$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa File: 20e17f2e-bf76-3f84-968d-dc8984797231.roa (raw, json) Hash identifier: Vyhc15zZYEhPskfnfz6uf6PS/0sHwgQKW9qAEXufrVg= Subject key identifier: 85:EA:B2:7E:3C:5A:CF:A5:EA:87:59:61:08:54:5C:32:DD:6B:51:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B83820532F759F2F74E883400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa Signing time: Tue 14 Oct 2025 01:00:30 +0000 ROA not before: Tue 14 Oct 2025 01:00:30 +0000 ROA not after: Mon 12 Jan 2026 02:00:30 +0000 asID: 396564 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:83:82:05:32:f7:59:f2:f7:4e:88:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 14 01:00:30 2025 GMT Not After : Jan 12 02:00:30 2026 GMT Subject: CN=8fdd2d7b-63ec-4474-853c-e89c766e8de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f7:e7:52:87:eb:ea:fd:5a:43:17:52:a5:72: 06:70:a8:cf:fd:bc:98:23:95:17:96:88:6e:2e:3c: 16:a9:19:04:73:91:6f:ca:aa:57:87:0c:e3:0c:92: 50:e9:4a:de:57:87:9a:13:29:1d:31:1a:45:72:27: 26:e2:74:5a:58:40:f2:e1:f2:fa:72:08:ce:b0:56: 42:a4:10:65:2a:ac:b0:4d:45:8a:fe:ff:18:f0:ac: 89:6d:05:87:f0:c2:7b:ca:af:0c:62:f1:6c:7d:c2: 60:0d:e5:9c:05:73:8a:49:12:28:0c:23:11:57:b4: 64:65:66:2f:56:89:5a:82:ce:5f:71:72:3c:ee:87: 5b:d9:33:8a:be:a0:db:a1:3a:64:3b:6c:60:11:c9: 8b:7e:dd:67:40:ae:2f:ad:0c:75:60:95:a6:14:2c: 62:09:a5:a5:bd:10:d9:e1:39:35:90:e0:b0:ca:0c: d7:2d:9b:c4:d5:34:1e:67:88:03:c0:01:b6:72:bc: 0c:44:30:34:4b:32:ed:9d:cf:02:09:80:d9:df:82: b1:df:90:11:50:26:9b:01:02:44:96:1b:b3:dc:b1: cb:80:52:bf:5a:1a:6f:ce:c6:8d:9d:c9:b8:fa:40: c8:9c:e3:0f:b3:86:ec:1f:1d:6d:af:17:90:a8:a9: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:B2:7E:3C:5A:CF:A5:EA:87:59:61:08:54:5C:32:DD:6B:51:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20e17f2e-bf76-3f84-968d-dc8984797231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:31:73:1f:4b:1f:01:1c:d9:8f:fd:c5:59:3a:30:b5:0e:4a: 53:7a:17:88:98:bd:cd:82:fb:01:6f:cd:81:08:e1:48:47:7b: 37:6b:b0:20:a5:66:2b:4d:9a:8c:20:94:c0:6f:ff:22:e2:f2: 1a:b2:67:fe:cd:c5:6f:db:b4:33:1a:f2:17:a0:7b:9b:b5:4c: ad:85:47:4d:40:12:b9:60:e9:70:3f:40:48:b7:3b:7a:b9:42: 25:79:61:73:a2:0a:67:f2:36:d9:17:37:81:c2:ed:34:81:4a: a1:1e:79:c2:f8:10:44:9d:13:2f:97:5b:00:a3:5e:af:ab:6d: 62:ed:dd:17:fe:69:3d:7a:b8:b9:06:54:2c:94:dc:a7:18:8e: 96:34:a7:17:09:a6:92:37:0f:d0:ac:17:0b:17:51:25:d0:66: 83:57:97:b3:60:c9:e9:af:97:b7:81:be:0e:65:4f:fb:33:10: bb:12:cd:71:ff:a4:7b:b1:c1:12:dc:f1:f6:c7:e2:b9:cf:eb: aa:98:dc:fb:cc:9c:07:c3:94:af:1e:41:94:10:62:26:ea:30: 99:bb:d1:07:55:df:dd:60:8c:66:b3:d7:b0:d3:e3:75:d5:cc: 4b:2a:f1:79:d5:3b:e7:17:ac:2a:b2:ec:ec:eb:5d:da:b7:4c: af:a9:29:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuDggUy91ny906INAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxNDAxMDAzMFoXDTI2MDExMjAyMDAzMFowLzEtMCsGA1UEAxMk OGZkZDJkN2ItNjNlYy00NDc0LTg1M2MtZTg5Yzc2NmU4ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vfnUofr6v1aQxdSpXIGcKjP/byYI5UXlohu LjwWqRkEc5FvyqpXhwzjDJJQ6UreV4eaEykdMRpFcicm4nRaWEDy4fL6cgjOsFZC pBBlKqywTUWK/v8Y8KyJbQWH8MJ7yq8MYvFsfcJgDeWcBXOKSRIoDCMRV7RkZWYv Volags5fcXI87odb2TOKvqDboTpkO2xgEcmLft1nQK4vrQx1YJWmFCxiCaWlvRDZ 4Tk1kOCwygzXLZvE1TQeZ4gDwAG2crwMRDA0SzLtnc8CCYDZ34Kx35ARUCabAQJE lhuz3LHLgFK/WhpvzsaNncm4+kDInOMPs4bsHx1trxeQqKkIjwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIXqsn48Ws+l6odZYQhUXDLda1FlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjBlMTdmMmUtYmY3Ni0z Zjg0LTk2OGQtZGM4OTg0Nzk3MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwxcx9LHwEc2Y/9xVk6MLUOSlN6F4iYvc2C+wFvzYEI4UhHezdr sCClZitNmowglMBv/yLi8hqyZ/7NxW/btDMa8hege5u1TK2FR01AErlg6XA/QEi3 O3q5QiV5YXOiCmfyNtkXN4HC7TSBSqEeecL4EESdEy+XWwCjXq+rbWLt3Rf+aT16 uLkGVCyU3KcYjpY0pxcJppI3D9CsFwsXUSXQZoNXl7Ngyemvl7eBvg5lT/szELsS zXH/pHuxwRLc8fbH4rnP66qY3PvMnAfDlK8eQZQQYibqMJm70QdV391gjGaz17DT 43XVzEsq8XnVO+cXrCqy7OzrXdq3TK+pKXE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:36 2025 by rpki-client