$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0731f3e9-bd70-38e1-bbeb-26f8a91cbf65.roa File: 0731f3e9-bd70-38e1-bbeb-26f8a91cbf65.roa (raw, json) Hash identifier: iJCTPZ1N+dwMMKvi48gzTVTSPFjU3y/BMrKWP2y/a80= Subject key identifier: 3C:CF:F4:E0:8F:8D:46:A4:26:E7:38:C6:13:4A:CB:D4:60:2F:83:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A7859B35EFC67D081A2540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0731f3e9-bd70-38e1-bbeb-26f8a91cbf65.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 396584 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:85:9b:35:ef:c6:7d:08:1a:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=55e4d29d-c2b2-463a-8a65-3edd75d8d0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:47:ab:4d:f2:e5:c2:40:1a:56:0a:74:42: 18:1d:4e:74:18:a9:00:fa:8f:7b:9a:8d:c2:d3:bd: c2:8c:0b:b9:ef:fb:6f:ca:c5:f9:55:b6:74:75:fe: ff:db:9c:fe:ce:bd:be:a2:14:da:96:cd:42:7a:24: 68:aa:61:84:c9:61:3f:52:09:bc:48:62:b5:3a:6c: c5:f8:6f:8d:13:62:4e:d7:bd:d3:ab:b7:1c:6f:ae: 46:7c:3c:fa:29:87:4d:2d:ac:1d:66:bf:63:aa:0d: 36:06:e1:5b:d9:29:5a:04:a4:3b:63:19:01:25:16: 8f:a6:51:de:12:e6:da:3b:ad:ca:1d:bb:9d:b4:6c: c2:11:3e:fa:99:d4:d2:87:97:16:b9:34:ec:1d:49: d7:31:fb:9a:28:1d:96:1d:54:18:49:b6:32:27:14: 20:df:a4:61:a6:cf:48:58:2b:17:bb:f8:33:3d:29: 72:3f:20:8d:02:56:60:f6:c1:64:43:0e:44:3e:71: b3:84:ff:f7:38:0d:c1:e7:4f:e4:2c:c2:63:8f:d4: ab:2d:1d:3b:15:27:27:9d:b7:b0:53:18:66:d6:38: 77:20:44:9e:07:f9:29:07:9a:7f:1e:a8:e6:2f:3e: c9:60:fd:51:03:cf:35:05:ae:cb:03:fb:b7:38:2c: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CF:F4:E0:8F:8D:46:A4:26:E7:38:C6:13:4A:CB:D4:60:2F:83:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0731f3e9-bd70-38e1-bbeb-26f8a91cbf65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e4:12:38:ae:a6:6a:57:65:e5:9d:dd:4a:55:79:84:9b:f8: d2:fd:d0:cd:0d:8f:8b:5a:22:90:03:57:93:bd:12:75:74:1b: b3:ae:72:06:fd:50:43:c7:31:a3:0b:23:d1:79:37:75:5a:c5: 2e:df:27:b0:1e:96:d0:65:ea:9f:f5:e1:a0:6a:3a:ac:a3:ba: cf:ed:d8:84:6f:f1:63:55:0a:9a:fc:62:9e:94:56:c9:bd:82: c0:9f:ec:95:38:00:c3:ca:76:ac:61:a4:c0:3e:2d:cb:a0:1c: fc:54:f9:f3:be:e5:18:cd:e8:e4:00:6e:51:81:f1:ee:f8:fe: c4:4d:74:4f:1f:72:76:c3:ce:86:02:66:7c:aa:7e:59:f4:09: 2c:ed:c1:e7:f7:5f:32:ab:8a:04:de:86:a3:39:e7:51:19:e8: 96:6e:34:b2:19:9a:d3:a5:54:e0:0f:b1:7d:fe:3b:c3:f0:9a: a1:3f:f7:21:5b:c3:dd:18:d8:30:f7:74:73:d6:5d:f0:87:9d: 0c:67:92:67:97:70:72:d9:6a:85:21:a3:7b:19:72:e7:ff:7f: 6c:9d:3f:44:11:5a:65:aa:d2:78:05:fc:33:79:38:5b:69:d5: 98:f2:06:ce:0f:1b:3c:00:ea:50:c5:47:15:53:31:17:4c:59: fe:a8:71:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4WbNe/GfQgaJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NTVlNGQyOWQtYzJiMi00NjNhLThhNjUtM2VkZDc1ZDhkMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncJHq03y5cJAGlYKdEIYHU50GKkA+o97mo3C 073CjAu57/tvysX5VbZ0df7/25z+zr2+ohTals1CeiRoqmGEyWE/Ugm8SGK1OmzF +G+NE2JO173Tq7ccb65GfDz6KYdNLawdZr9jqg02BuFb2SlaBKQ7YxkBJRaPplHe EubaO63KHbudtGzCET76mdTSh5cWuTTsHUnXMfuaKB2WHVQYSbYyJxQg36Rhps9I WCsXu/gzPSlyPyCNAlZg9sFkQw5EPnGzhP/3OA3B50/kLMJjj9SrLR07FScnnbew Uxhm1jh3IESeB/kpB5p/HqjmLz7JYP1RA881Ba7LA/u3OCwrWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDzP9OCPjUakJuc4xhNKy9RgL4MYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDczMWYzZTktYmQ3MC0z OGUxLWJiZWItMjZmOGE5MWNiZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbkEjiupmpXZeWd3UpVeYSb+NL90M0Nj4taIpADV5O9EnV0G7Ou cgb9UEPHMaMLI9F5N3VaxS7fJ7AeltBl6p/14aBqOqyjus/t2IRv8WNVCpr8Yp6U Vsm9gsCf7JU4AMPKdqxhpMA+LcugHPxU+fO+5RjN6OQAblGB8e74/sRNdE8fcnbD zoYCZnyqfln0CSztwef3XzKrigTehqM551EZ6JZuNLIZmtOlVOAPsX3+O8PwmqE/ 9yFbw90Y2DD3dHPWXfCHnQxnkmeXcHLZaoUho3sZcuf/f2ydP0QRWmWq0ngF/DN5 OFtp1ZjyBs4PGzwA6lDFRxVTMRdMWf6ocac= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:26 2025 by rpki-client