$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa File: 395070d7-7c1d-31e6-86b7-6c9e71756816.roa (raw, json) Hash identifier: L/OKt7HmqkwuDzZyB4hALXNlz4+4e6msC0ZuGIshJCw= Subject key identifier: C1:04:AF:6C:3E:AB:61:F6:52:B7:66:01:FE:EE:A8:86:D8:6B:52:C7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B3DB6FEF558283558DE8E9140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 396544 IP address blocks: 2001:503:39c1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:fe:f5:58:28:35:58:de:8e:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=56941957-5d3c-4d94-9a0a-d36ec65b6150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a7:70:66:0a:dd:00:03:8f:60:d3:18:df:6a: 8b:75:04:64:4d:28:29:6e:86:12:52:ab:62:e9:dc: cc:1b:f9:73:87:cc:ed:17:7e:52:6b:e2:bf:a8:da: ca:35:f1:34:f4:3e:6f:8f:e3:48:d3:24:2f:ef:50: df:86:e2:c7:73:2a:7d:ac:08:e4:28:b0:d4:91:07: f6:db:b1:70:7a:6c:84:23:83:68:58:ae:e0:d8:1e: c3:1c:1f:03:9a:cd:b6:24:70:cc:64:a4:82:01:ec: 06:03:ae:da:ee:fd:bd:17:49:36:b8:03:4d:f3:9e: ae:2d:39:28:6b:dd:b1:9f:e7:83:76:8f:fb:ba:94: 56:e4:c0:1d:8d:10:53:1d:e9:3c:04:75:e3:04:1e: fe:98:cb:7b:42:4c:b3:85:84:54:9b:76:5e:12:7d: 1c:8f:bf:bc:41:44:7c:af:c4:a4:37:84:54:84:43: 97:cc:7e:93:4a:0d:27:3e:1d:1f:1d:5a:90:71:e4: b0:11:8a:71:e1:dc:94:36:db:17:bb:06:f9:a9:a0: 93:a3:91:d7:85:df:74:1e:bb:58:93:18:f1:17:ad: 10:d8:38:a7:20:e8:c3:cf:bf:a9:53:34:9b:e8:29: eb:64:1f:99:9c:95:de:2e:a3:49:03:66:96:46:58: c5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:04:AF:6C:3E:AB:61:F6:52:B7:66:01:FE:EE:A8:86:D8:6B:52:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:39c1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b5:ba:c4:f2:86:32:b7:df:27:a4:80:75:d4:a7:80:8f:d4: 38:6f:93:34:85:b5:f2:ab:ab:0e:d5:68:99:dc:01:4a:7f:7a: 43:50:3d:f4:8f:ae:72:de:dc:95:94:2f:8b:8a:fa:79:32:db: 88:88:f8:db:bd:5d:82:2f:46:99:ea:97:ab:73:1a:76:d9:00: 96:f6:4d:f2:7a:91:7f:9b:61:c2:c2:0c:3f:63:d7:7e:12:58: a4:81:26:8d:67:28:35:66:f7:06:49:05:57:87:f5:b6:db:d0: 52:64:e8:02:59:41:78:f2:e7:24:67:15:d9:90:b0:2d:05:28: 27:95:a6:bd:e6:60:81:e7:63:a6:1c:9d:ef:be:77:34:b9:2b: 8b:58:5d:82:1e:71:cf:1b:a2:cb:81:cc:2a:ee:3a:32:0f:eb: 25:c4:81:0e:58:70:43:f4:ea:29:1a:a2:74:b4:0c:f5:8a:06: 50:f3:f2:d2:bb:09:8d:87:76:a7:6c:65:6b:5e:60:95:80:d0: e8:9e:db:ce:a5:15:26:46:1d:67:45:4c:a5:1c:06:1c:03:f2: 15:92:1b:d7:c9:36:77:d7:00:01:d8:fd:c0:da:46:6d:ab:65: 73:d2:c6:ce:8e:84:8f:69:a4:ff:b3:af:d9:99:86:b0:99:ac: b9:33:49:10 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs9tv71WCg1WN6OkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTY5NDE5NTctNWQzYy00ZDk0LTlhMGEtZDM2ZWM2NWI2MTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKdwZgrdAAOPYNMY32qLdQRkTSgpboYSUqti 6dzMG/lzh8ztF35Sa+K/qNrKNfE09D5vj+NI0yQv71DfhuLHcyp9rAjkKLDUkQf2 27FwemyEI4NoWK7g2B7DHB8Dms22JHDMZKSCAewGA67a7v29F0k2uANN856uLTko a92xn+eDdo/7upRW5MAdjRBTHek8BHXjBB7+mMt7QkyzhYRUm3ZeEn0cj7+8QUR8 r8SkN4RUhEOXzH6TSg0nPh0fHVqQceSwEYpx4dyUNtsXuwb5qaCTo5HXhd90HrtY kxjxF60Q2DinIOjDz7+pUzSb6CnrZB+ZnJXeLqNJA2aWRljF8wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMEEr2w+q2H2UrdmAf7uqIbYa1LHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzk1MDcwZDctN2MxZC0z MWU2LTg2YjctNmM5ZTcxNzU2ODE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBBtbrE8oYyt98npIB11KeAj9Q4b5M0hbXyq6sO 1WiZ3AFKf3pDUD30j65y3tyVlC+Livp5MtuIiPjbvV2CL0aZ6percxp22QCW9k3y epF/m2HCwgw/Y9d+ElikgSaNZyg1ZvcGSQVXh/W229BSZOgCWUF48uckZxXZkLAt BSgnlaa95mCB52OmHJ3vvnc0uSuLWF2CHnHPG6LLgcwq7joyD+slxIEOWHBD9Oop GqJ0tAz1igZQ8/LSuwmNh3anbGVrXmCVgNDontvOpRUmRh1nRUylHAYcA/IVkhvX yTZ31wAB2P3A2kZtq2Vz0sbOjoSPaaT/s6/ZmYawmay5M0kQ -----END CERTIFICATE-----Generated at Mon Oct 20 09:33:28 2025 by rpki-client