$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4fba43f-8fcf-3b43-bcf0-a2413a317685.roa File: e4fba43f-8fcf-3b43-bcf0-a2413a317685.roa (raw, json) Hash identifier: TxeYF1+mA1Fib2PLnaH59vTWhrwO5ZdMZMsKr9wtwMI= Subject key identifier: 27:FA:D0:82:33:29:AA:22:FC:F2:0B:20:69:1C:3F:94:2D:62:DD:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AA2C63F2B305CFECF24B83980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4fba43f-8fcf-3b43-bcf0-a2413a317685.roa Signing time: Fri 25 Jul 2025 13:01:04 +0000 ROA not before: Fri 25 Jul 2025 13:01:04 +0000 ROA not after: Thu 23 Oct 2025 13:01:04 +0000 asID: 396593 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a2:c6:3f:2b:30:5c:fe:cf:24:b8:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 25 13:01:04 2025 GMT Not After : Oct 23 13:01:04 2025 GMT Subject: CN=da171730-5605-4504-8375-9b2dc4de9d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:ab:ce:f6:a2:12:52:5d:90:f9:81:9a:60: fb:44:af:07:90:a0:80:60:18:4b:ee:b0:f1:39:ba: e3:19:89:cf:0e:01:94:a8:bd:22:5c:d4:ed:98:33: 0a:c3:98:e7:8d:e3:67:6d:bc:a6:d4:61:44:7e:23: 07:c8:8c:ac:7c:0e:fe:b2:6f:82:30:42:c7:1a:1f: b6:46:f9:22:85:83:5b:70:31:3e:c7:70:24:80:23: 2e:50:77:57:53:68:c5:50:78:bd:cb:c3:c1:3f:26: 12:c6:77:cc:73:be:86:81:35:71:36:88:44:0d:59: de:cd:ed:4d:e0:40:73:90:ab:f7:10:e3:1a:d4:f4: 0b:b8:62:e4:b8:26:d1:02:64:d3:3b:3b:2a:2b:fe: bc:bc:08:e4:ef:5e:09:a9:ba:06:be:3d:7b:38:7c: ab:97:ac:11:48:88:93:97:64:02:54:7d:9c:dc:a4: 97:f0:16:b8:5d:73:a1:3e:01:a3:a3:5e:84:62:95: f4:bf:24:7d:7c:6a:5d:95:6b:12:ec:b8:56:3f:30: c1:28:ee:2a:aa:41:9d:fb:c3:ac:f4:f2:af:bf:0e: 2b:0c:24:f5:b0:13:8e:9b:4c:90:d8:11:20:c5:4c: 40:75:58:c5:ad:23:ad:ee:2a:63:4b:9b:8b:b9:52: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FA:D0:82:33:29:AA:22:FC:F2:0B:20:69:1C:3F:94:2D:62:DD:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4fba43f-8fcf-3b43-bcf0-a2413a317685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:df:fd:fc:9b:8f:da:71:17:83:72:af:18:1d:bd:22:8b:f6: d4:ea:eb:f3:68:7e:85:77:8b:0a:ff:9a:9e:ee:d1:ee:a5:ff: d3:9e:88:48:1d:5e:1a:61:52:e9:dd:aa:7e:30:e8:91:79:2c: 26:2f:3f:a8:4a:b3:88:5d:c7:71:e1:3d:fa:fb:ed:a7:f9:99: f7:6f:8b:6f:1c:0a:7f:43:ae:05:c6:a0:c8:af:06:6a:d0:fe: d5:85:7d:10:d2:fb:36:92:4f:b6:b1:1a:09:12:0d:28:9c:83: 14:c7:df:ed:5d:0c:71:bd:f0:fb:a8:e9:77:b0:f8:e8:e8:1a: da:4d:c6:94:8b:9a:4c:8e:94:95:47:50:b7:43:9f:91:00:dd: f2:e6:3f:20:25:57:7d:e3:0d:9e:0b:64:a9:e3:de:6c:e5:71: 03:45:ff:d9:12:f1:e3:45:8e:a2:de:b0:ab:d9:42:01:f0:93: 11:d3:f1:a0:bd:4f:8c:13:24:85:58:ff:32:22:6f:52:cd:07: ba:d2:54:22:ad:3f:08:b5:d8:a2:1f:c4:d7:01:f1:a3:38:6c: 5c:42:48:df:51:5c:d1:04:b8:1a:c5:87:ee:19:9f:24:57:9f: 8d:52:4d:06:47:3d:7b:e5:aa:ef:43:d6:0f:1e:e7:2c:db:b3: c6:4d:b5:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqixj8rMFz+zyS4OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk ZGExNzE3MzAtNTYwNS00NTA0LTgzNzUtOWIyZGM0ZGU5ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZKrzvaiElJdkPmBmmD7RK8HkKCAYBhL7rDx ObrjGYnPDgGUqL0iXNTtmDMKw5jnjeNnbbym1GFEfiMHyIysfA7+sm+CMELHGh+2 RvkihYNbcDE+x3AkgCMuUHdXU2jFUHi9y8PBPyYSxnfMc76GgTVxNohEDVneze1N 4EBzkKv3EOMa1PQLuGLkuCbRAmTTOzsqK/68vAjk714JqboGvj17OHyrl6wRSIiT l2QCVH2c3KSX8Ba4XXOhPgGjo16EYpX0vyR9fGpdlWsS7LhWPzDBKO4qqkGd+8Os 9PKvvw4rDCT1sBOOm0yQ2BEgxUxAdVjFrSOt7ipjS5uLuVJacwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCf60IIzKaoi/PILIGkcP5QtYt0sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTRmYmE0M2YtOGZjZi0z YjQzLWJjZjAtYTI0MTNhMzE3Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKrf/fybj9pxF4NyrxgdvSKL9tTq6/NofoV3iwr/mp7u0e6l/9Oe iEgdXhphUundqn4w6JF5LCYvP6hKs4hdx3HhPfr77af5mfdvi28cCn9DrgXGoMiv BmrQ/tWFfRDS+zaST7axGgkSDSicgxTH3+1dDHG98Puo6Xew+OjoGtpNxpSLmkyO lJVHULdDn5EA3fLmPyAlV33jDZ4LZKnj3mzlcQNF/9kS8eNFjqLesKvZQgHwkxHT 8aC9T4wTJIVY/zIib1LNB7rSVCKtPwi12KIfxNcB8aM4bFxCSN9RXNEEuBrFh+4Z nyRXn41STQZHPXvlqu9D1g8e5yzbs8ZNtfE= -----END CERTIFICATE-----Generated at Wed Aug 6 00:36:49 2025 by rpki-client