$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24eb2ddf-8be2-3c01-bd68-806719989a0c.roa File: 24eb2ddf-8be2-3c01-bd68-806719989a0c.roa (raw, json) Hash identifier: YeNflxgAsKVd3udFZWRHwm78zvxu2Ok2zfuZNoByAGY= Subject key identifier: 57:7A:47:58:B2:8D:88:EA:C8:1D:7B:B3:EC:EC:27:ED:F3:68:F5:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD111C9914250D48C0880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24eb2ddf-8be2-3c01-bd68-806719989a0c.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396545 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d1:11:c9:91:42:50:d4:8c:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=bb23a712-2545-466c-857c-7b5c634988e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:d9:e8:a4:82:24:8b:b4:e7:d8:0f:d5:be: d2:4e:03:7d:58:67:0e:5f:c4:f6:c3:36:df:c0:10: 80:4d:e6:bb:a3:85:97:3e:f4:9d:8b:1a:4d:20:26: 59:9e:51:c4:35:2d:60:64:14:cc:6d:b8:c5:af:34: 7c:c6:0d:0b:43:5d:cc:fc:12:97:94:2f:c6:0a:cb: f3:cf:26:78:8e:ab:7a:81:29:cf:e8:eb:5f:0f:ac: e6:1a:5d:7a:ff:a7:d6:19:9b:70:b0:65:3c:d2:b3: 2d:cc:8c:0d:d3:0d:c5:b7:a0:e4:8c:52:a5:99:5d: 98:21:36:6c:e8:16:cc:7f:77:60:7e:26:42:08:af: ec:d7:ef:b4:68:64:ec:9a:0e:73:99:25:af:88:59: 91:b5:d4:98:b5:a1:87:ad:ca:d0:6d:01:76:d9:59: 47:6f:89:79:3c:fe:96:d8:d9:3c:ad:27:fd:6a:f1: 63:f5:af:00:09:61:ed:1d:12:0d:e9:ad:b7:89:04: 51:73:60:f2:ed:cb:b6:dc:5a:22:4c:3f:34:2f:df: 23:54:b8:c2:07:3e:92:8b:41:67:fc:2e:9f:0c:c7: 3d:e8:4e:9c:3f:a2:a3:9d:aa:14:f6:28:8f:a1:e4: 8e:c1:b6:4f:a2:84:cd:d9:3f:32:60:8b:9c:19:69: a0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7A:47:58:B2:8D:88:EA:C8:1D:7B:B3:EC:EC:27:ED:F3:68:F5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24eb2ddf-8be2-3c01-bd68-806719989a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fd:1d:23:39:fa:22:5e:a2:9c:5f:13:6e:e8:8f:d6:94:bc: 77:97:61:7d:cb:d6:c5:1d:3f:6a:56:4c:73:01:ad:ca:5f:0a: 83:f6:7e:94:eb:8b:f8:08:39:c2:23:9e:c6:94:dc:7b:d6:3b: 2b:11:b2:e8:0b:92:da:d6:a9:f8:50:e3:d8:b4:10:03:d6:51: db:1e:8e:e0:0d:12:de:06:10:76:c0:57:27:bd:07:95:48:60: 3c:5e:d9:b5:5e:5d:91:c7:07:81:80:74:1b:ad:12:f4:a1:c6: e4:0f:5c:89:36:a2:26:d4:eb:3e:eb:68:12:e3:c3:b0:b8:c3: 12:c4:d7:f5:cc:95:a6:0e:30:f4:27:c0:45:41:49:8c:87:1d: 81:98:df:b2:14:d6:68:30:93:62:0c:1c:ff:90:ba:9c:8d:7c: 88:18:a8:a5:d6:e9:c4:6b:f2:0c:7c:fe:18:ef:8a:1f:9f:17: d8:92:6e:af:db:ae:cb:11:dd:2c:ff:14:46:94:78:74:a6:9c: 4e:a3:67:f4:44:42:fd:ec:ba:8c:be:0c:36:f1:1f:02:70:80: 6f:e7:a3:f9:27:2a:12:75:c1:cb:6d:19:f7:a5:ae:22:22:51: 8d:26:93:73:8f:b8:db:9a:62:73:bd:c1:60:02:3c:dd:27:7e: 6e:e4:87:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNERyZFCUNSMCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk YmIyM2E3MTItMjU0NS00NjZjLTg1N2MtN2I1YzYzNDk4OGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqjZ6KSCJIu059gP1b7STgN9WGcOX8T2wzbf wBCATea7o4WXPvSdixpNICZZnlHENS1gZBTMbbjFrzR8xg0LQ13M/BKXlC/GCsvz zyZ4jqt6gSnP6OtfD6zmGl16/6fWGZtwsGU80rMtzIwN0w3Ft6DkjFKlmV2YITZs 6BbMf3dgfiZCCK/s1++0aGTsmg5zmSWviFmRtdSYtaGHrcrQbQF22VlHb4l5PP6W 2Nk8rSf9avFj9a8ACWHtHRIN6a23iQRRc2Dy7cu23FoiTD80L98jVLjCBz6Si0Fn /C6fDMc96E6cP6KjnaoU9iiPoeSOwbZPooTN2T8yYIucGWmgQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFd6R1iyjYjqyB17s+zsJ+3zaPVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjRlYjJkZGYtOGJlMi0z YzAxLWJkNjgtODA2NzE5OTg5YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFb9HSM5+iJeopxfE27oj9aUvHeXYX3L1sUdP2pWTHMBrcpfCoP2 fpTri/gIOcIjnsaU3HvWOysRsugLktrWqfhQ49i0EAPWUdsejuANEt4GEHbAVye9 B5VIYDxe2bVeXZHHB4GAdButEvShxuQPXIk2oibU6z7raBLjw7C4wxLE1/XMlaYO MPQnwEVBSYyHHYGY37IU1mgwk2IMHP+QupyNfIgYqKXW6cRr8gx8/hjvih+fF9iS bq/brssR3Sz/FEaUeHSmnE6jZ/REQv3suoy+DDbxHwJwgG/no/knKhJ1wcttGfel riIiUY0mk3OPuNuaYnO9wWACPN0nfm7kh5g= -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:47 2025 by rpki-client