$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe5921b-e849-3d2c-b734-5940a246cbd6.roa File: dfe5921b-e849-3d2c-b734-5940a246cbd6.roa (raw, json) Hash identifier: CfwETIW2GUvGVgWpTYuS97eAdsvs84Jtc4Q7UbWXx80= Subject key identifier: 17:F2:42:1F:96:06:00:AF:EA:D4:36:0E:D9:37:A5:94:DC:01:0E:70 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF2568FE6156AA2A053FAF580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe5921b-e849-3d2c-b734-5940a246cbd6.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 396553 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:8f:e6:15:6a:a2:a0:53:fa:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=a4023c80-656d-45d0-9789-471256823d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:60:54:41:a8:29:f7:11:26:0b:cc:08:87:54: fa:e6:dd:87:41:d4:fc:8f:53:b7:22:96:ce:58:00: c3:21:b0:38:e1:86:6f:dd:0e:65:75:ce:88:98:18: 8a:af:9e:4d:59:fa:81:05:68:c8:8b:e7:ab:51:a3: 10:0d:75:b5:1e:6a:f0:f3:4d:47:5d:12:55:34:5d: 36:f9:9e:91:37:de:22:a9:e7:12:f6:55:a1:80:69: 5b:66:7b:2e:8a:69:cd:e8:f1:b8:a7:7f:95:fb:6e: 78:22:80:d9:eb:d4:f9:4c:73:38:72:8d:b7:89:e4: a0:cb:b2:e2:60:ec:47:f5:94:8b:6e:53:9c:fa:91: e6:40:e9:1b:24:b7:96:65:7c:27:86:46:a7:e8:e9: 9c:33:9d:a3:a6:af:ab:a5:b5:7e:77:71:41:7a:7e: 53:98:11:c4:c0:0a:56:9f:28:33:be:49:fd:c3:2a: 50:76:fe:af:76:8c:d0:26:03:4b:72:81:40:c1:97: 7a:10:e6:d7:1b:df:66:d1:5e:02:95:18:f0:3a:a7: 37:06:5e:91:e1:97:5e:55:2e:e1:ef:42:b1:70:36: c4:cd:7a:1f:f2:eb:d0:d8:a2:b2:5e:3a:3e:ba:2e: cc:9a:20:e1:bf:22:f3:79:e0:54:e2:43:2a:f9:71: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F2:42:1F:96:06:00:AF:EA:D4:36:0E:D9:37:A5:94:DC:01:0E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfe5921b-e849-3d2c-b734-5940a246cbd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:59:8b:b4:a9:f3:a1:2f:c6:0d:8b:ec:59:75:71:2e:e7:7b: c9:98:f5:e6:c1:0a:eb:17:2f:61:d6:e5:84:c1:b2:8b:18:53: d9:0f:fc:d3:8e:71:dc:d1:e6:91:74:16:78:b5:84:96:1e:30: 1e:ce:79:ed:79:8d:e7:db:45:31:2f:6b:49:b3:6f:f0:f6:87: ea:03:5f:a0:e5:92:59:25:b9:2d:78:e5:75:91:34:f0:5e:f2: c7:f8:4d:e7:05:bc:ee:2f:ce:42:cc:06:f1:c4:47:18:b0:9d: 72:d8:93:41:24:a1:2b:71:2c:db:93:51:f1:9d:70:8b:f6:42: 87:fc:4f:85:5c:ce:98:34:bd:79:d1:d2:b1:70:f5:0e:ec:52: d8:c4:fe:69:05:34:ad:00:e4:09:02:04:da:3f:c9:f8:f9:c3: 62:79:08:05:ca:fa:9a:12:2b:4f:85:62:52:e4:2b:60:1d:7b: 57:5f:2b:27:9e:6a:de:e5:97:af:d2:d1:18:fe:80:99:cf:7f: f8:aa:8c:d7:6d:5e:d6:74:29:cf:c6:13:f0:78:5a:14:ce:e2: 07:73:c9:db:3e:8c:4e:57:72:46:be:67:36:2c:41:b0:a3:4d: e2:32:65:1f:6f:dd:e4:e1:d6:86:09:46:36:56:59:59:0c:8d: ad:4c:42:a2 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVo/mFWqioFP69YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YTQwMjNjODAtNjU2ZC00NWQwLTk3ODktNDcxMjU2ODIzZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmBUQagp9xEmC8wIh1T65t2HQdT8j1O3IpbO WADDIbA44YZv3Q5ldc6ImBiKr55NWfqBBWjIi+erUaMQDXW1Hmrw801HXRJVNF02 +Z6RN94iqecS9lWhgGlbZnsuimnN6PG4p3+V+254IoDZ69T5THM4co23ieSgy7Li YOxH9ZSLblOc+pHmQOkbJLeWZXwnhkan6OmcM52jpq+rpbV+d3FBen5TmBHEwApW nygzvkn9wypQdv6vdozQJgNLcoFAwZd6EObXG99m0V4ClRjwOqc3Bl6R4ZdeVS7h 70KxcDbEzXof8uvQ2KKyXjo+ui7MmiDhvyLzeeBU4kMq+XG8oQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBfyQh+WBgCv6tQ2Dtk3pZTcAQ5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGZlNTkyMWItZTg0OS0z ZDJjLWI3MzQtNTk0MGEyNDZjYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBDWYu0qfOhL8YNi+xZdXEu53vJmPXmwQrrFy9h 1uWEwbKLGFPZD/zTjnHc0eaRdBZ4tYSWHjAeznnteY3n20UxL2tJs2/w9ofqA1+g 5ZJZJbkteOV1kTTwXvLH+E3nBbzuL85CzAbxxEcYsJ1y2JNBJKErcSzbk1HxnXCL 9kKH/E+FXM6YNL150dKxcPUO7FLYxP5pBTStAOQJAgTaP8n4+cNieQgFyvqaEitP hWJS5CtgHXtXXysnnmre5Zev0tEY/oCZz3/4qozXbV7WdCnPxhPweFoUzuIHc8nb PoxOV3JGvmc2LEGwo03iMmUfb93k4daGCUY2VllZDI2tTEKi -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:19 2025 by rpki-client