$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0d963-68ea-3872-81e3-914cd5c02a95.roa File: c3f0d963-68ea-3872-81e3-914cd5c02a95.roa (raw, json) Hash identifier: c1yEKnUr+Gxbr5KgLewtkhah3pTkfDcSSyuk3jihS98= Subject key identifier: C1:24:2E:AB:A2:5C:50:49:D4:80:72:30:38:4B:59:24:08:09:C8:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C4D17FAEEB75A6ADBD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0d963-68ea-3872-81e3-914cd5c02a95.roa Signing time: Thu 21 Aug 2025 12:31:02 +0000 ROA not before: Thu 21 Aug 2025 12:31:02 +0000 ROA not after: Wed 19 Nov 2025 13:31:02 +0000 asID: 397206 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c4:d1:7f:ae:eb:75:a6:ad:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:02 2025 GMT Not After : Nov 19 13:31:02 2025 GMT Subject: CN=e6939958-2058-493c-aec2-20dcc2a2519c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:24:73:2b:8a:69:e1:cf:61:3f:fd:a9:1c:2a: 49:16:a1:d1:bc:a7:87:1f:3b:19:69:df:2e:a1:df: 86:1c:b6:47:d0:db:41:0c:b1:19:ce:13:ef:1c:93: 4a:a3:b4:af:38:8d:26:b7:3b:13:b0:0a:d9:c8:41: 77:19:11:21:02:44:ca:77:52:f8:a2:f7:5d:94:26: b4:23:25:03:ef:fa:50:a7:b8:ee:f9:b6:cd:5c:7e: 5e:cd:cb:c4:e2:8a:d9:81:9c:ba:a1:7c:4b:1c:08: 66:0e:d6:9a:8c:ad:a7:64:18:7a:a2:16:f2:da:7e: 84:d0:84:2a:42:e0:0f:26:d5:5b:45:7a:6c:2c:8d: 7b:3b:e4:0b:1d:e5:8d:14:6b:92:3d:68:3c:e6:8f: 48:af:d2:78:ae:37:dc:a5:f6:14:d0:7f:3d:fd:1a: 0a:a8:40:a6:21:73:34:59:fb:f2:44:45:86:92:f1: 3c:04:03:8f:c6:63:75:42:01:f2:8f:34:12:d6:5f: 8a:40:3e:9b:72:4a:37:90:ea:ad:33:29:01:84:30: a1:ef:c7:87:0b:5f:73:39:df:8a:da:af:01:7b:96: 41:7c:ed:95:31:66:83:0c:5e:cd:4d:3c:21:b1:d4: 77:68:ff:02:9d:a1:5a:61:eb:fa:ef:a8:3a:d7:a1: 7a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:24:2E:AB:A2:5C:50:49:D4:80:72:30:38:4B:59:24:08:09:C8:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3f0d963-68ea-3872-81e3-914cd5c02a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8f:11:45:ea:64:19:4b:da:4e:63:5e:24:ac:4d:4b:b8:da: a4:23:75:6a:b8:18:0b:64:fa:49:c1:1f:01:79:22:0e:d8:71: e6:69:80:b8:d1:70:4a:77:74:e7:a4:89:c2:0a:46:4f:75:2b: 67:8e:a3:7e:4f:f8:c9:82:c1:bc:be:ee:d8:3e:37:8e:f2:76: 05:47:84:e0:61:83:14:ca:ed:b9:cb:ad:cc:4c:65:79:02:1d: dc:33:fd:ea:af:41:84:a1:88:78:5c:67:ba:d3:bb:80:2b:7f: 20:74:f8:7a:e9:e4:67:3c:6e:ab:ec:9a:3f:78:82:72:a3:5a: 4f:1c:e6:bd:9b:e2:73:a1:b8:9f:e0:4d:95:62:46:5c:6e:7e: 5e:68:27:3c:a2:6a:48:95:27:d8:d9:1a:70:5d:c5:8c:c4:07: f1:5e:40:de:ac:99:2d:db:0a:cd:7a:45:a0:d2:b6:76:37:83: 7b:86:f9:7f:8b:a9:44:68:8b:92:81:b5:c0:0d:43:f0:be:a3: 3c:cb:b0:84:6e:b2:9d:9e:b4:87:06:16:f7:86:39:5d:13:2f: 32:a9:1e:f1:31:7d:0a:5e:12:ee:06:84:10:23:71:bf:11:2b: b0:d6:43:5b:2c:c6:ca:89:ad:10:ec:63:61:a3:d4:ae:a6:03: 77:0d:e0:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8TRf67rdaatvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwMloXDTI1MTExOTEzMzEwMlowLzEtMCsGA1UEAxMk ZTY5Mzk5NTgtMjA1OC00OTNjLWFlYzItMjBkY2MyYTI1MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCRzK4pp4c9hP/2pHCpJFqHRvKeHHzsZad8u od+GHLZH0NtBDLEZzhPvHJNKo7SvOI0mtzsTsArZyEF3GREhAkTKd1L4ovddlCa0 IyUD7/pQp7ju+bbNXH5ezcvE4orZgZy6oXxLHAhmDtaajK2nZBh6ohby2n6E0IQq QuAPJtVbRXpsLI17O+QLHeWNFGuSPWg85o9Ir9J4rjfcpfYU0H89/RoKqECmIXM0 WfvyREWGkvE8BAOPxmN1QgHyjzQS1l+KQD6bcko3kOqtMykBhDCh78eHC19zOd+K 2q8Be5ZBfO2VMWaDDF7NTTwhsdR3aP8CnaFaYev676g616F6HwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMEkLquiXFBJ1IByMDhLWSQICchWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzNmMGQ5NjMtNjhlYS0z ODcyLTgxZTMtOTE0Y2Q1YzAyYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqPEUXqZBlL2k5jXiSsTUu42qQjdWq4GAtk+knBHwF5Ig7YceZp gLjRcEp3dOekicIKRk91K2eOo35P+MmCwby+7tg+N47ydgVHhOBhgxTK7bnLrcxM ZXkCHdwz/eqvQYShiHhcZ7rTu4ArfyB0+Hrp5Gc8bqvsmj94gnKjWk8c5r2b4nOh uJ/gTZViRlxufl5oJzyiakiVJ9jZGnBdxYzEB/FeQN6smS3bCs16RaDStnY3g3uG +X+LqURoi5KBtcANQ/C+ozzLsIRusp2etIcGFveGOV0TLzKpHvExfQpeEu4GhBAj cb8RK7DWQ1ssxsqJrRDsY2Gj1K6mA3cN4Es= -----END CERTIFICATE-----Generated at Sat Aug 23 13:25:28 2025 by rpki-client