$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fef2d7e5-31ba-34d8-9b1d-48ffb8e6e0d3.roa File: fef2d7e5-31ba-34d8-9b1d-48ffb8e6e0d3.roa (raw, json) Hash identifier: /dstrJBnB42L45siMliqjgT6B5GvHwg4BHUe0gjTLfk= Subject key identifier: 1E:A7:50:BB:DB:22:C2:A6:8A:79:4E:B5:D3:BB:8B:6A:46:4E:8C:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEE17C9657DEC16279EA48A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fef2d7e5-31ba-34d8-9b1d-48ffb8e6e0d3.roa Signing time: Thu 21 Aug 2025 12:31:05 +0000 ROA not before: Thu 21 Aug 2025 12:31:05 +0000 ROA not after: Wed 19 Nov 2025 13:31:05 +0000 asID: 36629 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:17:c9:65:7d:ec:16:27:9e:a4:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 12:31:05 2025 GMT Not After : Nov 19 13:31:05 2025 GMT Subject: CN=434ee4b0-97d0-492e-933e-6ef854bc73c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:ba:23:4d:cf:ab:c4:b5:a1:2b:a3:7a:14: 4d:8b:56:48:46:09:e9:9a:81:1a:2d:9a:87:87:65: d3:35:4a:3d:cb:2a:34:25:b1:a0:6b:a3:ef:be:9e: 5c:6f:0e:93:a7:c3:f6:dd:7c:97:56:5e:b4:47:ef: 25:f5:d8:bc:4e:63:1b:b0:7b:df:ac:8e:5a:63:99: 2b:38:12:21:e7:42:f5:d9:60:94:e4:86:13:eb:54: c8:8c:a5:55:68:b9:89:ef:0b:b8:1c:67:25:c3:1e: e5:31:0c:dd:87:ea:4f:21:9b:72:44:08:1e:e2:5c: a6:b1:08:f0:c4:be:11:6a:e7:5f:d8:23:39:d2:35: 94:ba:18:5f:7f:6e:bc:68:d7:b3:12:3f:33:4d:44: b4:a8:e3:e2:18:ba:b3:cb:e5:3c:dd:0b:6f:4d:41: 50:05:e0:40:3c:f1:f5:09:d8:0b:c9:3a:88:48:70: 1f:7c:06:0d:a9:e9:63:bc:f7:2e:12:5e:d6:b0:f2: e4:89:92:f8:d8:dd:ac:6f:9a:cd:02:16:0e:ca:5d: 28:57:cf:c2:49:5b:52:df:9f:76:3b:cf:8f:c3:6d: d4:b5:d1:38:bc:d3:e6:76:96:79:46:fb:dc:87:cd: 67:cc:a4:2a:f0:7e:65:cd:03:fa:11:0f:e5:e8:36: 7a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A7:50:BB:DB:22:C2:A6:8A:79:4E:B5:D3:BB:8B:6A:46:4E:8C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fef2d7e5-31ba-34d8-9b1d-48ffb8e6e0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:97:35:3c:86:cc:81:16:be:bb:f1:46:c4:09:17:4c:ec:a0: c9:db:0a:a1:1a:59:38:48:ed:61:b5:91:25:14:3f:bc:a2:32: 6c:43:af:24:be:f0:6c:4c:a2:9b:eb:72:ff:e0:9c:f8:f2:a9: 2f:31:6f:c2:30:b6:b1:3b:7e:47:03:78:35:f6:73:cd:54:dd: 0b:f5:d7:30:95:c5:d1:a1:77:44:a8:35:3d:c6:7c:6f:51:27: 64:df:bf:f8:43:0b:59:d6:c4:db:b6:24:c9:05:e1:29:6b:76: c4:90:9c:3f:68:c0:a2:b0:09:d7:0e:cc:ec:0a:27:42:20:de: 36:ec:35:16:f9:a1:3c:1b:5b:cf:ee:a5:2a:f7:46:6b:84:80: ac:7b:c9:84:0d:f9:fd:c6:10:17:ab:3c:c6:aa:77:fc:d9:a6: 35:54:7c:f1:48:2b:9c:db:8d:40:54:49:fc:89:0b:17:53:85: a5:ce:9a:da:c7:cb:0e:61:18:1c:1b:35:f2:2b:93:49:ef:60: f9:57:86:ed:2c:9a:99:c1:dd:fc:71:7d:fa:c1:6c:b8:cc:72: 0c:f0:5c:93:cf:59:8f:5a:95:bc:7a:52:b8:63:c4:f8:e2:0c: 64:8e:be:0b:e4:c9:ad:2f:cd:97:3f:4d:e9:5b:8a:93:d9:6b: 53:3a:54:26 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8llfewWJ56kigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTEyMzEwNVoXDTI1MTExOTEzMzEwNVowLzEtMCsGA1UEAxMk NDM0ZWU0YjAtOTdkMC00OTJlLTkzM2UtNmVmODU0YmM3M2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq26I03Pq8S1oSujehRNi1ZIRgnpmoEaLZqH h2XTNUo9yyo0JbGga6Pvvp5cbw6Tp8P23XyXVl60R+8l9di8TmMbsHvfrI5aY5kr OBIh50L12WCU5IYT61TIjKVVaLmJ7wu4HGclwx7lMQzdh+pPIZtyRAge4lymsQjw xL4Raudf2CM50jWUuhhff268aNezEj8zTUS0qOPiGLqzy+U83QtvTUFQBeBAPPH1 CdgLyTqISHAffAYNqeljvPcuEl7WsPLkiZL42N2sb5rNAhYOyl0oV8/CSVtS3592 O8+Pw23UtdE4vNPmdpZ5Rvvch81nzKQq8H5lzQP6EQ/l6DZ6YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB6nULvbIsKminlOtdO7i2pGToxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmVmMmQ3ZTUtMzFiYS0z NGQ4LTliMWQtNDhmZmI4ZTZlMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHSXNTyGzIEWvrvxRsQJF0zsoMnbCqEaWThI7WG1kSUUP7yiMmxD ryS+8GxMopvrcv/gnPjyqS8xb8IwtrE7fkcDeDX2c81U3Qv11zCVxdGhd0SoNT3G fG9RJ2Tfv/hDC1nWxNu2JMkF4SlrdsSQnD9owKKwCdcOzOwKJ0Ig3jbsNRb5oTwb W8/upSr3RmuEgKx7yYQN+f3GEBerPMaqd/zZpjVUfPFIK5zbjUBUSfyJCxdThaXO mtrHyw5hGBwbNfIrk0nvYPlXhu0smpnB3fxxffrBbLjMcgzwXJPPWY9albx6Urhj xPjiDGSOvgvkya0vzZc/TelbipPZa1M6VCY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:01:04 2025 by rpki-client