$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833b62b4-91d1-395f-866a-d7c5f164c236.roa File: 833b62b4-91d1-395f-866a-d7c5f164c236.roa (raw, json) Hash identifier: VQVxMmpJg8DKO2qcPWAjQZW4rtvuuQdaCgOM4MtTkws= Subject key identifier: 7E:14:94:4B:28:FB:4C:45:51:FA:41:A5:A4:25:7A:D0:4F:17:89:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA2C640967250CE19DD8EAC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833b62b4-91d1-395f-866a-d7c5f164c236.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 396546 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:40:96:72:50:ce:19:dd:8e:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=b75f5f62-98fe-4fdc-bd2b-b67a11bd4144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:72:2c:26:e4:4d:43:96:df:ba:27:9b:94:9a: 25:c1:92:ea:b5:95:29:06:4b:79:03:62:6a:0d:25: 0d:71:b2:9d:63:5d:83:41:3f:c0:85:d6:c7:96:4c: e1:e0:6f:34:57:b0:77:50:28:10:46:d1:60:10:97: e0:54:50:13:8e:af:36:66:6f:2e:cb:13:85:b0:15: c6:67:8c:bd:25:26:bf:14:7b:86:ee:e1:5d:ce:bb: 7e:f5:9b:91:65:87:9e:e0:a5:3a:d4:a9:21:58:7a: e5:cb:e3:81:1e:3b:93:59:eb:3e:18:f9:d2:eb:20: 01:99:5a:d6:dc:de:d9:8c:58:3b:ee:1d:b9:39:10: 05:c9:f8:ef:79:ad:06:11:01:e4:9f:45:2f:16:1f: f1:0a:03:6c:b7:6c:13:27:63:c9:5e:44:51:d9:bb: 05:53:7b:3b:3b:53:ac:ac:07:da:e2:bf:67:e9:84: a3:11:6d:fe:54:32:18:ac:0c:b3:fe:b9:17:bb:cb: 67:2f:12:9f:ef:e0:80:57:82:9a:cb:8b:db:ab:50: e6:58:98:19:9c:20:f4:2e:9a:c1:aa:d3:ef:3a:3c: 0c:9f:a5:2f:ce:0b:70:3d:0c:61:c8:09:60:df:ac: dc:67:63:46:ae:18:d0:3a:d3:9a:ca:92:69:19:45: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:14:94:4B:28:FB:4C:45:51:FA:41:A5:A4:25:7A:D0:4F:17:89:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833b62b4-91d1-395f-866a-d7c5f164c236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:55:28:fc:a6:bd:40:b3:66:48:b1:05:00:c7:60:03:78:68: 87:7d:03:5e:01:45:6b:81:44:ab:5a:30:6d:be:54:06:8d:1b: 5d:51:1e:f9:af:f5:6b:aa:df:58:62:b2:9f:71:98:b3:a3:04: 0a:91:47:4a:6a:ec:2b:82:e1:21:fb:19:71:5a:d6:97:1f:3c: c9:83:a9:b6:db:89:95:1a:d8:68:8d:84:c9:19:cd:88:54:86: 4f:71:e9:5b:c7:0b:4f:a3:7a:ef:55:29:0a:4c:e6:bd:f5:17: cb:65:47:7c:58:92:fd:7a:ee:dc:8a:4d:76:fc:67:0b:2f:cf: f4:9f:f5:5b:cd:50:1a:ef:4c:3d:1a:5d:ef:bf:da:25:1c:71: 78:18:47:13:5b:42:c2:72:e4:31:a1:8f:a6:24:44:77:a3:e7: a3:32:ee:52:19:7f:b2:a0:e2:21:ff:d8:d2:c8:5d:c5:04:d7: ff:fd:7d:2f:ef:6d:a6:8e:55:7a:e8:80:38:94:4a:e5:22:6e: 51:84:0e:74:86:5c:c4:45:ef:93:ab:9b:7e:db:ec:fe:06:f2: a4:12:d4:3e:28:5a:35:83:36:c9:d8:98:cf:3d:7c:86:17:35: 7b:c0:42:a1:2d:26:28:7a:03:9b:7b:bb:cd:1e:f5:c0:e5:0e: af:7a:0d:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqixkCWclDOGd2OrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk Yjc1ZjVmNjItOThmZS00ZmRjLWJkMmItYjY3YTExYmQ0MTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HIsJuRNQ5bfuieblJolwZLqtZUpBkt5A2Jq DSUNcbKdY12DQT/AhdbHlkzh4G80V7B3UCgQRtFgEJfgVFATjq82Zm8uyxOFsBXG Z4y9JSa/FHuG7uFdzrt+9ZuRZYee4KU61KkhWHrly+OBHjuTWes+GPnS6yABmVrW 3N7ZjFg77h25ORAFyfjvea0GEQHkn0UvFh/xCgNst2wTJ2PJXkRR2bsFU3s7O1Os rAfa4r9n6YSjEW3+VDIYrAyz/rkXu8tnLxKf7+CAV4Kay4vbq1DmWJgZnCD0LprB qtPvOjwMn6UvzgtwPQxhyAlg36zcZ2NGrhjQOtOaypJpGUW3NQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH4UlEso+0xFUfpBpaQletBPF4k4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODMzYjYyYjQtOTFkMS0z OTVmLTg2NmEtZDdjNWYxNjRjMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJxVKPymvUCzZkixBQDHYAN4aId9A14BRWuBRKtaMG2+VAaNG11R Hvmv9Wuq31hisp9xmLOjBAqRR0pq7CuC4SH7GXFa1pcfPMmDqbbbiZUa2GiNhMkZ zYhUhk9x6VvHC0+jeu9VKQpM5r31F8tlR3xYkv167tyKTXb8Zwsvz/Sf9VvNUBrv TD0aXe+/2iUccXgYRxNbQsJy5DGhj6YkRHej56My7lIZf7Kg4iH/2NLIXcUE1//9 fS/vbaaOVXrogDiUSuUiblGEDnSGXMRF75Orm37b7P4G8qQS1D4oWjWDNsnYmM89 fIYXNXvAQqEtJih6A5t7u80e9cDlDq96DTA= -----END CERTIFICATE-----Generated at Thu Aug 7 04:35:25 2025 by rpki-client