$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea8b4b1f-59e8-3dc5-a8c4-0c24863b2b09.roa File: ea8b4b1f-59e8-3dc5-a8c4-0c24863b2b09.roa (raw, json) Hash identifier: yCPSpSapy7A5fkMDRX3geM+ie+/0sPJNlKYH8aLxX5c= Subject key identifier: D7:65:30:54:F0:72:BE:F7:00:AF:F4:71:B3:F2:5B:48:6C:C0:62:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B838214802E566E76D2E8C180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea8b4b1f-59e8-3dc5-a8c4-0c24863b2b09.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396616 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:14:80:2e:56:6e:76:d2:e8:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=a90a1ea7-66ba-4d5b-8609-fa76265e961e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:f1:3a:5d:8f:c0:0c:8f:e2:c9:1e:05:10: 04:05:42:68:ae:81:cb:e2:1d:d5:18:0a:a0:56:40: eb:85:16:13:c3:5b:c8:76:9c:55:db:40:d9:9a:ac: 35:23:c1:a5:9a:a3:5c:18:7b:5e:6d:6e:3e:dc:77: c4:c4:27:be:1c:20:ca:fe:9d:d0:c5:51:89:9e:73: 6b:d2:4c:fa:40:fb:32:fa:10:82:ca:7e:99:b5:8e: e1:fc:05:b5:bf:f4:bc:65:9f:44:a2:8a:18:f3:eb: 83:85:5a:33:c9:b4:23:d1:56:79:56:e3:a8:ae:89: e9:f3:8f:47:ac:5e:9a:5b:7d:e5:af:05:6f:27:b0: 45:86:1e:f0:c5:f0:ab:ac:30:e2:ee:d4:b3:cd:70: e4:dd:17:54:fe:8f:3a:93:c2:2a:e5:12:04:17:79: fe:41:48:fc:0a:8f:cc:fd:d8:55:f8:93:df:56:aa: 0e:a0:6c:48:c6:e1:ce:fd:44:4f:a6:db:45:f8:04: ff:b7:14:48:72:c3:05:ac:11:3f:b7:ef:d6:6f:70: 89:2a:5f:7b:a5:ee:36:a4:74:22:9e:30:e3:e8:47: 01:31:84:bd:d8:04:23:60:66:ed:de:bf:67:04:6d: 4d:40:aa:68:f7:4d:4c:10:54:34:ad:fa:58:5a:b9: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:65:30:54:F0:72:BE:F7:00:AF:F4:71:B3:F2:5B:48:6C:C0:62:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea8b4b1f-59e8-3dc5-a8c4-0c24863b2b09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:17:9a:09:06:9a:56:97:43:42:ad:97:11:da:5d:0a:ca:d8: ef:a2:03:94:19:06:9b:a4:51:13:0a:c4:be:c7:23:98:c2:60: 1f:90:d7:cd:5e:8d:d2:8a:24:00:d6:26:1d:1b:d3:d7:11:11: e6:1b:b8:29:78:5c:c3:a3:9d:98:9c:b5:f0:de:c6:5a:8e:48: 35:d9:f1:52:c2:02:1a:93:66:79:b6:a5:7c:13:6e:b7:3a:be: 49:7c:ab:ce:36:c2:8d:4c:87:3f:33:56:c9:71:22:14:1d:05: ab:3b:90:df:59:87:cb:5d:f7:fa:2a:8b:3f:9d:d0:a2:fe:9d: 6c:b3:53:7d:7e:f5:b4:a1:a0:85:51:28:62:aa:53:62:3b:6d: bb:cb:98:a8:d0:3a:f3:21:a6:92:b5:50:55:43:47:b2:41:4a: 28:4d:de:0e:2b:9c:bd:13:60:cd:9a:ac:df:9d:b0:30:61:ab: 65:6f:66:7a:23:a1:f3:7b:51:4e:de:5c:25:7c:3e:93:20:90: 9e:ac:d0:f3:47:f2:92:06:13:9b:93:bc:28:85:e9:c7:b1:99: e9:5d:6b:55:14:14:0a:ad:ff:16:48:49:4a:95:57:a1:92:45: 22:20:e8:77:bf:c9:ee:42:1c:71:d5:4c:a8:52:13:3a:91:77: 23:04:58:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDghSALlZudtLowYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk YTkwYTFlYTctNjZiYS00ZDViLTg2MDktZmE3NjI2NWU5NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/XxOl2PwAyP4skeBRAEBUJoroHL4h3VGAqg VkDrhRYTw1vIdpxV20DZmqw1I8GlmqNcGHtebW4+3HfExCe+HCDK/p3QxVGJnnNr 0kz6QPsy+hCCyn6ZtY7h/AW1v/S8ZZ9EoooY8+uDhVozybQj0VZ5VuOoronp849H rF6aW33lrwVvJ7BFhh7wxfCrrDDi7tSzzXDk3RdU/o86k8Iq5RIEF3n+QUj8Co/M /dhV+JPfVqoOoGxIxuHO/URPpttF+AT/txRIcsMFrBE/t+/Wb3CJKl97pe42pHQi njDj6EcBMYS92AQjYGbt3r9nBG1NQKpo901MEFQ0rfpYWrktzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNdlMFTwcr73AK/0cbPyW0hswGJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWE4YjRiMWYtNTllOC0z ZGM1LWE4YzQtMGMyNDg2M2IyYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJUXmgkGmlaXQ0KtlxHaXQrK2O+iA5QZBpukURMKxL7HI5jCYB+Q 181ejdKKJADWJh0b09cREeYbuCl4XMOjnZictfDexlqOSDXZ8VLCAhqTZnm2pXwT brc6vkl8q842wo1Mhz8zVslxIhQdBas7kN9Zh8td9/oqiz+d0KL+nWyzU31+9bSh oIVRKGKqU2I7bbvLmKjQOvMhppK1UFVDR7JBSihN3g4rnL0TYM2arN+dsDBhq2Vv ZnojofN7UU7eXCV8PpMgkJ6s0PNH8pIGE5uTvCiF6cexmelda1UUFAqt/xZISUqV V6GSRSIg6He/ye5CHHHVTKhSEzqRdyMEWEM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:16:39 2025 by rpki-client