$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8b3f7c-03ff-31a8-93f2-13a822a39f17.roa File: 1a8b3f7c-03ff-31a8-93f2-13a822a39f17.roa (raw, json) Hash identifier: b63VSyrlsgh+9qMItfdbxDYxZWmJyMKqt7KWZkKRcqo= Subject key identifier: FE:A1:76:A2:7A:EE:49:3E:2D:7C:C7:28:C1:5A:8F:06:8B:7C:0E:36 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDAD937FE964FDE93A640 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8b3f7c-03ff-31a8-93f2-13a822a39f17.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396597 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:da:d9:37:fe:96:4f:de:93:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=b801cfe8-e629-4d00-964c-fea8185d5bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:17:3b:2b:84:00:eb:c3:cf:b8:ff:5f:bb: ce:f9:55:13:f4:e0:a9:72:c6:d8:fb:15:7e:ae:d1: 50:ff:52:c3:f7:44:27:1e:33:20:e6:99:d0:78:34: 34:70:ed:16:a8:bb:55:39:2b:d7:84:50:40:f3:3b: 02:8c:1d:e5:dc:9a:14:97:47:b0:c7:48:c7:82:71: a5:fb:8b:74:dc:5a:cb:09:f2:0e:a2:0f:7e:68:e2: 64:17:96:3d:5d:49:53:10:51:7a:10:6b:c7:a8:15: 73:4f:85:32:a1:db:0e:67:c9:40:45:fb:0a:35:2d: 85:b7:d1:63:3d:6a:d6:8e:78:ff:55:99:b8:d0:a1: f8:2f:fe:51:7b:f9:7a:0b:df:8a:57:ce:cf:53:dc: 56:45:c8:7b:19:56:2e:e6:84:ad:28:d6:31:46:a7: 12:73:f3:03:b8:52:ac:2e:d1:88:bd:ba:8a:a8:25: e8:74:d0:87:0f:20:21:fd:67:c6:e3:63:08:e5:94: b5:63:49:f4:21:da:5b:e4:e8:7c:17:90:a7:87:db: 5b:c5:3e:d1:dd:c1:d7:42:d7:33:07:89:5c:06:32: 02:a5:45:23:b0:ee:a8:b2:1d:72:d2:c8:a0:8f:2a: 1c:d5:e8:cb:ea:79:11:49:e6:7f:cb:fe:fd:bd:0d: 2c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A1:76:A2:7A:EE:49:3E:2D:7C:C7:28:C1:5A:8F:06:8B:7C:0E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a8b3f7c-03ff-31a8-93f2-13a822a39f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:fb:c2:e4:3d:a0:c3:da:c9:46:fc:97:45:b8:1c:ea:68:05: 29:6a:9d:e6:0a:54:eb:5b:e2:fe:1d:a9:2b:b3:94:6a:2b:02: 0c:c9:31:b0:d7:8e:ba:da:25:ca:a6:b1:12:45:be:16:1a:fe: f6:2a:fd:bc:91:51:6f:04:b2:74:aa:0f:11:db:fc:9f:39:30: 0d:64:ba:26:e9:29:97:05:4b:be:82:69:95:28:d6:af:b1:57: 13:4e:f6:99:cc:1d:90:ee:09:77:42:93:f0:17:34:e0:39:78: 90:99:91:06:62:db:6b:39:ff:a9:8b:97:2a:4d:79:a2:ad:4b: 75:b1:f6:92:88:26:f4:1e:ab:cd:37:e5:9e:97:0b:d7:72:67: ca:fc:46:88:38:51:7a:e6:7d:9b:54:e4:dd:4b:18:36:74:6b: 5e:eb:0a:f8:2d:7f:47:f0:2a:83:bd:3c:84:da:aa:62:62:5a: 1f:83:02:52:05:bf:5b:2f:71:1d:92:2d:5e:2f:a3:9d:45:88: e9:04:2c:b2:46:1c:1d:e8:9e:0f:45:5b:92:3b:3b:75:4e:dd: 78:e7:64:2e:dc:26:7b:b2:2f:c6:4d:98:0e:03:1a:dc:fb:56: b2:ac:01:aa:8d:32:b0:ad:e3:a0:ce:bb:98:25:3b:0d:72:6f: 1c:6d:7b:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNrZN/6WT96TpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YjgwMWNmZTgtZTYyOS00ZDAwLTk2NGMtZmVhODE4NWQ1YmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQgXOyuEAOvDz7j/X7vO+VUT9OCpcsbY+xV+ rtFQ/1LD90QnHjMg5pnQeDQ0cO0WqLtVOSvXhFBA8zsCjB3l3JoUl0ewx0jHgnGl +4t03FrLCfIOog9+aOJkF5Y9XUlTEFF6EGvHqBVzT4UyodsOZ8lARfsKNS2Ft9Fj PWrWjnj/VZm40KH4L/5Re/l6C9+KV87PU9xWRch7GVYu5oStKNYxRqcSc/MDuFKs LtGIvbqKqCXodNCHDyAh/WfG42MI5ZS1Y0n0Idpb5Oh8F5Cnh9tbxT7R3cHXQtcz B4lcBjICpUUjsO6osh1y0sigjyoc1ejL6nkRSeZ/y/79vQ0sMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP6hdqJ67kk+LXzHKMFajwaLfA42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE4YjNmN2MtMDNmZi0z MWE4LTkzZjItMTNhODIyYTM5ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIj7wuQ9oMPayUb8l0W4HOpoBSlqneYKVOtb4v4dqSuzlGorAgzJ MbDXjrraJcqmsRJFvhYa/vYq/byRUW8EsnSqDxHb/J85MA1kuibpKZcFS76CaZUo 1q+xVxNO9pnMHZDuCXdCk/AXNOA5eJCZkQZi22s5/6mLlypNeaKtS3Wx9pKIJvQe q8035Z6XC9dyZ8r8Rog4UXrmfZtU5N1LGDZ0a17rCvgtf0fwKoO9PITaqmJiWh+D AlIFv1svcR2SLV4vo51FiOkELLJGHB3ong9FW5I7O3VO3XjnZC7cJnuyL8ZNmA4D Gtz7VrKsAaqNMrCt46DOu5glOw1ybxxte5I= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:04 2025 by rpki-client