$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29caf0b0-59af-3619-befd-2ad566851ac4.roa File: 29caf0b0-59af-3619-befd-2ad566851ac4.roa (raw, json) Hash identifier: E7uCbuEfu5ydP3fgBjov/93iVvrFwYWEfhBVX7gieAA= Subject key identifier: D9:4B:9F:CC:4A:F9:DD:63:FD:89:E0:8B:70:0A:B4:EC:25:7B:1D:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA2C6424CFFB4C9401BFFDC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29caf0b0-59af-3619-befd-2ad566851ac4.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 36621 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:42:4c:ff:b4:c9:40:1b:ff:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=073dcf10-ea73-4a22-af0d-ad140d7ecac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bf:c0:75:c3:82:4e:1a:80:a8:d7:90:0e:07: 28:04:04:00:66:42:07:3b:24:06:93:ad:92:5f:d9: 3d:42:fe:1d:54:ed:5f:f5:41:97:58:b1:94:b2:6f: 09:4b:35:fb:50:44:8b:c6:54:2a:5e:5c:75:bd:29: bb:9f:1a:7e:bb:52:a6:44:a6:14:94:cf:8c:f8:b5: 76:5a:db:c3:d5:7c:67:1e:23:1e:f4:03:35:54:2b: 10:71:c2:89:11:e7:55:57:9f:95:3c:b4:9d:37:b6: 5f:ec:23:28:42:18:78:67:3e:24:ca:03:fd:2e:8a: 11:8b:c9:64:3b:2f:55:e9:be:f7:a5:f7:7a:82:03: 1a:8c:84:48:3f:3e:08:52:6b:95:b8:df:65:13:f9: 1e:d6:b3:26:51:93:90:22:d5:6d:41:23:4f:42:fa: c2:ab:28:0b:fe:a0:d5:2c:d1:86:6b:05:65:e9:99: 65:6c:0c:9c:19:69:b9:1c:ce:13:06:1b:19:ef:ca: a9:81:d9:56:28:b8:20:6b:61:9d:d9:1c:c9:dd:08: 6e:44:71:e4:33:bb:f1:11:87:08:0e:13:b2:3e:85: ea:3a:1b:ac:58:92:b7:99:54:9c:17:b4:69:25:17: 74:89:50:a1:d0:9f:93:3f:0a:da:c0:ea:e9:58:68: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:9F:CC:4A:F9:DD:63:FD:89:E0:8B:70:0A:B4:EC:25:7B:1D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29caf0b0-59af-3619-befd-2ad566851ac4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:08:b6:4f:3c:2d:26:5d:fe:03:6c:53:25:99:0f:e4:0b:06: c9:ad:02:f6:87:e7:c5:79:5f:34:92:02:3a:95:44:98:01:b9: f0:aa:0e:bb:fa:ff:ee:3f:23:88:6a:27:77:26:05:ec:f8:56: 06:d7:61:48:de:32:df:67:73:2a:ed:53:58:1b:c1:e0:47:b0: aa:07:8e:34:96:e4:74:bc:9a:94:dc:b2:b5:01:31:32:43:66: 92:52:ca:8e:6d:9e:cb:0f:3b:c3:53:43:66:96:91:5c:9e:ac: 7d:e3:f9:38:4f:c5:4d:cb:bb:ce:06:52:a5:f8:44:63:e0:3d: a8:bd:74:4d:ac:83:42:92:53:97:2d:19:ac:98:88:ab:c1:66: 96:07:70:14:ab:1b:c6:f3:af:70:fa:bb:44:ed:87:97:63:a3: 4b:25:cd:71:49:6e:68:9e:ce:0c:21:8b:41:69:65:b7:5c:e9: 87:46:0e:27:72:af:b7:8e:ad:35:6a:5d:c2:4a:aa:20:e4:c7: 9d:59:4c:11:ab:68:51:5c:ed:15:3a:1e:5d:ee:05:f8:7f:53: 1e:bf:72:bd:d8:72:7b:56:12:78:6e:75:d4:fd:9f:ee:0c:1c: 30:64:e4:be:ff:49:34:2a:02:da:bd:ce:cb:1a:c9:19:85:80: 22:5c:50:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqixkJM/7TJQBv/3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk MDczZGNmMTAtZWE3My00YTIyLWFmMGQtYWQxNDBkN2VjYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb/AdcOCThqAqNeQDgcoBAQAZkIHOyQGk62S X9k9Qv4dVO1f9UGXWLGUsm8JSzX7UESLxlQqXlx1vSm7nxp+u1KmRKYUlM+M+LV2 WtvD1XxnHiMe9AM1VCsQccKJEedVV5+VPLSdN7Zf7CMoQhh4Zz4kygP9LooRi8lk Oy9V6b73pfd6ggMajIRIPz4IUmuVuN9lE/ke1rMmUZOQItVtQSNPQvrCqygL/qDV LNGGawVl6ZllbAycGWm5HM4TBhsZ78qpgdlWKLgga2Gd2RzJ3QhuRHHkM7vxEYcI DhOyPoXqOhusWJK3mVScF7RpJRd0iVCh0J+TPwrawOrpWGhYrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNlLn8xK+d1j/Yngi3AKtOwlex1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjljYWYwYjAtNTlhZi0z NjE5LWJlZmQtMmFkNTY2ODUxYWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD8Itk88LSZd/gNsUyWZD+QLBsmtAvaH58V5XzSSAjqVRJgBufCq Drv6/+4/I4hqJ3cmBez4VgbXYUjeMt9ncyrtU1gbweBHsKoHjjSW5HS8mpTcsrUB MTJDZpJSyo5tnssPO8NTQ2aWkVyerH3j+ThPxU3Lu84GUqX4RGPgPai9dE2sg0KS U5ctGayYiKvBZpYHcBSrG8bzr3D6u0Tth5djo0slzXFJbmiezgwhi0FpZbdc6YdG Didyr7eOrTVqXcJKqiDkx51ZTBGraFFc7RU6Hl3uBfh/Ux6/cr3YcntWEnhuddT9 n+4MHDBk5L7/STQqAtq9zssayRmFgCJcUL4= -----END CERTIFICATE-----Generated at Fri Aug 8 20:48:54 2025 by rpki-client