$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dff4011-bc95-3617-a88d-1a4165933b49.roa File: 4dff4011-bc95-3617-a88d-1a4165933b49.roa (raw, json) Hash identifier: RuR1i/9XxkCEi2aLjSBmy5Gcl6nxYYqloTLaA41r1Fo= Subject key identifier: 54:2C:B2:88:E1:EA:4D:C1:91:CA:3F:FF:87:3E:E4:B9:93:F8:E4:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B52A77FB00B5D1C28171C3100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dff4011-bc95-3617-a88d-1a4165933b49.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 36627 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:7f:b0:0b:5d:1c:28:17:1c:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=4f296b0d-0b00-4222-9bd9-a7beb2db1778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:54:bc:3a:52:4b:97:d0:2a:fc:b1:85:e8: c0:72:36:76:5e:3e:33:74:ed:26:e6:cd:ce:9e:a3: 30:53:f7:af:31:63:7b:3c:f1:5a:7c:a7:fb:b1:99: bb:c1:b7:b0:50:7e:f0:09:bb:24:53:23:c7:9d:21: 47:e5:8f:c7:90:a0:e5:2b:9a:dc:02:2a:e4:62:ed: 89:af:cc:c5:08:ad:bf:91:fc:94:d8:fe:8a:73:99: d3:de:67:8b:f4:8f:74:42:2e:71:8d:58:52:e6:c6: 63:7d:80:13:e9:48:3d:87:cb:c8:1b:5f:43:5c:10: 74:52:c7:7e:03:a3:51:63:14:34:f4:1f:da:e9:07: c2:1b:77:f7:1f:f5:0f:90:f7:71:b3:b2:34:ae:a7: 17:74:c7:96:01:93:c4:25:8a:54:fd:3b:48:41:1c: e5:1f:42:33:17:d9:29:99:ce:2b:24:1b:4b:0c:76: 3b:39:e1:77:df:d7:13:dc:2c:44:f1:e4:32:61:fc: e6:60:2c:49:a0:fc:44:56:fd:1a:87:a3:1e:ad:8a: 06:3f:e6:c8:ae:73:b2:f3:e5:37:e1:c7:5c:21:ff: bd:5a:1f:e8:3e:cd:52:4d:e1:02:8d:2d:98:ed:dd: 5c:0a:cc:e5:e5:52:19:6e:42:16:85:8f:90:ed:2e: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2C:B2:88:E1:EA:4D:C1:91:CA:3F:FF:87:3E:E4:B9:93:F8:E4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dff4011-bc95-3617-a88d-1a4165933b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:be:a7:49:cd:e8:8c:dc:31:e4:ea:77:08:b2:d9:15:b9:42: 19:ad:34:17:89:f1:c0:ff:43:ce:a6:11:e2:50:f4:51:98:93: 8a:8d:77:80:13:05:9d:3f:ec:3f:65:9f:55:d5:c4:a4:26:f4: c9:da:b8:14:e2:e3:74:32:ce:f5:ec:90:72:33:3d:44:52:a3: fb:84:dc:5c:04:a5:ca:1d:72:1b:81:c4:14:3b:9c:2f:8e:f1: 16:a4:b8:74:9f:42:ed:e7:8a:4b:d6:20:c3:fd:08:32:86:1d: 7c:93:0b:d3:3f:b1:15:72:8b:a5:a8:83:35:a4:ef:a7:4f:74: f9:41:d5:3c:8a:d6:e2:2c:72:59:e1:a7:4e:ba:16:78:e5:c3: cc:da:e3:f4:ab:6b:0d:6a:b7:84:7f:a7:3c:16:1e:8d:50:47: 5e:7f:a0:64:ee:a6:f8:96:e9:6f:3f:76:52:4c:7b:24:b4:8e: 1d:1e:b9:0d:eb:49:a0:9b:a0:3d:21:67:18:97:6b:ad:4d:7a: 9d:a3:d3:4d:d0:02:b8:4b:e9:7e:38:a8:6e:9d:10:69:9c:1a: 92:ad:07:92:51:51:30:26:f3:2f:14:91:60:98:d7:52:76:e4: 5a:17:89:64:b2:05:e9:62:7f:96:ad:b3:2f:41:d2:f0:7f:0b: 1c:d0:bd:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp3+wC10cKBccMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NGYyOTZiMGQtMGIwMC00MjIyLTliZDktYTdiZWIyZGIxNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0txUvDpSS5fQKvyxhejAcjZ2Xj4zdO0m5s3O nqMwU/evMWN7PPFafKf7sZm7wbewUH7wCbskUyPHnSFH5Y/HkKDlK5rcAirkYu2J r8zFCK2/kfyU2P6Kc5nT3meL9I90Qi5xjVhS5sZjfYAT6Ug9h8vIG19DXBB0Usd+ A6NRYxQ09B/a6QfCG3f3H/UPkPdxs7I0rqcXdMeWAZPEJYpU/TtIQRzlH0IzF9kp mc4rJBtLDHY7OeF339cT3CxE8eQyYfzmYCxJoPxEVv0ah6MerYoGP+bIrnOy8+U3 4cdcIf+9Wh/oPs1STeECjS2Y7d1cCszl5VIZbkIWhY+Q7S68YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFQssojh6k3Bkco//4c+5LmT+OR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGRmZjQwMTEtYmM5NS0z NjE3LWE4OGQtMWE0MTY1OTMzYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB2+p0nN6IzcMeTqdwiy2RW5QhmtNBeJ8cD/Q86mEeJQ9FGYk4qN d4ATBZ0/7D9ln1XVxKQm9MnauBTi43QyzvXskHIzPURSo/uE3FwEpcodchuBxBQ7 nC+O8RakuHSfQu3nikvWIMP9CDKGHXyTC9M/sRVyi6WogzWk76dPdPlB1TyK1uIs clnhp066Fnjlw8za4/Sraw1qt4R/pzwWHo1QR15/oGTupviW6W8/dlJMeyS0jh0e uQ3rSaCboD0hZxiXa61Nep2j003QArhL6X44qG6dEGmcGpKtB5JRUTAm8y8UkWCY 11J25FoXiWSyBelif5atsy9B0vB/CxzQvZM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:49 2025 by rpki-client