$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb92e5a-5708-33f6-87c1-430aad22847e.roa File: cfb92e5a-5708-33f6-87c1-430aad22847e.roa (raw, json) Hash identifier: bhh3Nax42/poNKzNbWNKLn9ne7Ol4oMeiYry+cmdTL4= Subject key identifier: 7F:66:AB:E6:A6:BE:88:32:2A:D1:CF:F6:28:40:2E:A2:A2:0C:F9:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF25694F04800576A0F6F1700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb92e5a-5708-33f6-87c1-430aad22847e.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396592 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:94:f0:48:00:57:6a:0f:6f:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=ecbb7859-1e2b-4f55-bbf1-0b7b26c74495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:f5:f4:b3:60:9d:9c:31:3b:2d:e7:50:5c: 00:45:2c:93:68:ad:ff:34:30:85:90:36:3a:93:c2: 58:3a:a7:92:ac:a0:ec:6d:85:10:58:3f:d6:a0:38: 81:74:e1:c6:af:73:fe:dd:1b:69:de:a5:cc:6c:65: 21:fe:46:11:b0:a0:52:c3:42:8c:f2:a5:38:91:36: 9d:fd:7a:ac:1f:91:44:24:83:ff:0f:e3:f3:25:ee: 60:1f:50:4f:23:64:ae:f3:fd:41:7a:3b:06:da:d4: 10:cf:04:fe:71:7a:04:69:29:d7:e2:fb:5d:cd:1c: b4:79:48:a5:9c:8b:82:7d:98:e2:3f:31:58:65:b3: 43:45:aa:f0:32:df:f7:4d:37:64:83:4e:47:95:e9: f6:b4:fc:32:0d:c1:ba:b1:8b:96:95:3e:13:91:14: 88:45:3d:5d:82:aa:dc:f2:f5:bf:7a:20:6d:19:ff: 81:bc:68:16:a7:74:da:bc:f7:1a:f7:b6:f1:44:06: e4:ca:73:0a:7a:2d:fe:3e:6e:23:64:67:bd:7b:52: 67:56:17:fe:4b:c2:c9:2e:b5:ab:d7:71:88:39:37: e0:fa:9f:2e:46:8e:82:51:f4:03:34:f7:dd:3b:9d: 03:1f:fd:82:15:d9:a2:2e:de:40:23:10:14:bd:ce: 8a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:66:AB:E6:A6:BE:88:32:2A:D1:CF:F6:28:40:2E:A2:A2:0C:F9:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfb92e5a-5708-33f6-87c1-430aad22847e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0a:93:fc:38:c7:9d:05:49:fc:32:ac:a0:9b:2b:0b:9a:06: 79:00:81:6b:7e:ba:c4:6d:4f:3f:5d:69:8d:80:47:fe:bd:77: c5:0b:6f:13:33:50:66:cf:07:fa:f4:b0:96:dc:84:e0:6f:cc: b9:56:38:20:85:48:d7:81:dc:45:77:db:f5:88:b0:36:04:a9: 2c:c4:d6:1b:9f:e5:fb:ef:fb:1a:48:7a:2a:fc:af:5d:44:f6: 73:e9:da:1d:88:cf:8a:db:98:89:45:45:65:1c:b6:f7:29:11: 6a:62:c5:a7:fb:64:99:d2:c2:30:54:17:15:5c:4a:23:11:26: 3e:71:f3:7b:ac:0b:68:a6:d0:dc:83:2f:d3:07:57:a5:06:c2: 66:de:48:b9:82:9d:7c:8a:06:5a:c6:bc:3c:3f:01:1f:df:2d: 79:ce:52:c8:10:ee:f2:3d:fa:35:09:25:d6:a9:05:6b:11:da: 09:0a:9a:05:b7:40:9c:ee:ae:34:1d:93:f1:d0:1a:f4:e4:11: 92:72:81:94:36:7b:aa:6b:a6:b8:70:91:0d:8c:72:7a:6b:b2: 70:b4:fa:e7:9e:85:06:e5:71:3d:b3:78:a6:68:b3:a8:34:c7: e9:49:c6:76:db:23:ed:f4:85:20:b6:c2:1b:e3:86:28:dc:0d: 86:87:98:8e -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpTwSABXag9vFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZWNiYjc4NTktMWUyYi00ZjU1LWJiZjEtMGI3YjI2Yzc0NDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmT19LNgnZwxOy3nUFwARSyTaK3/NDCFkDY6 k8JYOqeSrKDsbYUQWD/WoDiBdOHGr3P+3Rtp3qXMbGUh/kYRsKBSw0KM8qU4kTad /XqsH5FEJIP/D+PzJe5gH1BPI2Su8/1BejsG2tQQzwT+cXoEaSnX4vtdzRy0eUil nIuCfZjiPzFYZbNDRarwMt/3TTdkg05Hlen2tPwyDcG6sYuWlT4TkRSIRT1dgqrc 8vW/eiBtGf+BvGgWp3TavPca97bxRAbkynMKei3+Pm4jZGe9e1JnVhf+S8LJLrWr 13GIOTfg+p8uRo6CUfQDNPfdO50DH/2CFdmiLt5AIxAUvc6KRwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH9mq+amvogyKtHP9ihALqKiDPlEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2ZiOTJlNWEtNTcwOC0z M2Y2LTg3YzEtNDMwYWFkMjI4NDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCCCpP8OMedBUn8MqygmysLmgZ5AIFrfrrEbU8/ XWmNgEf+vXfFC28TM1Bmzwf69LCW3ITgb8y5VjgghUjXgdxFd9v1iLA2BKksxNYb n+X77/saSHoq/K9dRPZz6dodiM+K25iJRUVlHLb3KRFqYsWn+2SZ0sIwVBcVXEoj ESY+cfN7rAtoptDcgy/TB1elBsJm3ki5gp18igZaxrw8PwEf3y15zlLIEO7yPfo1 CSXWqQVrEdoJCpoFt0Cc7q40HZPx0Br05BGScoGUNnuqa6a4cJENjHJ6a7JwtPrn noUG5XE9s3imaLOoNMfpScZ22yPt9IUgtsIb44Yo3A2Gh5iO -----END CERTIFICATE-----Generated at Sat Aug 23 14:28:09 2025 by rpki-client