$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad5b1ffa-4d6d-3f2a-b7eb-c699f2cf8fdf.roa File: ad5b1ffa-4d6d-3f2a-b7eb-c699f2cf8fdf.roa (raw, json) Hash identifier: KavpOMKsybRsV8g9htJ54DTA8GXIEr9AtzV1bzNRCXo= Subject key identifier: 18:0A:AE:F1:A0:BC:F9:F7:D9:9D:B5:3A:0C:53:E2:EB:5E:43:D9:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA2C639963829A1F9A96A7820 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad5b1ffa-4d6d-3f2a-b7eb-c699f2cf8fdf.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 396545 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:39:96:38:29:a1:f9:a9:6a:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=0dabb274-9a0b-4af7-b6e6-cb240e27a274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c7:6a:ed:c0:a3:fc:96:f8:1c:55:16:70:80: 52:6c:72:13:1d:3e:10:c1:ae:80:46:92:62:74:e5: ad:68:e8:f7:a7:c5:37:d4:d3:21:13:e9:03:f4:c0: ff:5a:ff:8c:79:61:fe:57:5e:46:19:04:2d:9f:bd: 3f:c5:70:55:4d:7d:6b:f7:aa:2e:a8:16:c9:ea:ef: ad:12:03:61:a6:71:b0:31:c2:85:40:eb:d1:4f:07: 6d:f2:03:64:41:36:12:7e:d1:f7:10:51:fa:59:69: 19:1d:ed:eb:32:d8:8a:53:8d:a6:f6:ff:2e:1f:0d: bc:fa:6a:d7:80:15:7c:44:17:26:64:1b:99:84:20: 9d:59:2a:a5:ee:93:72:f1:18:d7:fe:9c:de:8e:b3: 90:5e:2f:d5:da:9d:f6:60:1a:74:b9:db:d5:46:d6: 27:76:4c:4e:28:44:45:18:3a:69:9f:31:86:6d:3e: ac:41:cf:db:48:5d:87:af:4b:f3:56:5f:49:49:b6: 40:e4:3f:30:e0:0b:63:fc:ea:97:20:05:68:f5:1a: 18:33:d5:cf:7f:20:8d:d4:07:cf:81:b1:91:1d:53: 75:9e:78:9f:75:b9:d3:d2:30:d4:fb:c4:fc:07:17: 00:83:1f:b7:5f:64:32:79:2a:1f:1e:31:31:a8:0f: 7a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0A:AE:F1:A0:BC:F9:F7:D9:9D:B5:3A:0C:53:E2:EB:5E:43:D9:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad5b1ffa-4d6d-3f2a-b7eb-c699f2cf8fdf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:37:00:7a:fa:9b:e1:a4:40:12:00:bd:23:e4:11:5d:b8:63: 58:50:ce:b2:21:01:d6:b6:02:1e:a7:93:54:8f:6a:39:35:7a: fb:45:4b:b9:89:82:ce:af:e5:57:e4:6d:2a:2d:95:c4:5f:13: 9a:f4:cf:13:9a:ae:dd:b2:06:63:24:a5:9b:ba:b5:b8:e2:5a: 0f:e8:ef:4d:07:a6:92:b4:d1:69:b8:90:9c:93:d1:7d:73:ad: b0:15:a2:67:2f:6e:db:5f:ba:87:9b:2a:a1:49:a2:46:20:2d: ca:25:5f:97:c7:56:0e:ef:86:c0:db:77:36:02:00:8a:82:a7: d4:f9:80:8d:c2:f1:9d:7c:77:4e:97:f7:8d:10:a5:78:51:d4: c5:e0:7a:6a:39:d6:8a:d4:43:93:53:d3:11:46:32:0e:9f:b1: a8:c9:72:b9:68:a3:bc:82:41:bf:df:20:9b:4e:f9:83:9d:b8: 0d:ef:86:7f:76:e9:e9:8d:1b:2c:87:79:4f:83:de:e3:b7:c2: 41:0b:79:0d:ce:62:d7:a1:08:60:c5:37:56:83:57:37:71:da: 50:21:e4:b9:cf:7e:37:7a:4e:ff:b7:cd:8e:a6:e5:bd:a7:74: 23:69:82:a6:26:dc:20:4c:02:11:6a:e7:a9:5c:94:fa:21:89: 50:95:de:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqixjmWOCmh+alqeCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk MGRhYmIyNzQtOWEwYi00YWY3LWI2ZTYtY2IyNDBlMjdhMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycdq7cCj/Jb4HFUWcIBSbHITHT4Qwa6ARpJi dOWtaOj3p8U31NMhE+kD9MD/Wv+MeWH+V15GGQQtn70/xXBVTX1r96ouqBbJ6u+t EgNhpnGwMcKFQOvRTwdt8gNkQTYSftH3EFH6WWkZHe3rMtiKU42m9v8uHw28+mrX gBV8RBcmZBuZhCCdWSql7pNy8RjX/pzejrOQXi/V2p32YBp0udvVRtYndkxOKERF GDppnzGGbT6sQc/bSF2Hr0vzVl9JSbZA5D8w4Atj/OqXIAVo9RoYM9XPfyCN1AfP gbGRHVN1nnifdbnT0jDU+8T8BxcAgx+3X2QyeSofHjExqA96RQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgKrvGgvPn32Z21OgxT4uteQ9nuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQ1YjFmZmEtNGQ2ZC0z ZjJhLWI3ZWItYzY5OWYyY2Y4ZmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHM3AHr6m+GkQBIAvSPkEV24Y1hQzrIhAda2Ah6nk1SPajk1evtF S7mJgs6v5VfkbSotlcRfE5r0zxOart2yBmMkpZu6tbjiWg/o700HppK00Wm4kJyT 0X1zrbAVomcvbttfuoebKqFJokYgLcolX5fHVg7vhsDbdzYCAIqCp9T5gI3C8Z18 d06X940QpXhR1MXgemo51orUQ5NT0xFGMg6fsajJcrloo7yCQb/fIJtO+YOduA3v hn926emNGyyHeU+D3uO3wkELeQ3OYtehCGDFN1aDVzdx2lAh5LnPfjd6Tv+3zY6m 5b2ndCNpgqYm3CBMAhFq56lclPohiVCV3nM= -----END CERTIFICATE-----Generated at Tue Aug 5 17:11:10 2025 by rpki-client