$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d417eb-e661-3321-8974-4ed3fd3f3960.roa File: 08d417eb-e661-3321-8974-4ed3fd3f3960.roa (raw, json) Hash identifier: feFT6jqonHvzrYmQMQElp3RZqWClFwOSqfkwYNCG+k4= Subject key identifier: 90:74:06:88:BF:DF:63:C0:AE:C9:1A:0D:A7:65:AF:A7:7A:28:FF:83 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCFE7125BC305BB13E1D0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d417eb-e661-3321-8974-4ed3fd3f3960.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 36627 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:cf:e7:12:5b:c3:05:bb:13:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=db2a8f47-9040-4934-b095-0a0b512ccdca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:ae:0a:93:3d:be:78:fd:21:b9:94:97:d3: 54:c3:5c:c7:d0:f9:e1:7f:95:aa:a7:3d:2a:06:a7: 92:ac:8b:a5:bb:d6:21:9e:21:c4:f1:c9:ba:2e:54: d4:24:2d:ea:bd:78:a5:83:f0:d9:84:78:c4:65:df: 3e:74:de:ab:b0:5a:70:e4:89:4a:2b:ee:42:31:33: fa:0b:1f:a0:0a:fb:39:95:31:5e:e0:1d:5d:08:bf: 52:61:e1:fc:9f:90:44:18:11:1c:3f:a3:81:2b:3b: 2c:a8:f0:06:bc:59:19:b8:4a:ff:69:10:fe:1a:a9: 3c:19:8f:3a:ca:87:4a:5a:a5:a9:55:b6:7a:3b:8c: e5:8c:ce:34:62:36:ff:aa:6e:a3:16:89:ab:b5:48: b3:01:b3:a6:ac:e9:3a:52:44:5d:b0:99:fd:19:a8: 50:5d:f4:97:40:92:cd:ae:72:87:3e:cc:9c:30:f4: 3a:32:55:4e:56:40:9d:8a:46:fd:3f:0c:a0:fa:ba: 54:82:f4:3d:e2:c3:5c:8e:a7:33:e9:56:85:05:30: e4:11:cd:e3:cd:07:04:77:0b:4a:7a:ad:70:12:5a: 65:96:99:56:30:68:2d:d7:46:87:6f:3e:56:d8:10: 8f:e9:85:88:7c:84:60:ce:6b:e6:66:36:67:c4:74: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:74:06:88:BF:DF:63:C0:AE:C9:1A:0D:A7:65:AF:A7:7A:28:FF:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08d417eb-e661-3321-8974-4ed3fd3f3960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:52:4b:77:0a:f0:73:43:2a:ad:61:d4:49:f1:01:d1:5e:2a: 91:d8:1e:68:5e:f0:a3:77:e9:51:a2:f7:ca:fc:e6:66:70:0e: 3f:b5:1f:5d:a0:3a:c7:f4:4e:0e:6c:99:99:46:8b:e4:22:1a: 5d:66:23:3a:18:d7:5d:00:29:03:0f:ea:ab:d5:6a:c9:24:00: bc:ca:a8:30:a4:35:22:76:2e:0b:4a:d0:bf:84:d1:9d:71:8a: 08:f5:c4:65:39:c6:59:40:24:55:cf:cd:e4:2a:8f:c6:c3:57: 56:1e:00:66:2e:b9:81:14:02:38:3b:95:2c:be:a5:18:40:75: d5:2c:fa:55:fb:d2:0d:ce:1b:66:83:4a:a7:fe:de:06:d4:3e: 5b:c8:b9:d3:0c:9e:02:12:4d:85:da:db:b3:af:15:80:5e:17: 5e:14:ca:e0:83:1f:13:ce:0b:75:f8:4c:4a:2c:f1:2d:53:f6: 9a:31:61:cc:e6:ca:54:36:0f:ab:84:51:3f:f8:ad:4a:36:a6: 4b:3d:f3:5e:b4:57:bc:fc:46:24:a3:95:a9:7e:ed:a5:ac:f9: 40:4c:6a:d8:53:1f:26:ad:fd:bf:13:1f:a1:75:82:16:af:b5: 92:79:be:73:bf:79:3f:d1:ad:f9:0f:71:90:c4:65:1a:f9:05: 0a:be:42:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vM/nElvDBbsT4dAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZGIyYThmNDctOTA0MC00OTM0LWIwOTUtMGEwYjUxMmNjZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiueuCpM9vnj9IbmUl9NUw1zH0Pnhf5Wqpz0q BqeSrIulu9YhniHE8cm6LlTUJC3qvXilg/DZhHjEZd8+dN6rsFpw5IlKK+5CMTP6 Cx+gCvs5lTFe4B1dCL9SYeH8n5BEGBEcP6OBKzssqPAGvFkZuEr/aRD+Gqk8GY86 yodKWqWpVbZ6O4zljM40Yjb/qm6jFomrtUizAbOmrOk6UkRdsJn9GahQXfSXQJLN rnKHPsycMPQ6MlVOVkCdikb9Pwyg+rpUgvQ94sNcjqcz6VaFBTDkEc3jzQcEdwtK eq1wElpllplWMGgt10aHbz5W2BCP6YWIfIRgzmvmZjZnxHTxRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJB0Boi/32PArskaDadlr6d6KP+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDhkNDE3ZWItZTY2MS0z MzIxLTg5NzQtNGVkM2ZkM2YzOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALhSS3cK8HNDKq1h1EnxAdFeKpHYHmhe8KN36VGi98r85mZwDj+1 H12gOsf0Tg5smZlGi+QiGl1mIzoY110AKQMP6qvVaskkALzKqDCkNSJ2LgtK0L+E 0Z1xigj1xGU5xllAJFXPzeQqj8bDV1YeAGYuuYEUAjg7lSy+pRhAddUs+lX70g3O G2aDSqf+3gbUPlvIudMMngISTYXa27OvFYBeF14UyuCDHxPOC3X4TEos8S1T9pox YczmylQ2D6uEUT/4rUo2pks98160V7z8RiSjlal+7aWs+UBMathTHyat/b8TH6F1 ghavtZJ5vnO/eT/RrfkPcZDEZRr5BQq+Qrs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:00 2025 by rpki-client