$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ef67c7b-7854-3d56-8dca-3ffcef96e82e.roa File: 1ef67c7b-7854-3d56-8dca-3ffcef96e82e.roa (raw, json) Hash identifier: gGfk0MCiQ6CQY/BLoK2SiIQj3ThFkFo+JP3OPh0RQEI= Subject key identifier: C6:2A:DD:B9:6A:03:D8:16:9A:09:76:F2:E9:F7:6D:D1:54:4D:EA:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCDCAC86B4D36F4272A400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ef67c7b-7854-3d56-8dca-3ffcef96e82e.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 36620 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:dc:ac:86:b4:d3:6f:42:72:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=1b8d4286-181c-456c-89c1-9c4a58cde7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:da:32:7b:80:b4:a2:e2:f4:f9:99:aa:fc: 49:84:37:af:65:72:8e:ab:bb:c2:a3:d7:9c:9c:2c: 60:1e:be:da:ec:bb:c8:d0:78:2e:d0:f6:a7:be:84: e6:a1:cb:54:78:78:d3:6e:da:84:01:90:50:b0:74: 79:21:36:2f:ed:b4:9c:ac:aa:5a:ad:d8:4c:9d:df: 6e:f9:10:33:5b:68:2b:af:dc:51:01:0a:19:e7:e9: 4b:96:f5:96:88:2d:f3:db:12:3d:43:ec:95:45:a7: 9f:f7:2d:c7:d2:b7:37:5f:e7:b7:6a:5b:38:d2:d2: 8b:d3:92:d7:63:58:12:f8:64:9e:82:2f:e9:03:20: 0e:d1:f2:c3:51:5d:fd:a9:6f:e1:dd:c6:a9:87:3c: 1d:64:46:4c:0f:61:c1:a5:84:1c:7b:52:e1:62:94: 6b:89:01:f0:bc:44:4a:a0:bf:75:df:c8:04:fd:2e: 12:f7:09:13:88:d7:db:02:d5:5d:7a:2d:bd:e1:2b: 5a:3a:eb:f8:b3:21:37:22:92:18:6e:26:55:22:71: 96:54:76:2b:58:b9:e7:e0:99:fe:23:a6:9c:bc:7b: 69:80:f6:a0:12:5f:21:6c:60:75:d6:a1:eb:e5:08: ee:44:96:31:5c:a5:8d:e1:d5:ef:b6:f8:fc:ef:f9: 5a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2A:DD:B9:6A:03:D8:16:9A:09:76:F2:E9:F7:6D:D1:54:4D:EA:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ef67c7b-7854-3d56-8dca-3ffcef96e82e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:3b:29:4c:74:a3:11:64:65:69:05:a1:ae:13:b5:67:07:17: ee:87:6d:a3:52:db:30:58:f1:c7:04:2c:82:fb:a7:a4:6c:d4: d8:a8:d4:70:4d:2d:1f:15:de:ff:35:f2:df:62:37:03:7f:ff: 39:bd:a2:21:f6:b3:a0:58:4f:8d:ca:fe:e8:60:e0:5d:c0:66: d4:bd:bf:e5:3f:7e:6d:d9:df:b0:ba:49:64:fd:a1:15:a5:41: 94:e4:75:3b:8e:8f:9a:ab:b7:9c:c7:fd:e0:50:4b:13:0d:34: 64:ff:07:56:56:ba:b4:04:1c:ad:b9:24:43:09:3e:42:bc:e5: 99:50:79:fe:4d:cd:9e:63:46:75:fb:eb:15:6a:51:0c:fc:f6: 73:bf:17:28:bc:36:26:5a:e4:b3:9d:a4:a7:1a:57:80:40:ae: aa:ef:56:ef:c8:4a:8c:a6:9a:d3:48:b1:40:a5:e0:54:b4:ad: 54:b6:52:2d:8d:d2:42:ef:55:40:51:00:9c:ea:2b:97:38:fc: b9:cf:60:81:8f:b7:96:cb:a9:8f:b5:6a:d1:b7:62:f6:fe:c6: 95:20:51:83:84:19:44:db:87:02:01:dd:cc:14:e0:e6:69:88: 09:fd:08:2a:7d:34:0d:ad:c3:ee:37:e8:8b:5c:dd:c2:7e:b0: 95:d2:c9:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNyshrTTb0JypAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MWI4ZDQyODYtMTgxYy00NTZjLTg5YzEtOWM0YTU4Y2RlN2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AjaMnuAtKLi9PmZqvxJhDevZXKOq7vCo9ec nCxgHr7a7LvI0Hgu0PanvoTmoctUeHjTbtqEAZBQsHR5ITYv7bScrKpardhMnd9u +RAzW2grr9xRAQoZ5+lLlvWWiC3z2xI9Q+yVRaef9y3H0rc3X+e3als40tKL05LX Y1gS+GSegi/pAyAO0fLDUV39qW/h3caphzwdZEZMD2HBpYQce1LhYpRriQHwvERK oL9138gE/S4S9wkTiNfbAtVdei294StaOuv4syE3IpIYbiZVInGWVHYrWLnn4Jn+ I6acvHtpgPagEl8hbGB11qHr5QjuRJYxXKWN4dXvtvj87/laawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMYq3blqA9gWmgl28un3bdFUTereMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWVmNjdjN2ItNzg1NC0z ZDU2LThkY2EtM2ZmY2VmOTZlODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKU7KUx0oxFkZWkFoa4TtWcHF+6HbaNS2zBY8ccELIL7p6Rs1Nio 1HBNLR8V3v818t9iNwN//zm9oiH2s6BYT43K/uhg4F3AZtS9v+U/fm3Z37C6SWT9 oRWlQZTkdTuOj5qrt5zH/eBQSxMNNGT/B1ZWurQEHK25JEMJPkK85ZlQef5NzZ5j RnX76xVqUQz89nO/Fyi8NiZa5LOdpKcaV4BArqrvVu/ISoymmtNIsUCl4FS0rVS2 Ui2N0kLvVUBRAJzqK5c4/LnPYIGPt5bLqY+1atG3Yvb+xpUgUYOEGUTbhwIB3cwU 4OZpiAn9CCp9NA2tw+436Itc3cJ+sJXSybg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:28 2025 by rpki-client