$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b5b239-338d-302b-9f90-5098c1140535.roa File: 21b5b239-338d-302b-9f90-5098c1140535.roa (raw, json) Hash identifier: fgI0S7jqGmcj7MT7aNnse5lWbYszydUFrur0mBEU/As= Subject key identifier: 0C:6B:7F:8D:40:49:3A:88:9B:AD:33:32:8B:63:76:D7:51:AB:BC:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D304B61CA468ED683980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b5b239-338d-302b-9f90-5098c1140535.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 397207 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d3:04:b6:1c:a4:68:ed:68:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=5eb08240-0d20-40e7-bb1e-f05bfebe2e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:09:f5:2c:9e:e6:9a:ad:d1:06:f6:2f:5c: 36:e5:e9:9c:5b:e6:37:69:19:5c:2b:07:cd:11:5e: 02:b4:a6:14:06:46:c2:19:c8:c3:43:77:48:8d:f1: f6:a9:72:85:a1:cd:3a:83:a7:43:0d:32:de:40:d3: 64:6b:b8:a4:de:8e:2e:0c:da:22:11:42:ad:4a:43: 7e:3e:e6:0c:19:ad:97:ec:1c:71:26:6d:b7:22:75: 3a:9a:a6:ad:a6:2e:49:af:cf:8b:2d:94:74:17:09: bb:0c:3c:6d:83:25:fd:ab:89:29:9c:1f:49:6f:27: 15:16:06:fa:18:91:32:72:cf:83:b0:ca:35:ba:89: 19:3a:35:b9:6e:e9:da:49:37:01:ba:2a:d2:75:89: bc:d8:44:9c:2f:76:ea:12:38:b8:ac:69:4f:a0:45: 95:d2:e0:80:5d:e7:5b:c6:31:f6:ab:0c:0d:c4:d8: 8b:21:e6:5f:66:09:5b:4e:d8:ab:18:ee:51:9b:ef: 88:4e:df:98:de:e5:06:82:73:34:6a:b9:c1:d9:7e: a1:1c:20:1a:1c:b6:ae:ee:b7:83:fb:e5:f2:da:ef: 2a:96:39:3e:02:09:c0:b1:25:9f:8c:80:ea:7e:5d: ff:c4:b0:bc:8c:3b:20:56:73:76:85:59:b3:1b:a6: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6B:7F:8D:40:49:3A:88:9B:AD:33:32:8B:63:76:D7:51:AB:BC:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b5b239-338d-302b-9f90-5098c1140535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c8:7b:a5:49:2d:be:64:2e:a9:73:1f:df:27:d7:da:53:16: 24:03:1f:2e:6b:f4:69:ca:8b:c0:9f:9f:06:4a:64:5b:99:bc: ca:38:d4:bb:40:08:ba:be:25:ef:30:f4:36:6f:4a:77:ea:de: 2f:d7:86:d3:e6:f7:ab:dd:40:44:0a:59:17:23:e3:0e:f3:18: 16:9f:0d:2f:07:ed:11:b8:6c:e2:54:43:21:29:7b:ca:24:06: 50:00:97:f3:47:cf:be:53:e7:97:68:38:56:a0:01:fb:25:41: f0:14:ad:10:78:eb:0b:e5:29:6e:31:dd:7b:31:c5:af:6f:1f: e2:39:76:3b:2a:9e:c2:87:38:54:7c:e9:05:cb:74:43:96:5c: ff:38:43:3c:fe:75:ca:21:ac:8f:18:d8:9e:97:a5:23:09:b0: 8c:66:86:0b:c2:b4:73:cb:fb:67:c7:20:29:db:ef:2a:cf:1d: 0c:e9:02:ae:4a:6f:1f:28:57:5e:81:c8:b7:9b:d2:82:77:cf: 0c:79:f5:41:c2:34:4e:e1:31:46:94:e4:0a:ea:91:1d:0a:e9: a2:62:b5:0e:21:bb:1e:d1:35:cd:6a:25:04:11:b7:5b:af:1d: e2:08:6d:c4:8b:56:b3:10:37:2b:69:8a:8f:d2:76:4e:ab:fe: a1:34:64:04 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtAgdMEthykaO1oOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NWViMDgyNDAtMGQyMC00MGU3LWJiMWUtZjA1YmZlYmUyZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkEJ9Sye5pqt0Qb2L1w25emcW+Y3aRlcKwfN EV4CtKYUBkbCGcjDQ3dIjfH2qXKFoc06g6dDDTLeQNNka7ik3o4uDNoiEUKtSkN+ PuYMGa2X7BxxJm23InU6mqatpi5Jr8+LLZR0Fwm7DDxtgyX9q4kpnB9JbycVFgb6 GJEycs+DsMo1uokZOjW5bunaSTcBuirSdYm82EScL3bqEji4rGlPoEWV0uCAXedb xjH2qwwNxNiLIeZfZglbTtirGO5Rm++ITt+Y3uUGgnM0arnB2X6hHCAaHLau7reD ++Xy2u8qljk+AgnAsSWfjIDqfl3/xLC8jDsgVnN2hVmzG6YzvwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAxrf41ASTqIm60zMotjdtdRq7wmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFiNWIyMzktMzM4ZC0z MDJiLTlmOTAtNTA5OGMxMTQwNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/yHulSS2+ZC6pcx/fJ9faUxYkAx8ua/RpyovA n58GSmRbmbzKONS7QAi6viXvMPQ2b0p36t4v14bT5ver3UBEClkXI+MO8xgWnw0v B+0RuGziVEMhKXvKJAZQAJfzR8++U+eXaDhWoAH7JUHwFK0QeOsL5SluMd17McWv bx/iOXY7Kp7ChzhUfOkFy3RDllz/OEM8/nXKIayPGNiel6UjCbCMZoYLwrRzy/tn xyAp2+8qzx0M6QKuSm8fKFdegci3m9KCd88MefVBwjRO4TFGlOQK6pEdCumiYrUO Ibse0TXNaiUEEbdbrx3iCG3Ei1azEDcraYqP0nZOq/6hNGQE -----END CERTIFICATE-----Generated at Mon Oct 20 03:58:28 2025 by rpki-client