$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f60af5ef-a05a-35dd-bd57-18e8198c7629.roa File: f60af5ef-a05a-35dd-bd57-18e8198c7629.roa (raw, json) Hash identifier: Uo2BJ+Q4HxgxP0XU2xONQMwXGzkeBmskoqDtZzCb5Ck= Subject key identifier: D1:E6:CA:6D:49:09:AE:87:93:3A:CD:03:D0:C4:71:5A:89:6F:8E:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C66920134E2C4FE4CD78 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f60af5ef-a05a-35dd-bd57-18e8198c7629.roa Signing time: Thu 21 Aug 2025 12:31:03 +0000 ROA not before: Thu 21 Aug 2025 12:31:03 +0000 ROA not after: Wed 19 Nov 2025 13:31:03 +0000 asID: 36620 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c6:69:20:13:4e:2c:4f:e4:cd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:03 2025 GMT Not After : Nov 19 13:31:03 2025 GMT Subject: CN=fb5ce03e-a00e-4bc8-9d5c-7a09c9123f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:4f:da:68:b0:c9:59:57:c7:a5:80:f8:d4: ed:97:b3:7d:f5:ed:08:a5:89:be:22:51:c3:22:92: 31:81:25:6a:eb:f1:f9:97:01:c7:0d:cc:32:ed:44: 53:9f:a0:99:9a:92:01:99:2d:3d:ec:6e:7a:7c:d1: 2b:7b:48:ec:43:61:0d:78:c5:a8:c8:85:25:37:88: ea:d0:99:f8:02:74:ec:dc:23:c3:18:2c:84:d1:5f: b0:5b:a0:94:f7:3e:5c:9c:97:fc:45:d5:99:1f:68: 29:15:69:ee:67:4f:a7:c7:69:34:a6:0b:e8:1b:4d: f0:98:58:44:86:34:af:1c:2c:6e:b2:53:d0:08:0a: fd:69:43:37:26:1c:a8:a5:94:85:4a:06:00:c7:75: 25:f8:67:19:0c:d8:cf:05:7b:7e:90:67:a9:7f:3e: f6:65:e5:05:74:0a:9a:3b:51:45:ff:67:1b:77:3e: 14:6c:3a:ad:12:28:57:38:f5:49:85:3c:6f:02:b1: 7e:eb:6f:cf:76:85:df:d5:8f:a6:15:eb:3f:b7:bd: 2d:3a:f5:25:46:e9:82:ea:80:1f:1c:de:ca:0d:b4: 24:26:14:6a:0c:94:a3:14:33:ef:d5:d6:85:01:5f: 1d:19:9a:de:ca:7a:50:bd:68:b3:d9:e2:d2:0b:47: 53:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E6:CA:6D:49:09:AE:87:93:3A:CD:03:D0:C4:71:5A:89:6F:8E:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f60af5ef-a05a-35dd-bd57-18e8198c7629.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:bc:f8:6c:28:61:2c:f3:4f:c6:a3:f2:b1:58:c3:22:3b:ac: 0f:b2:b0:df:d1:6c:88:73:c2:3c:05:6b:b1:cd:6c:99:76:69: 42:f1:2a:29:76:57:02:21:6f:f2:33:dc:e2:59:24:a3:30:73: 5d:ee:b0:28:19:81:42:41:01:05:60:0f:55:f9:70:2a:c1:4a: 4a:66:8e:69:f9:e7:2f:6b:97:cb:fc:c4:f1:03:eb:e3:2b:f0: 54:51:4d:60:3e:13:1b:90:dd:8a:8e:79:61:3c:8a:7b:4b:95: bd:97:60:12:08:10:73:9d:b9:40:6b:b6:7f:5a:a7:b8:d8:06: 9a:68:2f:ed:9e:f5:9d:11:c4:86:78:a7:ca:78:03:c0:fe:8c: d6:ae:ed:f4:48:43:ff:23:b2:c8:89:6a:c2:a3:83:f2:cd:d8: 09:29:7d:28:87:ea:24:3f:14:ed:5f:bb:b6:25:cc:8f:37:32: 91:0f:e6:87:3c:bf:13:39:5f:93:f6:af:69:8c:bc:58:50:29: b9:c8:3a:66:25:61:cd:48:be:72:3a:44:f1:fc:06:0f:a2:d0: 23:ab:6b:d0:60:12:60:57:e7:dd:3d:6b:51:59:6c:51:3c:e7: ef:a2:d3:13:5f:0a:83:01:e7:99:7f:2f:19:39:27:a5:c8:bc: 50:ee:4e:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8ZpIBNOLE/kzXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwM1oXDTI1MTExOTEzMzEwM1owLzEtMCsGA1UEAxMk ZmI1Y2UwM2UtYTAwZS00YmM4LTlkNWMtN2EwOWM5MTIzZjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg9P2miwyVlXx6WA+NTtl7N99e0IpYm+IlHD IpIxgSVq6/H5lwHHDcwy7URTn6CZmpIBmS097G56fNEre0jsQ2ENeMWoyIUlN4jq 0Jn4AnTs3CPDGCyE0V+wW6CU9z5cnJf8RdWZH2gpFWnuZ0+nx2k0pgvoG03wmFhE hjSvHCxuslPQCAr9aUM3JhyopZSFSgYAx3Ul+GcZDNjPBXt+kGepfz72ZeUFdAqa O1FF/2cbdz4UbDqtEihXOPVJhTxvArF+62/PdoXf1Y+mFes/t70tOvUlRumC6oAf HN7KDbQkJhRqDJSjFDPv1daFAV8dGZreynpQvWiz2eLSC0dT3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNHmym1JCa6HkzrNA9DEcVqJb44rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjYwYWY1ZWYtYTA1YS0z NWRkLWJkNTctMThlODE5OGM3NjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACq8+GwoYSzzT8aj8rFYwyI7rA+ysN/RbIhzwjwFa7HNbJl2aULx Kil2VwIhb/Iz3OJZJKMwc13usCgZgUJBAQVgD1X5cCrBSkpmjmn55y9rl8v8xPED 6+Mr8FRRTWA+ExuQ3YqOeWE8intLlb2XYBIIEHOduUBrtn9ap7jYBppoL+2e9Z0R xIZ4p8p4A8D+jNau7fRIQ/8jssiJasKjg/LN2AkpfSiH6iQ/FO1fu7YlzI83MpEP 5oc8vxM5X5P2r2mMvFhQKbnIOmYlYc1IvnI6RPH8Bg+i0COra9BgEmBX5909a1FZ bFE85++i0xNfCoMB55l/Lxk5J6XIvFDuTk8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:46:46 2025 by rpki-client