$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa11815e-7030-3e80-b2d8-0438d0fb1b3f.roa File: aa11815e-7030-3e80-b2d8-0438d0fb1b3f.roa (raw, json) Hash identifier: R37fPdq+C73ovrTWvpEuJ4Mbg8kTzecRw/szfgXiatw= Subject key identifier: F4:98:26:9A:34:7B:74:42:6B:8B:45:CD:1B:ED:14:05:F8:9D:AF:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA2C64109E272E98343B007C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa11815e-7030-3e80-b2d8-0438d0fb1b3f.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 397207 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:41:09:e2:72:e9:83:43:b0:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=06dc9347-a20a-407a-baad-73a02cb02c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6a:7f:70:ee:a3:4b:cc:96:32:69:c8:4e:d7: c9:46:96:45:f3:0d:6c:cc:cc:b1:45:e8:90:5f:28: 9d:3a:22:89:b1:1d:c8:4a:ce:d7:f6:b1:71:c5:54: c5:1e:33:dd:3d:f2:c9:e2:e9:26:70:34:4c:c6:3c: 98:98:5a:64:40:81:17:94:9a:83:4e:60:5f:b4:1b: 95:ed:35:b3:35:7f:88:de:c3:94:32:e8:4d:43:64: e9:d0:9f:46:dc:73:b2:4c:58:eb:fa:b4:6e:52:83: 7c:b1:8a:f9:9c:1b:23:91:5a:d7:cd:e9:9b:75:be: c1:5f:00:81:97:4b:b3:2b:85:49:78:30:c5:66:a2: 5c:f0:bd:ae:79:6f:d6:3f:42:79:b2:8d:e6:5f:ee: d3:fc:32:2f:40:88:0d:6e:2a:12:b7:a9:ba:13:75: 95:6d:fe:94:3f:14:8c:39:aa:67:c8:3e:b5:a0:43: 0f:f2:b9:f7:a4:17:ff:a9:3e:9e:c5:42:68:01:be: b5:8d:e6:f8:b4:91:16:d1:9f:a8:dd:40:42:a7:fd: 23:d2:d5:eb:71:8a:0e:52:e8:86:88:95:f4:9b:b2: 73:6c:34:fc:8c:a8:ce:37:4d:79:60:7d:d1:19:f4: 2d:fb:91:64:b0:70:7b:77:8e:52:8c:4e:b0:b7:51: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:98:26:9A:34:7B:74:42:6B:8B:45:CD:1B:ED:14:05:F8:9D:AF:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa11815e-7030-3e80-b2d8-0438d0fb1b3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:61:21:f9:fb:57:34:a5:6d:c6:b1:5b:d5:84:c7:06:65:d5: 49:8a:69:3d:5f:31:f0:86:5b:6c:06:8f:86:f8:fd:a7:45:b3: c9:18:26:4c:ce:c6:39:25:a5:61:f9:84:39:7a:5d:84:38:a4: bb:64:6f:ab:9c:31:6c:f6:03:ea:14:f0:3a:df:f2:04:7d:84: a5:56:ab:c2:7b:47:e1:e3:48:f6:20:43:de:e2:f6:01:2b:b5: bc:fc:e3:67:74:f9:24:30:e4:19:60:72:4d:d3:25:8d:46:1c: b9:2b:0a:4c:cb:d9:94:b8:f2:4f:b8:a1:19:28:21:da:8d:ed: 2e:7c:58:32:9e:88:c9:3e:2c:b2:c6:e4:f3:a3:b5:92:ab:d2: d1:3a:eb:db:98:ec:15:ca:12:c0:e8:bf:d9:5c:ad:eb:8c:0d: fb:c8:be:17:04:c4:61:24:ef:1d:7f:4b:2b:53:96:94:c9:f8: 4e:11:09:22:23:18:4d:b2:e2:e2:d7:b9:07:74:89:1d:28:bc: 5a:33:17:8e:ef:eb:67:95:cd:d6:f7:6f:11:06:d9:77:a6:48: 98:a4:c7:63:a0:88:98:e7:a0:7a:37:33:6d:0c:b9:4b:dc:2d: f0:6e:1e:07:09:73:59:83:cf:1c:31:dd:b8:93:ac:b3:d9:d3: 62:49:64:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqixkEJ4nLpg0OwB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk MDZkYzkzNDctYTIwYS00MDdhLWJhYWQtNzNhMDJjYjAyYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmp/cO6jS8yWMmnITtfJRpZF8w1szMyxReiQ XyidOiKJsR3ISs7X9rFxxVTFHjPdPfLJ4ukmcDRMxjyYmFpkQIEXlJqDTmBftBuV 7TWzNX+I3sOUMuhNQ2Tp0J9G3HOyTFjr+rRuUoN8sYr5nBsjkVrXzembdb7BXwCB l0uzK4VJeDDFZqJc8L2ueW/WP0J5so3mX+7T/DIvQIgNbioSt6m6E3WVbf6UPxSM OapnyD61oEMP8rn3pBf/qT6exUJoAb61jeb4tJEW0Z+o3UBCp/0j0tXrcYoOUuiG iJX0m7JzbDT8jKjON015YH3RGfQt+5FksHB7d45SjE6wt1EZLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPSYJpo0e3RCa4tFzRvtFAX4na8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWExMTgxNWUtNzAzMC0z ZTgwLWIyZDgtMDQzOGQwZmIxYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFhIfn7VzSlbcaxW9WExwZl1UmKaT1fMfCGW2wGj4b4/adFs8kY JkzOxjklpWH5hDl6XYQ4pLtkb6ucMWz2A+oU8Drf8gR9hKVWq8J7R+HjSPYgQ97i 9gErtbz842d0+SQw5Blgck3TJY1GHLkrCkzL2ZS48k+4oRkoIdqN7S58WDKeiMk+ LLLG5POjtZKr0tE669uY7BXKEsDov9lcreuMDfvIvhcExGEk7x1/SytTlpTJ+E4R CSIjGE2y4uLXuQd0iR0ovFozF47v62eVzdb3bxEG2XemSJikx2OgiJjnoHo3M20M uUvcLfBuHgcJc1mDzxwx3biTrLPZ02JJZPg= -----END CERTIFICATE-----Generated at Tue Aug 5 16:49:01 2025 by rpki-client