$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4558cb58-76dc-32fb-b9be-a430e2a8e160.roa File: 4558cb58-76dc-32fb-b9be-a430e2a8e160.roa (raw, json) Hash identifier: fTryzmkxVA9E4PGgdgnmwhLclZ4Hv2ViCZ+uohnA9vo= Subject key identifier: 02:3E:50:8A:A1:9D:0B:1C:6C:EB:3C:E2:0F:AE:B7:F0:8E:83:5D:F7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B79BCD54C5F13A7ACC48E28C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4558cb58-76dc-32fb-b9be-a430e2a8e160.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 396706 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:d5:4c:5f:13:a7:ac:c4:8e:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=def74f0e-ef37-414c-8679-32632d7b6d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:4b:b7:20:9c:83:6c:53:88:3c:8e:fd:20: be:26:1a:12:e4:78:18:22:eb:54:e1:53:03:29:88: 46:48:f6:81:55:63:aa:31:56:28:75:ce:6f:8c:f1: 48:49:11:ad:c0:f3:e5:df:6c:a3:a2:03:12:bb:15: a2:35:13:03:1b:1b:b9:83:40:b6:74:26:5c:f7:90: 35:84:fb:96:bd:28:71:c8:93:ab:da:68:4c:2a:ac: 45:57:15:42:28:47:a3:e9:e7:eb:c4:0a:9e:08:2a: cb:15:c4:26:86:93:9d:f6:8e:53:cd:59:ed:b8:d1: a2:ac:43:74:5e:f8:c8:5f:d1:e0:62:d0:3b:ea:28: 77:1b:fe:a1:22:a8:36:3a:5c:fb:d0:aa:43:69:4a: af:3c:da:32:d6:28:7b:a6:dc:03:67:1e:3a:fa:2f: 46:9c:af:59:34:f2:6d:33:e0:f8:b8:78:48:c7:85: e7:63:d2:b2:fd:b9:37:f3:be:5a:8c:34:62:ed:4e: 2a:c9:d6:f0:d0:76:c0:50:17:be:9f:16:72:15:0a: cb:a4:da:01:b9:32:7f:f0:58:db:4c:e9:c7:e4:1b: 08:2b:87:cd:e6:84:42:a7:d9:5f:72:28:e1:70:bd: 79:00:a2:71:0e:07:ca:23:48:73:48:22:4f:14:0e: cf:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3E:50:8A:A1:9D:0B:1C:6C:EB:3C:E2:0F:AE:B7:F0:8E:83:5D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4558cb58-76dc-32fb-b9be-a430e2a8e160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:61:c5:36:7e:4d:70:eb:63:de:2b:3b:50:b8:23:b5:7f:26: 00:0f:3f:67:79:bf:e3:12:31:a2:e5:7d:62:9f:64:a6:b7:ba: d5:92:55:fe:93:08:75:5b:d1:76:4a:48:90:1c:2e:64:8d:23: ee:ac:e2:23:84:04:7e:e3:38:1f:e8:d8:7f:09:d6:4f:7f:b7: 2c:32:f9:1c:02:97:4e:7e:d6:2d:31:2b:d0:d0:a3:1f:4a:a5: 91:94:53:c9:41:8d:2c:fe:1b:0a:5c:e6:68:6c:5c:10:97:ae: 7c:d7:e7:7c:58:c1:6e:5e:ea:36:d1:dc:85:9a:76:2c:e3:96: 81:da:9d:00:19:82:1f:06:18:39:b7:46:20:fd:6c:7f:ef:66: 73:a4:d6:e7:4d:42:55:8c:d2:d1:48:6e:30:28:49:0b:96:aa: 55:35:4c:1c:bf:8b:f4:3c:45:17:d8:d6:f3:31:b5:b3:e1:14: 87:f7:7d:a2:50:94:25:69:03:34:a5:c4:b7:87:c6:6f:75:97: f8:c1:45:11:7d:84:41:6c:b5:c9:58:40:a2:fc:d7:a5:87:76: f6:a2:1d:48:0d:9f:3d:30:cd:1f:60:8c:e2:f8:32:cd:03:38: 44:f4:e3:0c:44:1d:22:2a:b9:bc:2b:76:50:fc:48:75:63:b0: 08:f8:9d:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNVMXxOnrMSOKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk ZGVmNzRmMGUtZWYzNy00MTRjLTg2NzktMzI2MzJkN2I2ZDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXpLtyCcg2xTiDyO/SC+JhoS5HgYIutU4VMD KYhGSPaBVWOqMVYodc5vjPFISRGtwPPl32yjogMSuxWiNRMDGxu5g0C2dCZc95A1 hPuWvShxyJOr2mhMKqxFVxVCKEej6efrxAqeCCrLFcQmhpOd9o5TzVntuNGirEN0 XvjIX9HgYtA76ih3G/6hIqg2Olz70KpDaUqvPNoy1ih7ptwDZx46+i9GnK9ZNPJt M+D4uHhIx4XnY9Ky/bk3875ajDRi7U4qydbw0HbAUBe+nxZyFQrLpNoBuTJ/8Fjb TOnH5BsIK4fN5oRCp9lfcijhcL15AKJxDgfKI0hzSCJPFA7PVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAI+UIqhnQscbOs84g+ut/COg133MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDU1OGNiNTgtNzZkYy0z MmZiLWI5YmUtYTQzMGUyYThlMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVhxTZ+TXDrY94rO1C4I7V/JgAPP2d5v+MSMaLlfWKfZKa3utWS Vf6TCHVb0XZKSJAcLmSNI+6s4iOEBH7jOB/o2H8J1k9/tywy+RwCl05+1i0xK9DQ ox9KpZGUU8lBjSz+Gwpc5mhsXBCXrnzX53xYwW5e6jbR3IWadizjloHanQAZgh8G GDm3RiD9bH/vZnOk1udNQlWM0tFIbjAoSQuWqlU1TBy/i/Q8RRfY1vMxtbPhFIf3 faJQlCVpAzSlxLeHxm91l/jBRRF9hEFstclYQKL816WHdvaiHUgNnz0wzR9gjOL4 Ms0DOET04wxEHSIqubwrdlD8SHVjsAj4nbM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:53 2025 by rpki-client