$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22a1af05-e68a-3734-819c-f5e3d289c46e.roa File: 22a1af05-e68a-3734-819c-f5e3d289c46e.roa (raw, json) Hash identifier: 3c5xZThcePKaeWfrnjAvB7ZG2aktFRS6N2osXm+Akik= Subject key identifier: 82:25:73:16:CF:43:EC:24:A4:D7:75:0F:7D:77:A4:F3:15:5A:6F:C1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCCD9E30FE1A29E5ED3800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22a1af05-e68a-3734-819c-f5e3d289c46e.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 397195 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:cd:9e:30:fe:1a:29:e5:ed:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=84c8eeea-770f-4ace-9cac-d941215dd47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4c:0f:01:f8:21:a7:10:c6:57:b9:c6:27:53: 1a:99:17:e9:a4:fc:cb:29:98:ee:a0:ad:1a:8f:82: 74:b0:fe:7f:f1:98:bc:81:a9:71:b5:37:c1:74:95: d5:65:cd:85:bc:53:38:d2:12:1b:29:ef:35:c3:29: 27:87:a7:b9:d7:02:86:cf:00:b0:57:99:82:a1:6d: 5b:87:85:1d:3a:f3:8c:8c:16:d0:6e:69:e2:93:6b: f3:d2:aa:b0:0d:59:bb:3b:08:9a:d2:ee:02:81:df: 15:0a:f0:8b:69:03:d0:ab:5a:e2:1a:61:69:2a:5e: b0:47:ce:26:75:ad:4e:29:e9:2b:da:e9:56:24:f1: de:ec:2f:be:48:4e:46:4c:4e:f9:6f:64:b4:ff:fe: 69:a5:d3:96:7b:0f:84:0a:7f:d1:42:aa:35:83:c4: 6e:b6:f1:a9:f1:c9:3c:7a:42:67:21:2c:06:ab:47: ef:55:a7:83:f4:f8:b4:2a:c9:f9:9d:8e:2c:a6:a6: 47:81:c9:6d:da:26:50:43:ca:92:7f:15:e8:b2:48: 36:44:8b:e4:0e:80:e0:b6:72:10:c0:a7:b8:a3:ee: f3:97:97:c8:41:8d:e4:0f:23:b2:8a:96:0a:8a:65: 83:1b:74:01:c3:d6:da:29:ab:ea:01:7e:f9:a2:03: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:25:73:16:CF:43:EC:24:A4:D7:75:0F:7D:77:A4:F3:15:5A:6F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22a1af05-e68a-3734-819c-f5e3d289c46e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:33:82:a4:e5:82:c8:a3:99:59:e1:69:8c:d4:ed:3d:cb:a7: 0f:31:62:15:43:e8:61:a9:81:cd:30:21:b1:e8:73:fb:7a:40: 72:30:04:f7:ed:a6:b8:f4:5b:30:0a:ed:f8:f1:cd:d8:13:a4: 05:c6:6d:22:3b:c5:91:e1:e6:9c:cc:8b:ae:3e:6b:8b:48:fb: ef:e1:c5:1d:08:f3:0e:ad:d5:2b:1a:c7:ac:47:ce:cb:16:73: 3d:95:7b:6e:98:9e:31:0d:c6:57:88:49:11:b9:95:c1:6f:73: bc:0d:ff:e5:e6:eb:81:9c:d9:30:68:a1:b4:f8:4b:60:b1:ec: 07:d3:7b:6e:b4:63:b2:d5:04:42:e5:7a:b3:7d:ba:fe:2d:64: 56:a3:61:2b:d0:dc:6e:6d:a2:52:79:3a:d3:19:bf:5e:83:b1: 62:f6:fa:5c:62:86:94:44:8f:d9:29:0e:40:aa:25:02:0e:a0: fd:f2:a1:69:ed:00:06:74:a1:a4:5d:fb:6d:b0:ec:14:a5:92: 8d:5b:66:60:7c:ff:64:5e:61:86:b1:93:21:e1:c9:99:83:2d: fa:59:62:db:cb:a3:58:6d:d1:11:91:ec:78:12:ba:50:70:e1: 4b:20:a9:52:08:08:f9:0b:6b:e8:de:8a:13:62:a0:2e:5b:0b: 72:57:cf:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vM2eMP4aKeXtOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ODRjOGVlZWEtNzcwZi00YWNlLTljYWMtZDk0MTIxNWRkNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUwPAfghpxDGV7nGJ1MamRfppPzLKZjuoK0a j4J0sP5/8Zi8galxtTfBdJXVZc2FvFM40hIbKe81wyknh6e51wKGzwCwV5mCoW1b h4UdOvOMjBbQbmnik2vz0qqwDVm7Owia0u4Cgd8VCvCLaQPQq1riGmFpKl6wR84m da1OKekr2ulWJPHe7C++SE5GTE75b2S0//5ppdOWew+ECn/RQqo1g8RutvGp8ck8 ekJnISwGq0fvVaeD9Pi0Ksn5nY4spqZHgclt2iZQQ8qSfxXoskg2RIvkDoDgtnIQ wKe4o+7zl5fIQY3kDyOyipYKimWDG3QBw9baKavqAX75ogNzSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIIlcxbPQ+wkpNd1D313pPMVWm/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjJhMWFmMDUtZTY4YS0z NzM0LTgxOWMtZjVlM2QyODljNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACYzgqTlgsijmVnhaYzU7T3Lpw8xYhVD6GGpgc0wIbHoc/t6QHIw BPftprj0WzAK7fjxzdgTpAXGbSI7xZHh5pzMi64+a4tI++/hxR0I8w6t1Ssax6xH zssWcz2Ve26YnjENxleISRG5lcFvc7wN/+Xm64Gc2TBoobT4S2Cx7AfTe260Y7LV BELlerN9uv4tZFajYSvQ3G5tolJ5OtMZv16DsWL2+lxihpREj9kpDkCqJQIOoP3y oWntAAZ0oaRd+22w7BSlko1bZmB8/2ReYYaxkyHhyZmDLfpZYtvLo1ht0RGR7HgS ulBw4UsgqVIICPkLa+jeihNioC5bC3JXz+c= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:20 2025 by rpki-client