$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8622e88-84ef-3fa6-93fd-656ec6e6d9d1.roa File: e8622e88-84ef-3fa6-93fd-656ec6e6d9d1.roa (raw, json) Hash identifier: o8yMpQQuU4vEjXNj5UW5RCmWwOqvPoDGZY5pW+Qi8Zw= Subject key identifier: 5A:FD:FA:48:19:FD:55:BC:86:81:EA:38:A5:1D:FA:08:96:ED:26:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF256954F1D37FED33EFA4D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8622e88-84ef-3fa6-93fd-656ec6e6d9d1.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 397194 IP address blocks: 2001:502:cbe4::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:95:4f:1d:37:fe:d3:3e:fa:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=a3f489b1-b8f1-4811-aa9f-9e04999f86d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:64:ed:78:f5:ab:3e:0f:0b:ac:95:90:57:c1: 82:98:dc:4e:9f:04:25:71:43:d7:20:fc:a8:96:3d: cc:1a:a3:58:78:60:ea:a0:ae:e6:2e:9e:f7:c9:d3: 4e:92:42:7b:80:62:81:cd:6b:b9:50:2e:66:c6:71: 7c:8b:84:9b:7c:76:97:20:e2:96:a5:d2:c8:e2:14: 38:3d:f0:db:80:2d:eb:6d:52:17:51:09:55:83:7f: a2:3a:41:7d:9d:67:89:19:d1:f6:ff:eb:d5:12:f0: 2d:cd:7f:5f:5a:d1:09:eb:bd:ea:3c:74:87:25:1f: 92:90:99:45:6a:97:e6:e7:7b:18:9e:c4:05:45:35: 40:0d:af:aa:e5:0a:47:ad:95:50:27:a6:be:f9:b7: 6f:bd:af:2b:38:16:b5:04:af:c3:8c:bc:65:e2:8b: c4:9e:97:f5:26:6c:a8:6b:95:eb:9c:dc:28:07:3a: 9d:b1:fd:80:ed:a3:5e:67:f8:17:2e:17:ed:b2:e5: 6d:d5:d5:ce:ca:2c:e3:e7:17:fe:e8:82:8b:10:40: d4:0a:41:b8:d8:8f:d5:05:e6:96:e8:56:45:e6:91: 82:6e:b2:b2:9c:67:90:9e:a0:94:6b:42:6d:9a:b7: 33:08:a9:30:97:a7:ac:22:dd:40:89:2d:d7:d5:f8: e9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FD:FA:48:19:FD:55:BC:86:81:EA:38:A5:1D:FA:08:96:ED:26:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8622e88-84ef-3fa6-93fd-656ec6e6d9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:77:4a:8d:fd:fe:b5:23:bd:6a:34:ff:b2:15:1b:5b:53:99: d3:24:11:24:3e:cf:bb:df:5b:59:bc:51:69:e9:c9:d4:f3:9b: 0e:86:3c:e0:2d:65:fa:1e:81:2f:e1:fb:c9:a0:12:17:a5:01: 38:de:19:1f:ac:5f:1f:35:e1:18:59:f0:ec:05:07:12:e9:3e: f8:84:4a:1e:72:be:82:60:aa:d6:15:bd:4c:2a:1d:95:df:d8: e1:e3:2c:fc:2d:66:b2:99:09:e9:bb:58:3b:f2:9c:19:59:1d: 3a:2f:a8:ef:df:df:25:a8:2b:75:1d:be:83:da:dd:fa:33:d0: 06:31:7e:09:6f:53:b6:ce:59:d5:bf:52:29:3a:a5:0c:ca:05: da:12:d5:58:1a:1d:d7:84:d9:13:b0:de:ab:33:7e:ca:8f:39: 00:3c:35:d9:25:77:08:ba:6f:4d:6c:29:06:90:c9:5c:13:4d: 45:4a:1c:93:5a:52:94:49:ef:e1:c7:2e:9b:d1:6a:69:20:c0: 9d:74:d3:38:7d:01:ec:4c:72:78:3d:68:f1:2b:b6:aa:a1:11: 78:ea:78:33:3a:f5:59:93:d1:58:a6:27:5b:57:b0:7b:09:4b: 4a:a2:05:13:59:e1:69:fe:4b:8b:34:72:69:3e:cd:88:ba:26: c0:95:27:18 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpVPHTf+0z76TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YTNmNDg5YjEtYjhmMS00ODExLWFhOWYtOWUwNDk5OWY4NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2TtePWrPg8LrJWQV8GCmNxOnwQlcUPXIPyo lj3MGqNYeGDqoK7mLp73ydNOkkJ7gGKBzWu5UC5mxnF8i4SbfHaXIOKWpdLI4hQ4 PfDbgC3rbVIXUQlVg3+iOkF9nWeJGdH2/+vVEvAtzX9fWtEJ673qPHSHJR+SkJlF apfm53sYnsQFRTVADa+q5QpHrZVQJ6a++bdvva8rOBa1BK/DjLxl4ovEnpf1Jmyo a5XrnNwoBzqdsf2A7aNeZ/gXLhftsuVt1dXOyizj5xf+6IKLEEDUCkG42I/VBeaW 6FZF5pGCbrKynGeQnqCUa0JtmrczCKkwl6esIt1AiS3X1fjpJwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFr9+kgZ/VW8hoHqOKUd+giW7SYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTg2MjJlODgtODRlZi0z ZmE2LTkzZmQtNjU2ZWM2ZTZkOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEd0qN/f61I71qNP+yFRtbU5nTJBEkPs+731tZ vFFp6cnU85sOhjzgLWX6HoEv4fvJoBIXpQE43hkfrF8fNeEYWfDsBQcS6T74hEoe cr6CYKrWFb1MKh2V39jh4yz8LWaymQnpu1g78pwZWR06L6jv398lqCt1Hb6D2t36 M9AGMX4Jb1O2zlnVv1IpOqUMygXaEtVYGh3XhNkTsN6rM37KjzkAPDXZJXcIum9N bCkGkMlcE01FShyTWlKUSe/hxy6b0WppIMCddNM4fQHsTHJ4PWjxK7aqoRF46ngz OvVZk9FYpidbV7B7CUtKogUTWeFp/kuLNHJpPs2IuibAlScY -----END CERTIFICATE-----Generated at Sat Aug 23 13:26:06 2025 by rpki-client