$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13ee3f4a-3225-3cdc-b3ad-1d3a5a572c95.roa File: 13ee3f4a-3225-3cdc-b3ad-1d3a5a572c95.roa (raw, json) Hash identifier: IjXjvVQoh3yx3wExpV0WzvLEyb/AQ3lB+oZ+5PoWpow= Subject key identifier: 64:7A:9D:16:9C:46:48:2B:E0:CE:17:97:77:6F:71:A4:70:2B:27:92 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD5D60A7101641AD8DD10 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13ee3f4a-3225-3cdc-b3ad-1d3a5a572c95.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396651 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d5:d6:0a:71:01:64:1a:d8:dd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=a2b96035-39f8-4518-8732-28466c72fae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5b:a0:31:6c:3e:44:21:42:50:3d:c9:f8:ac: 8a:a6:a1:2f:1f:72:bc:d7:1b:cf:76:d1:76:56:23: e0:05:98:6c:fc:cd:c2:8d:fd:fb:c2:07:2f:9d:7f: 95:89:94:1a:80:cb:48:85:3d:08:b9:18:77:ee:4e: 83:1c:bc:23:64:42:6e:0d:a1:9e:4c:20:78:43:ba: e2:6e:3c:3a:18:42:76:53:ab:80:43:11:c6:1b:0a: c3:3a:bf:37:38:1c:20:c3:14:20:e3:fa:09:cb:02: 97:80:a5:c6:89:df:61:07:e1:ad:94:24:76:5e:5c: 6b:a4:01:e1:ad:58:0c:2b:5c:11:5b:4d:8b:76:a0: 54:ca:9d:3b:63:aa:92:d2:2e:28:7f:51:3d:30:bc: db:10:e2:99:43:09:cf:7c:66:6c:3d:46:f8:ad:28: e5:8a:51:39:fa:49:0d:76:28:06:dc:ec:2d:f4:1b: bd:d9:cf:61:ee:4a:07:f0:1d:96:b9:84:ed:f8:53: 52:55:c6:20:4c:2d:c2:6a:a6:ea:1f:c1:99:d2:37: 6f:9b:65:69:ad:d2:96:89:ca:da:dc:82:9d:ee:4b: 81:af:ec:17:49:69:09:5d:a9:a5:83:79:0d:4d:17: a0:93:6b:a0:0a:05:50:cf:42:a2:10:e3:ef:3d:5a: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7A:9D:16:9C:46:48:2B:E0:CE:17:97:77:6F:71:A4:70:2B:27:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13ee3f4a-3225-3cdc-b3ad-1d3a5a572c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:73:78:91:b9:c4:1a:8c:e4:7e:2c:ec:b1:24:69:9f:14:f6: 8c:f4:24:06:61:dd:14:5a:8c:68:da:f0:6c:b2:2f:c7:69:87: c7:c3:a3:00:2c:0a:c2:87:4d:2f:a1:ce:77:0c:07:b7:a1:2a: f5:14:00:d2:a8:04:97:14:25:c2:d3:53:a6:4a:11:12:81:05: 0c:fc:5f:d3:39:52:8e:52:65:8c:22:94:90:af:61:74:1e:27: 16:65:ed:a8:37:25:3a:36:27:d0:2a:50:f3:22:99:a3:b7:48: 97:b7:75:7a:b6:cc:ba:75:16:6c:4f:3d:82:b8:c5:48:b2:04: 20:db:38:19:b8:4e:2e:45:59:72:84:55:0a:b2:30:f7:91:75: fc:b8:72:eb:22:f7:27:45:04:ad:a1:26:ba:10:8b:cf:6a:77: 15:09:09:35:37:f9:55:79:13:6f:9b:24:9c:c8:1f:8e:7b:e5: 54:27:b2:c1:b3:71:14:6f:9e:ef:eb:98:90:62:90:0b:48:e9: 85:58:f8:12:e7:a2:7a:19:9f:9c:e6:03:5f:e0:40:17:bc:3f: ff:ca:48:36:2b:c8:54:2d:47:2b:ec:df:26:95:1d:82:ce:bb: 73:d1:73:ce:39:cb:ea:03:27:30:78:47:10:75:cb:08:90:de: c7:ad:cd:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNXWCnEBZBrY3RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YTJiOTYwMzUtMzlmOC00NTE4LTg3MzItMjg0NjZjNzJmYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VugMWw+RCFCUD3J+KyKpqEvH3K81xvPdtF2 ViPgBZhs/M3Cjf37wgcvnX+ViZQagMtIhT0IuRh37k6DHLwjZEJuDaGeTCB4Q7ri bjw6GEJ2U6uAQxHGGwrDOr83OBwgwxQg4/oJywKXgKXGid9hB+GtlCR2XlxrpAHh rVgMK1wRW02LdqBUyp07Y6qS0i4of1E9MLzbEOKZQwnPfGZsPUb4rSjlilE5+kkN digG3Owt9Bu92c9h7koH8B2WuYTt+FNSVcYgTC3CaqbqH8GZ0jdvm2VprdKWicra 3IKd7kuBr+wXSWkJXamlg3kNTRegk2ugCgVQz0KiEOPvPVqopwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGR6nRacRkgr4M4Xl3dvcaRwKyeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTNlZTNmNGEtMzIyNS0z Y2RjLWIzYWQtMWQzYTVhNTcyYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChzeJG5xBqM5H4s7LEkaZ8U9oz0JAZh3RRajGja8GyyL8dph8fD owAsCsKHTS+hzncMB7ehKvUUANKoBJcUJcLTU6ZKERKBBQz8X9M5Uo5SZYwilJCv YXQeJxZl7ag3JTo2J9AqUPMimaO3SJe3dXq2zLp1FmxPPYK4xUiyBCDbOBm4Ti5F WXKEVQqyMPeRdfy4cusi9ydFBK2hJroQi89qdxUJCTU3+VV5E2+bJJzIH4575VQn ssGzcRRvnu/rmJBikAtI6YVY+BLnonoZn5zmA1/gQBe8P//KSDYryFQtRyvs3yaV HYLOu3PRc845y+oDJzB4RxB1ywiQ3setzfQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:03:53 2025 by rpki-client