWNjLWEyM2ItZjVkOWZlM2JiNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxgvZBsCKzD2HRJbUMA+Mhuz1yD8DgOmL6Zx tbGbkGVwpJRm0QPk64y4LEhTM+zdJ2srWOe8DxVp/G1ZAkrei+ATGJC4PzcWCMLO AtHQssxIcfSVOZZwjlVfEbXORLqlsnzxy6tayrOZAWHoOHgSicWket3q+PpRJDEo 2KErzD78AC1XT1IQI+jBY0tiNqkJYB6Wqp1S2+55+IVrnefa+p9ZblzWD1wsjjQn AKR/fQrNLeUO65w1MgAatP49YXyPFKhpDGutJREWJwhMjAfvB/EXyx29GzabmT3Z 5IcGu3krvzoUXGEDcrYFXLWCKueKL8i0WK5V3NgU4BaQp9x5WwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFl42E8zTtkJklo5AB5KV9I+zD/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFjODIyZDYtMWU1Ny0z Njk5LWIyZmUtZThlMmIxYzBiMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBZZnMKe5LGjAtSpKDS8mdIAZEDG7T2f5Y4UNMD 9v1IHB4FDiU0seOWnuhQ/tEMoHzyDE5SHtdfMlmeueDc5Z+vvIIl/If9YS5A892k XfLXZ7tLGwGtvdC0/RBsRivIH8kQMJl1ufyedREmI91PKE64kzd2i47wQ8fV3SxB HJD4VhlhIOX/14P1euXBv5cl/7Sxs7V8KBk1Zn4cu8fff74p4UUdM4RMvH1oTCOA oxBKr+51pA0VonHrdiJCfiPomv2xZQyIVcAKnOFxJ43oS5bSLGEP40nPZ3ZisWcj sr/NLw7p1K9Ml9iweaWO2a83jU0r9PEXJF3FPji4LTPwamIP -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:47 2025 by rpki-client